Privacy Policy
Lumara is an adult platform. We take your privacy seriously. We do not sell your data. We do not use your conversations to train AI models. Private Mode conversations are end-to-end encrypted — we cannot read them. Anonymous accounts require no email. We never sell your personal data to third parties.
Account information. If you create an email account: your email address and hashed password. If you use anonymous mode: a randomly generated session identifier only. We never require your real name.
Conversation data. Standard mode conversations are stored on our servers to power the memory system. Private Mode (E2EE) conversations are encrypted client-side before transmission — we store only encrypted ciphertext we cannot decrypt.
Payment information. Payments are processed by CCBill or Segpay. We do not store credit card numbers, bank account details, or full payment credentials. We receive only a transaction confirmation and subscription status.
Usage data. We collect anonymized usage analytics including pages visited, features used, session duration, and device type. This data cannot be used to identify you individually.
Communications. If you contact support, we retain those communications to resolve your issue and improve our service.
- To operate, maintain, and improve the Platform
- To power the memory system so your companion remembers your history
- To process payments and manage your subscription
- To send transactional emails (receipts, password resets, account notices)
- To detect and prevent fraud, abuse, and Terms of Service violations
- To comply with legal obligations
We do NOT sell your personal data. We do NOT use your conversations to train AI models. We do NOT use your data for targeted advertising. We do NOT share your conversation content with third parties except as described in Section 3.
Service providers. We share data with trusted vendors who help operate the Platform, including cloud hosting (AWS/GCP), payment processing (CCBill/Segpay), email delivery, and analytics. All vendors are contractually bound to protect your data.
Legal requirements. We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Lumara, our users, or the public.
Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We never sell your data. We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Conversation memory is retained for the duration of your active subscription. Private Mode conversation data is encrypted and cannot be accessed by us. Upon account deletion, all conversation memory is removed within 30 days.
Anonymized usage analytics may be retained indefinitely as they cannot be linked to any individual.
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to processing; request restriction of processing; data portability.
To exercise these rights, contact us at privacy@lumara.ai. We will respond within 30 days. We may need to verify your identity before processing your request.
You may delete your account and all associated data at any time through your account Settings page.
We use essential cookies to keep you logged in and remember your age verification. We use analytics cookies to understand how the Platform is used. We do not use advertising or tracking cookies.
You can disable non-essential cookies in your browser settings. This will not affect your ability to use the Platform but may affect some features.
This Platform is strictly for adults aged 18 and older. We do not knowingly collect any personal information from anyone under 18. If we discover that a minor has created an account, we will immediately terminate the account and delete all associated data. If you believe a minor has accessed the Platform, contact us immediately at legal@lumara.ai.
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. Private Mode uses client-side end-to-end encryption — your conversation content is encrypted before it leaves your device.
No system is perfectly secure. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by applicable law.
Lumara is based in the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the US. By using the Platform, you consent to this transfer.
For EEA and UK users, we rely on Standard Contractual Clauses approved by the European Commission as the legal basis for international data transfers.
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information.
We do not sell personal information. To exercise your CCPA rights, contact us at privacy@lumara.ai or use the deletion option in your account Settings.
If you are in the European Economic Area or United Kingdom, you have rights under GDPR including the right to access, rectify, erase, restrict, and port your data, and to object to processing.
Our legal basis for processing your data is: contract performance (to provide the service you signed up for); legitimate interests (to improve and secure the Platform); and consent (for optional communications).
You have the right to lodge a complaint with your local data protection authority.