LumaPrivacy Policy
Your days are yours.
Luma keeps what you write so it can sync it to your devices, and nothing else. No ads, no tracking, no selling. Last updated September 30, 2026.
- What we keep. Your account (email, name) and what you write in Luma: reminders, to-dos, notes, habits.
- What we never do. Sell your data, show ads, or track you across apps and websites.
- What you control. Delete your account from the app at any time, and everything goes with it.
Who is responsible
Luma is made by Iñaki Sigüenza, Fernanda Rosas and Emiliano Montes. The person responsible for your personal data is Iñaki Sigüenza, in Mexico. Write to isiguenzan@gmail.com about anything in this policy.
What we collect, and why
- Account. Your email address and name, and the sign-in method you choose (email and password, Sign in with Apple, or Google). Used to create your account and sign you in.
- Your content. Reminders, to-dos and their sections, each day's one thing, notes, habits and their check-ins. Stored so Luma can save them and keep them in sync across your devices.
- Your preferences. The name you go by, your focus, your accent color and your first habit, chosen during onboarding.
- Waitlist. If you join the waitlist on this website: your email, which part of the page you signed up from, and when. Used only to write to you when Luma opens.
Luma works on your phone first: your content is saved on the device and synced when you are online. Notifications and alarms are scheduled on your phone. Face ID, if you use it to sign in, is handled by iOS and never reaches us.
What we don't collect
Luma has no analytics, advertising or crash-reporting tools, and does not track you across other companies' apps or websites. We don't access your location, contacts, photos or health data. When you join the waitlist, your IP address is used for a moment to stop spam and is not stored.
Who helps us run Luma
We don't sell or rent your data. These providers process it only to run the service:
- Clerk: accounts and sign-in.
- Convex: the database that stores and syncs your content.
- Vercel: hosts this website.
- Apple and Google: only if you sign in with them; Apple also handles App Store purchases.
These providers are based in the United States, so your data may be stored there. We share data with authorities only when the law requires it.
How long we keep it
We keep your account and content while your account exists. When you delete your account, we delete it and everything in it from our database and from our sign-in provider. Waitlist emails are kept until Luma opens, or until you ask us to remove yours.
Your rights
Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties you have the right to access, correct, delete or object to the use of your personal data (ARCO rights), and to withdraw your consent. You can:
- See and edit your data in the app, where all of it lives.
- Delete your account from Settings → Privacy & Data → Delete Account. This removes your account and all your content.
- Write to isiguenzan@gmail.com for anything else, including removing a waitlist email. We answer within 20 business days.
Children
Luma is not meant for children under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
Security
Your data travels encrypted between your phone and our providers, and only you can read your content through your account. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.
Changes
If we change this policy we will update the date at the top. If the change affects how we use your data, we will tell you in the app before it takes effect.