Privacy Policy

1. Who is responsible

Luma is responsible for the processing described in this policy. Questions or privacy requests can be sent to lumasocialgrowth@outlook.com.

2. Information we collect

• Account information: email address, user ID, authentication information and date of birth or age-verification status.
• Profile and preferences: profile details you choose to provide, growth goals, interests, skills, discovery preferences and settings.
• Progress information: assigned and completed quests, feedback, reflections, XP, levels and activity history.
• Social content: connections, activity participation, messages and other content you submit.
• Safety information: blocks, reports and information needed to investigate abuse or protect users.
• Purchase information: subscription status, product identifiers and transaction-related identifiers. Payment-card details are handled by Google Play and are not stored by Luma.
• Technical information: device and push-notification tokens, app configuration, session information, and limited diagnostic or request information needed to operate and secure the service.

3. How we use information

We use information to create and secure accounts; verify that users meet the 16+ requirement; personalize quests and matching; show progress; enable connections, chats and activities; deliver notifications; manage Premium access; prevent abuse; respond to support requests; and maintain, troubleshoot and improve Luma.

4. Legal bases

Where the GDPR applies, processing is based on performing our service agreement, our legitimate interests in operating and securing Luma, compliance with legal obligations, and consent where consent is required. You may withdraw consent for consent-based processing at any time.

5. When information is visible to others

Information you add to social features may be visible to people you connect or participate with. Messages are visible to their intended participants. Luma provides blocking and reporting tools to help you control interactions.

6. Service providers

We use providers that process information on our behalf or provide platform services, including Supabase for authentication, database and server functions; RevenueCat for subscription entitlement management; Google Play for app distribution and payments; and infrastructure or notification providers needed to operate the app. These providers process information under their own terms and privacy commitments where they act independently.

7. International processing

Our providers may process information in countries outside your own. Where required, we rely on appropriate safeguards for international transfers, such as adequacy decisions or approved contractual protections.

8. Retention and deletion

We keep account information while your account is active and as needed to provide Luma. You can request deletion through the in-app account controls or by emailing us. Deletion removes or anonymizes account data unless limited information must be retained for security, fraud prevention, dispute resolution or legal obligations. Backup copies may remain temporarily until they are overwritten through normal retention cycles.

9. Security

We use technical and organizational safeguards designed to protect information, including authenticated access and database access controls. No online service can guarantee absolute security.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of your information, and complain to your local data-protection authority. Email us to exercise a right. We may need to verify your identity before completing a request.

11. Age requirement

Luma is intended only for people aged 16 or older. We do not knowingly allow children under 16 to use the service. If you believe someone under 16 has provided personal information, contact us so we can investigate and take appropriate action.

12. Changes to this policy

We may update this policy when Luma or applicable requirements change. We will update the date above and provide additional notice when a change materially affects users.