About This Notice
This Privacy Notice for Lumiu ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you download and use our mobile application (Lumiu), or otherwise interact with us.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.
Summary of Key Points
What personal information do we process?
Lumiu has two tiers. If you use the free tier, we collect no personal information whatsoever — all reminder data stays on your device. If you use the paid tier, we collect your email address, reminder data, and device push notification token to provide the service.
Do we process any sensitive personal information?
We do not process sensitive personal information.
Do we collect any information from third parties?
We may collect limited information via third-party services such as Firebase Authentication and RevenueCat when you create an account or subscribe.
How do we process your information?
We process your information to provide, improve, and administer our Services, deliver push notifications, manage your subscription, and comply with law. We process your information only when we have a valid legal reason to do so.
What are your rights?
Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information. You can exercise these rights by contacting us directly.
Table of Contents
- What information do we collect?
- How do we process your information?
- When and with whom do we share your personal information?
- Do we use cookies and other tracking technologies?
- How do we handle push notifications?
- Is your information transferred internationally?
- How long do we keep your information?
- Do we collect information from minors?
- What are your privacy rights?
- Controls for Do-Not-Track features
- Do we make updates to this notice?
- How can you contact us about this notice?
- How can you review, update, or delete the data we collect from you?
1. What Information Do We Collect?
Free tier users
If you use Lumiu's free tier, no account is required and no personal information is collected, transmitted, or stored by us. All reminder data is stored locally on your device using AsyncStorage and never leaves it.
Paid tier users — information you provide
If you subscribe to Lumiu's paid tier, you will create an account. We collect the following information:
- Email address (used for authentication via Firebase)
- Reminder titles, scheduled times, and repeat settings you create
- Device push notification token (to deliver your reminders)
- Subscription status and purchase receipt data (managed via RevenueCat)
We do not collect your name, phone number, location, contacts, or any other personal data beyond what is listed above.
Information automatically collected
We automatically collect certain technical information when you use the Services, such as your IP address, device type, operating system, and usage data. This information is used solely to maintain the security and operation of our Services and for internal analytics. It does not reveal your specific identity.
Sensitive information: we do not process sensitive personal information.
2. How Do We Process Your Information?
We process your personal information for the following reasons:
- To create and manage your account
- To sync your reminders across devices (paid tier only)
- To deliver push notifications at your scheduled times
- To manage and validate your subscription
- To respond to your enquiries and provide support
- To maintain the security and proper functioning of the Services
- To comply with applicable legal obligations
3. When and With Whom Do We Share Your Personal Information?
We do not sell your personal information. We share your information only with the following third-party service providers who are necessary to operate the Services:
Firebase (Google LLC)
We use Firebase Authentication and Cloud Firestore, provided by Google LLC, for user authentication and cloud data storage in the paid tier. Data may be processed in the United States under Google's standard contractual clauses. See Google's Privacy Policy.
RevenueCat, Inc.
Subscription and in-app purchase management is handled by RevenueCat, Inc. RevenueCat processes your purchase receipt and subscription status. They do not receive your reminder content. See RevenueCat's Privacy Policy.
Expo (Expo Technology, Inc.)
Push notifications are delivered via Expo's notification infrastructure, which processes your device push token to route notifications to your device. See Expo's Privacy Policy.
Business transfers
We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
4. Do We Use Cookies and Other Tracking Technologies?
The Lumiu mobile app does not use cookies. This website does not currently use cookies for tracking or analytics purposes. If this changes, we will update this notice and obtain your consent where required.
5. How Do We Handle Push Notifications?
Delivering reminders via push notifications is the core function of Lumiu. To do this, we request permission to send you notifications and collect a device push token — a unique identifier that allows notification services to route a notification to your specific device.
Free tier users: notifications are scheduled entirely on-device using local notifications. No push token is collected or transmitted.
Paid tier users: your push token is stored in Firebase Firestore and shared with Expo's notification service solely for the purpose of delivering your reminders. It is not used for marketing or advertising.
You can withdraw notification permissions at any time in your device settings. This will prevent reminders from being delivered but will not affect your account or data.
6. Is Your Information Transferred Internationally?
Our primary infrastructure is operated via Firebase, with servers located in the European Union where possible. However, some data may be processed in the United States by Google LLC, RevenueCat, and Expo Technology. Where this occurs, we rely on standard contractual clauses and other lawful transfer mechanisms to ensure your data is protected in accordance with GDPR.
7. How Long Do We Keep Your Information?
We retain your personal information only for as long as necessary to provide the Services or as required by law. When you delete your account, your data is removed from our active databases. Some information may be retained in backup archives for a limited period before permanent deletion.
Free tier users have no data stored with us. Local data on your device can be cleared by uninstalling the app.
8. Do We Collect Information From Minors?
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services.
If we learn that personal information from users under 18 has been collected, we will deactivate the account and delete such data promptly. If you become aware of any such data, please contact us at lumiu.app@gmail.com.
9. What Are Your Privacy Rights?
Depending on your location, you may have the following rights regarding your personal information:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — request that we limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at lumiu.app@gmail.com. You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the relevant state data protection authority (Landesbeauftragter für den Datenschutz Baden-Württemberg).
Withdrawing your consent
If we are relying on your consent to process your personal information, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing before withdrawal.
Account deletion
To delete your account and all associated data, contact us at lumiu.app@gmail.com. We will process your request in accordance with applicable data protection laws.
10. Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. No uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT signals. If a standard is adopted that we must follow in the future, we will update this Privacy Notice accordingly.
11. Do We Make Updates to This Notice?
Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated date at the top of this notice. If we make material changes, we may notify you by posting a prominent notice or by sending you a direct notification. We encourage you to review this notice periodically.
12. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may contact us at:
13. How Can You Review, Update, or Delete the Data We Collect From You?
Based on applicable law, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or request deletion. You may also have the right to withdraw your consent to our processing of your personal information.
To submit a request, contact us at lumiu.app@gmail.com. We will respond in accordance with applicable data protection laws.