Lumio

Privacy Policy

Last updated: 15 September 2026

Lumio is an app made in Quebec, Canada. This page explains what the app collects, who else sees it, and how to get rid of it. It is written to be read, not to be survived.

The short version

Lumio stores your name, your email and your progress. It does not track you, it shows no advertising, it sells nothing to anybody, and it has no access to your payment details. You can delete everything from inside the app, and it is gone immediately.

What Lumio stores about you

Your first name, so the app can greet you.
Your email address, which identifies your account.
Your chosen language, English, French or Spanish.
Your progress: which lessons and modules you have finished, your total XP, your level, your current and longest streak, and the date you last used the app.
Lessons you saved to come back to.
Your subscription status, and when it expires.
Whether you agreed to AI chat, and when.
A count of your AI requests, so the daily limit can be enforced.

That is the whole list. Nothing else about you exists.

What Lumio never collects

No advertising identifiers. No location. No contacts. No browsing history. No analytics or tracking of any kind, first or third party. Your payment card is never seen by Lumio: Apple and Google handle every purchase.

The "Is this real?" feature

When you choose a photograph or a video to check, that one image is sent to Anthropic to be described, and is discarded straight afterwards.

For a video, a single still frame is taken on your phone and only that frame is sent. The video itself never leaves your device.
The image is resized and re-encoded on your phone before sending, which removes the location and camera information a photograph normally carries.
It is not stored by Lumio, before or after. There is no upload folder.
It is read only when you pick an image. Photo library access is asked for at that moment and nothing else in your library is read.

Please do not use this feature on photographs of identity documents, bank cards, or anything else showing personal details, whether yours or another person's.

The practice chat

What you type is sent to Anthropic to generate a reply. Your name and email are never included. Only the last ten messages of the conversation are sent, along with your chosen language so Lumi answers in it. Conversations are not stored on our side.

This only happens after you agree to it, and you can withdraw that agreement at any time in Profile, under AI data sharing.

Reminders

If you turn on a daily reminder, it is scheduled entirely on your phone. There is no push token, nothing is registered with any server, and no reminder data reaches Lumio or anyone else. Turning it off removes it.

Who else is involved

Who	What they get	Why
Supabase	Your account and progress	Hosts the database and handles sign-in. Servers in Canada
Anthropic	Chat messages, or one image	Generates the replies. No name, no email
RevenueCat	Subscription events, and an identifier	Manages subscriptions and restoring purchases
Apple, Google	Your payment	They process every purchase. Lumio never receives card details
Google, Apple, Facebook	Only if you use their sign-in button	Confirms who you are. Lumio receives your email address

Nobody else. Your information is not sold, rented, or shared for advertising, and there is no arrangement under which it could be.

How long it is kept

Your account and progress stay while your account exists. Chat messages and images are passed through in real time and are not stored by Lumio. The AI request counter clears on a rolling 24 hour basis.

Deleting everything

In the app: Profile, then Delete account. It asks twice, because it cannot be undone, and then everything is gone at once: your account, your name, your email, your progress and your saved lessons. Nothing is archived and there is no recovery period.

If you would rather ask, write to applumio9@gmail.com and it will be done.

Your rights

You can ask what is held about you, correct it, or have it deleted, at applumio9@gmail.com.

If you live in Quebec, Law 25 also gives you the right to be told about each use of your information, to withdraw consent for one purpose without withdrawing it for the others, to ask that information be de-indexed, and to be told if a decision about you was made automatically. Lumio makes no automated decisions about anyone. The person in charge of the protection of personal information at Lumio can be reached at the address above.

Elsewhere in Canada, PIPEDA gives you the rights to access and correction described above.

Security

Your data sits on infrastructure run by Supabase, which encrypts it in transit and at rest. Row Level Security is enforced at the database, so one account cannot read another's rows even if the app were tampered with. The key used to talk to Anthropic exists only on the server and is never inside the app.

No system is perfectly secure, and anyone claiming otherwise is selling something.

Children

Lumio is for adults. It is not directed at children under 13 and does not knowingly collect anything about them. If you believe a child has created an account, write to us and it will be removed.

Changes

If this page changes, the date at the top changes with it, and anything significant will be announced in the app before it takes effect.

Contact

applumio9@gmail.com