Privacy Policy
The short version: your journal is yours. We only collect what we need to run and improve Luma, we never sell your information or show you ads, and we never send your data to outside advertising or analytics companies. You can download or permanently delete everything yourself at any time.
1. Who we are
Luma is a personal health journal operated from New Zealand. This policy explains what information we collect when you use Luma, why we collect it, and the choices you have. We handle personal information in line with the New Zealand Privacy Act 2020. If you have any questions, you can reach us through the contact form.
2. What we collect
Account information. Your email address and a password (we only ever store your password in securely hashed form - we cannot see it).
Profile information you choose to provide. Things like your name, biological sex, and cycle settings, used to personalise your journal.
Your journal content. Whatever you choose to record: symptoms, habits, food, notes, check-ins, and any health data you import from other apps or devices. You decide what goes in your journal - none of it is required.
What you say, if you use the microphone button. Some parts of Luma have a microphone button so you can speak instead of typing. Your browser does the listening and turns your words into text. In some browsers, including Chrome, your browser sends the sound of your voice to the company that makes the browser so it can work out the words - so what you say leaves your device. Luma itself never receives, records, or keeps the sound of your voice. All Luma gets is the text your browser hands back, which is then saved just like anything you type. Your browser asks your permission before the microphone can be used, and you can always type instead.
Meal shortcuts you build by speaking. When you speak a meal into your intake log and tell Luma which of your saved meals you meant, Luma remembers that phrase (for example “my usual porridge”) next to the meal it stands for, so the next time you say it the same meal fills itself in. What we keep is those words as text, never a recording, and only you can see it.
Messages you send us. Feedback, feature requests, and contact-form messages, along with the email address they came from so we can reply.
Technical information. Standard server logs (such as IP address and browser type) created automatically when you use the app, and a record of the devices where you're logged in so you can review and end sessions yourself.
How you use Luma. A private record of how the app is used - which screens you open, and actions such as starting or finishing a check-in, answering the daily prompt, or turning a feature on or off. This is about actions, not content: it never includes what you write, log, or import. We keep it in our own database, use it only to understand what's working and make Luma better, and it is deleted when you delete your account. It is not shared with anyone.
3. Health information is sensitive - and optional
Luma is a health journal, so much of what you record may be health information: symptoms, medications, mood, sleep, food, menstrual-cycle data, and similar. We treat all of it as sensitive. You are never required to enter any particular kind of information - you choose what to record, and by entering it you're asking us to store and process it solely so the app can work for you.
4. How we use your information
- To run the app: storing your journal, showing your history, charts, and streaks.
- To generate insights: when AI insights are enabled, your entries are processed to surface patterns and summaries for you (see section 5).
- To send you things you asked for: reminder notifications you set up, account emails like confirmation and password-reset links, and replies to your messages.
- To keep Luma safe: preventing abuse, rate-limiting, and securing accounts.
- To improve Luma: a private record of which screens and features are used - actions, not content - so we can see what's working and what isn't (see section 2).
We do not sell your information, share it with advertisers, or use any outside advertising or analytics service. Our record of how the app is used is first-party (it stays in our own systems), never includes your journal content, and is used only to make Luma better for you.
5. AI processing
When AI insights are enabled, parts of your journal are sent to Anthropic (our AI provider) to generate summaries and pattern insights. Anthropic processes this data to provide the service and does not use it to train its AI models. AI-generated insights can be wrong - please read our Health & AI disclaimer.
6. Who else touches your data (service providers)
Luma runs on a small number of trusted providers, each used for one specific job:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, login, and file storage - where your journal lives | Sydney, Australia |
| Vercel | Hosts and serves the app | United States / global |
| Anthropic | AI insights (when enabled) | United States |
| Resend | Delivers our emails to you and your messages to us | United States |
| Have I Been Pwned | Checks at signup that your password hasn't appeared in known data breaches - it only ever receives a small fragment of a hashed version of your password, never the password itself | Global |
| Browser push services (Apple, Google, Mozilla) | Deliver reminder notifications you turn on | Global |
| Your browser's speech service (Google, Apple, or Microsoft, depending on which browser you use) | Turns what you say into text when you use the microphone button. Your browser sends it the sound of your voice; Luma never sees or stores that sound, only the text that comes back | Global (depends on your browser) |
Each provider only receives what it needs for its job and is bound by its own privacy and security commitments.
7. Where your data is stored
Your journal is stored in Supabase's Sydney, Australia data centre. Because some of our providers (above) operate in the United States and globally, some information leaves New Zealand and Australia when those features are used. We only work with providers that commit to protecting your data to comparable standards.
8. How long we keep it
- Your journal and account data are kept for as long as you have an account.
- When you delete your account (Profile → “Delete my account”), your account and everything in it - journal entries, check-ins, food logs, imported health data, and settings - are permanently deleted from our database straight away. This cannot be undone.
- A meal shortcut you built by speaking is kept until you delete the saved meal it points to, or you delete your account, whichever comes first. There is never a recording of your voice to delete, because Luma never holds one.
- Feedback and contact messages may be kept after you delete your account, so we can keep track of issues and requests, but they are no longer linked to an account.
- Routine technical logs are kept briefly by our providers and expire automatically.
9. How we protect it
All traffic is encrypted in transit (HTTPS), every account's data is isolated with database-level security rules, and you can see and end your active sessions from your profile. More detail is on our Security page.
10. Your rights and choices
- See your data: everything you've recorded is visible in the app, and you can download a copy using the export options.
- Fix your data: you can edit or delete individual entries at any time.
- Delete everything: the “Delete my account” button on your profile permanently removes your account and all your data - no need to ask us.
- Ask us anything: use the contact form for any privacy question or request.
- Complain: if you're not happy with how we've handled your information, you can complain to the Office of the New Zealand Privacy Commissioner (privacy.org.nz).
If you use Luma from the UK, EU, or elsewhere, you may have additional rights under your local privacy laws (such as the GDPR) - the tools above cover the main ones (access, portability, correction, and erasure), and you can contact us about anything else.
11. Cookies
Luma only uses cookies that are needed for the app to work: cookies that keep you logged in, and one that remembers your theme preference. We don't use advertising, analytics, or tracking cookies - and our own record of how the app is used (section 2) doesn't use cookies either - which is why you won't see a cookie banner.
12. Children
Luma isn't directed at children under 13. If you're under 16, please use Luma with the knowledge and support of a parent or guardian.
13. Changes to this policy
If we change this policy, we'll update the version and effective date at the top of this page, and for significant changes we'll let you know in the app or by email.
14. Contact
Questions, requests, or concerns about your privacy: use the contact form and we'll get back to you.