Privacy Policy

1.The short version

This summary is orientation only — the sections below are the actual policy.

2.Who we are and how to reach us

Lumo is a habit-and-wellbeing app for iOS (bundle id com.lumo.habits), made by Bebz (“we”, “us”). Lumo is offered internationally, and this policy is written to work wherever you are.

For the EU/UK GDPR, the Philippine Data Privacy Act of 2012, and the California CCPA/CPRA, Bebz is the party responsible for your data (the “controller”). The best way to reach us about privacy is email: abdullahlingga@gmail.com.

3.What stays on your device

Lumo is local-first. The following lives on your device and is never uploaded to us:

• Your habits, completions, and streaks
• Your journal entries and any photos you attach to them
• Your focus sessions
• Your app settings
• The route and distance of your walks — unless you choose to share a specific walk with a friend (see below)
• Backups you create — written to your device’s own file system, and shared only if you share them yourself
• Your avatar — stored as a set of style options, not an uploaded photograph

We can’t read, restore, or recover this data, because we never receive it.

4.What we collect, and why

If you use the social features, some data has to leave your device and sync through our server (Supabase) so other people can see what you share. Here it is, grouped by what it’s for. If you never use a social feature, none of this is created.

The recovery email is optional; without it, we may not be able to restore your account. Everything else in this list only exists once you use the feature it belongs to.

The legal basis (GDPR / DPA 2012)

We rely on your consent for device permissions and the optional recovery email; on performing our agreement with you to run the social features and purchases you asked for; and on our legitimate interests in keeping the service working and secure. You can withdraw consent at any time.

5.Permissions, one by one

Lumo asks for a permission only when a feature needs it, and each is optional — the app works without it, minus that feature.

An Android version is planned. When it ships, these will map to Android’s equivalents (Health Connect, activity recognition, and location permissions), and we’ll update this section before it does.

6.Health and location data

This is the most sensitive data Lumo touches, so here it is on its own.

• Location is recorded only during an active walk. You start the walk; sampling runs while it records; it stops when you end or discard the walk. We do not track your location at any other time.
• Your walk routes stay on your device unless you deliberately share a specific walk with a friend. Only then does that walk’s route data leave your device.
• Apple Health is read-only. We read steps, distance, and active minutes to power the movement features. We never write to Health, and we do not upload your Health records to our server.
• Health and movement data is never attached to any usage event. There is no analytics in the app to attach it to, and the separation is enforced in the code — not left to policy.

7.Who can see your data

Your private data — habits, journal, focus sessions, and any walk you haven’t shared — is visible to you only. For the social features:

• Friends can see your nickname, avatar, and Lumo ID, and a presence flag when you’re out on a walk.
• Group members can see the group’s habits and check-ins, the chat messages and reactions posted in that group, and members’ challenge progress.
• People you share a walk with can see that walk’s route and summary — and nothing else.

Treat anything you post to a group or share with a friend as something other people will read. Nothing about your private habits, journal, or unshared walks is ever shown to anyone else.

8.Third parties we rely on

A few providers help us run Lumo. They handle data only on our instructions, not for their own purposes.

What we never do: we don’t use an advertising SDK, we don’t embed third-party analytics in the app, we don’t track you across other apps or websites, and we don’t sell or share your personal information for advertising.

9.Purchases

Lumo has an auto-renewing subscription (Lumo Plus) and a separate one-off unlock (Unlimited Habits & Journals). Both are handled entirely by Apple’s In-App Purchase system. We never receive or store your card or payment details. From Apple we keep only your entitlements — which products your account has unlocked. The billing terms are in our subscription terms.

10.How long we keep things, and deleting your account

On your device

Your on-device data — habits, journal, focus sessions, settings, unshared walks, and local backups — stays until you delete it in the app or uninstall Lumo, which removes all of it from your device. We never had a copy.

On our server

Uninstalling the app does not remove the social data on our server, because that data lives on Supabase, not on your device. It stays until you ask us to delete it.

Because your account is anonymous, we identify it by your Lumo ID rather than a login. To delete your account and its server-side data, email abdullahlingga@gmail.com with your Lumo ID (you’ll find it in the app’s settings). We complete deletion within 30 days. That removes your profile, friendships, group membership and the messages and check-ins tied to you, your challenge and shared-walk data, your push token, and your entitlement records.

Two things deletion doesn’t do:

• It doesn’t cancel a Lumo Plus subscription — cancel that in your App Store settings.
• It doesn’t refund a purchase — Apple handles refunds.

We’re adding a “Delete account” button inside the app’s settings; until it ships, the email route above is how to do it, and we treat those requests the same way.

11.Your rights

Wherever you live, you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to or restrict how we use it. To do any of these, email abdullahlingga@gmail.com with your Lumo ID. We reply within the time the law allows (generally 30 days).

• Philippines (Data Privacy Act of 2012): you have the rights to be informed, to access, to object, to erasure, to correct, and to data portability, and you can complain to the National Privacy Commission.
• EU/EEA & UK (GDPR): the rights above, plus withdrawing consent and lodging a complaint with your local supervisory authority.
• California (CCPA/CPRA): the rights to know, delete, and correct, and to opt out of the sale or sharing of personal information — which we don’t do, so there’s nothing to opt out of. We won’t treat you differently for exercising a right.

12.International data transfers

Your social data is stored by Supabase in Singapore. Apple, Expo, and Vercel may process data in other countries, including the United States. Where data moves out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. Email us for detail on the safeguards in place.

13.Children’s privacy

Lumo isn’t for children, and you must be at least 13 to use it. We don’t knowingly collect data from anyone under 13. If you believe a child has given us data, email abdullahlingga@gmail.com and we’ll delete it promptly.

14.Changes to this policy

We’ll update this policy as Lumo changes — for example, when the Android version or the in-app delete button ships. We’ll change the “last updated” date at the top and, for anything significant, tell you in the app or by email first. This policy was last updated on 17 August 2026.

15.Apple App Privacy summary

For reference, here is how the above maps to Apple’s App Privacy (“nutrition label”) categories. Apple’s label only covers data that leaves your device, so anything kept on-device and never uploaded is not collected in Apple’s sense.

This summary is provided to keep the App Store Connect privacy questionnaire consistent with this policy. It is not a substitute for reviewing your own App Store Connect answers.

16.Contact us

See also our Terms of Use and the Support page.