Lumi
Legal
Privacy Policy
The short version: Lumi keeps your medication information on your iPhone. There is no Lumi account and no Lumi server — your medication names, doses, schedules, refill counts, and history never leave your device. Everything below explains the few narrow exceptions and how to control them.
1. What stays on your device
All of your medication information lives only on your iPhone:
- Medication names and dosages
- Schedules and reminder times
- Refill counts and low-supply settings
- Your taken, skipped, and snoozed history
This data is stored locally and is never sent to a Lumi server, because Lumi does not operate one. It is included in your device's normal encrypted backups (iCloud or local) only if you have those backups turned on, under Apple's control — not ours.
2. No account, anonymous by default
Lumi does not ask you to create an account. There is no sign-up, no email collected to use the app, and no Sign in with Apple. You can use every core feature without telling us who you are.
For subscription mechanics only, our payment processor issues an anonymous, per-install identifier. It is a random ID tied to your installation — not to your name, email, or medication data.
3. Subscriptions — RevenueCat
If you subscribe to Lumi Pro, we use RevenueCat to manage the subscription with Apple's App Store. RevenueCat receives the anonymous per-install identifier, your subscription status, and purchase events (for example, a purchase, renewal, or cancellation). This is required to verify and restore App Store subscriptions.
RevenueCat does not receive any of your medication information. The actual payment is handled by Apple; Lumi never sees your card details.
4. Analytics — PostHog (opt-in only)
Analytics are off unless you turn them on. You can enable them in the app under Settings → Privacy → "Share anonymous usage data," and turn them back off at any time.
When enabled, Lumi sends anonymous product events to PostHog (for example, which screens are used) to help us understand how the app is used and improve it. These events are EU-hosted.
- Your medication names, dosages, and any personal text are never sent. A built-in personal-data guard test enforces this.
- Events are not tied to your real identity.
- If you never opt in, no analytics events are sent at all.
5. Crash reporting (only if it ships, and only if you opt in)
Lumi does not currently send crash reports. If crash reporting (via Sentry) is added in the future, it will be governed by the same opt-in toggle as analytics and will strip personal data before anything is sent. This paragraph applies only if and when that feature is enabled by you.
6. Children
Lumi is not directed at children under 13, and we do not knowingly collect information from them.
7. Your rights (GDPR & CCPA)
Because your data lives on your device, you stay in control of it:
- Opt out of analytics at any time with the in-app toggle (Settings → Privacy).
- Delete your data by uninstalling the app. Since all medication data is local, removing the app removes the data with it.
- You may contact us with any privacy question using the email below.
We do not sell your personal information — we don't collect it to begin with.
8. Changes to this policy
If we change how Lumi handles data, we will update this page and revise the "Last updated" date above. Significant changes will be reflected here before the related feature ships. Continued use of Lumi after an update means you accept the revised policy.
9. Contact
Questions about privacy? Email [email protected].