Privacy Policy

Your trust matters. This Privacy Policy explains how Lumer AI LLC ("Lumer", "we", "us") collects, uses, shares, and protects your information when you use the Lumer mobile app and related services (the "Service") and our website.

1. What Information We Collect

1.1 Account Information

You sign in to Lumer with your Google or Microsoft account. Lumer never sees your password. When you sign in, we receive and store:

• From Google: your name, email address, language, Google account ID, and a link to your Google profile photo, which Lumer uses to display your picture. We store the link, not a copy of the photo.
• From Microsoft: your display name, email address, preferred language, and Microsoft account ID.

We also store your Lumer settings (such as auto mode, notifications, and default calendar) and your time zone, which we take from your calendar.

1.2 Connected Account Data

With your explicit permission, granted when you sign in, Lumer connects to the email, calendar, and task apps in your Google or Microsoft account. All of the permissions below are requested at sign-in because the Service needs them to work.

• Email (Gmail; Outlook): Lumer reads message details (sender, recipients, subject, date) and message content to find events, deadlines, and action items. When you ask, it also reads the attachments of a specific message. It creates a "Lumer" label (Gmail) or category (Outlook) in your mailbox, and adds it to messages it has processed. It can send email from your account as described in Section 1.3. Lumer does not delete or archive your email.
• Calendar (Google Calendar; Outlook Calendar): Lumer reads your events, including attendees and locations. It creates, updates, and deletes events, and creates calendars, when you ask or when auto mode acts on an email. When it acts on an email, it invites only people you have told Lumer about.
• Tasks (Google Tasks; Microsoft To Do): Lumer reads, creates, and updates your tasks and task lists, and can delete task lists it created.
• Mailbox settings (Outlook only): Lumer reads your time zone and working-hours settings so it can schedule things sensibly, and it never changes them. It also creates a new mailbox category, which it uses to mark emails once Lumer has read and processed them. Microsoft grants this permission only at the "read and write" level.

Lumer does not access your address book. To decide who it may email or invite, Lumer uses the people you mention to it and the recipients of emails you have sent.

Important: This data is processed only to provide the Service to you. We never use it for advertising and we never sell it.

1.3 Actions Lumer Takes on Your Behalf

Sending email. Lumer sends email from your own Gmail or Outlook account:

• It sends a new email only when you ask it to in chat. The recipient must be someone you have told Lumer about or someone you have emailed before.
• With auto mode on, Lumer may reply to an email without asking you first. It replies only to the sender, and only in a conversation that Lumer started or has already replied in.
• Every email Lumer sends is signed as sent by Lumer, your assistant, with a reference code.
• To match your writing style, Lumer may read a small number of your recent emails to that recipient.
• Lumer keeps a record of each email it sends (subject, recipients, and conversation reference).

Auto mode. Auto mode is off by default. When you turn it on:

• Lumer checks your inbox for new messages regularly in the background, even when the app is closed. It skips Gmail's Promotions and Social tabs and Outlook's "Other" inbox.
• It uses AI to decide which messages need action, then creates events and tasks and notifies you.
• Auto mode runs until you turn it off, sign out with "Stop auto mode and log out from all devices" selected, or your sign-in expires (up to one year).

Activity record. Lumer keeps a list of the actions it has taken — events and tasks created or changed, and emails sent — so you can review them in the app.

1.4 Content You Give Lumer

• Chats and files: the messages you send, and any photos, PDFs, or text files you upload.
• Memory: Lumer may ask about your household, routines, and priorities, and it remembers what you share. It keeps a profile (for example, family members, routines, preferences, and people you know) and facts drawn from your conversations, so it can help you better over time. You can ask Lumer what it remembers, and ask it to change or forget something.
• Feedback: ratings, comments, and attachments you submit in the app. If you choose, you can include your email so we can follow up. Feedback is linked to your account.

1.5 Purchases

Subscriptions are purchased and paid for through the Apple App Store or Google Play. Lumer never receives your payment card details. We store your subscription plan, status, and dates, along with the transaction and purchase identifiers the store gives us.

1.6 Device and Usage Information

• Device information: a device identifier (Apple's identifier for vendor on iOS, or Android ID), your push-notification token, platform, and language.
• Logs: when you use the Service, our servers log your IP address and request details for security and troubleshooting.
• App analytics: we use Google Firebase Analytics to understand which features are used and when errors occur. Analytics events may include app and device identifiers. They are not linked to your name or email address.
• AI usage records: for each AI request we record which AI model handled it and how much processing it used, linked to your account. We use these for usage limits and cost control.

We do not collect your precise location.

1.7 Website

If you use the early-access or contact form on our website, we collect your name, email address, and message. Form submissions are stored in Google Firebase and protected by Google reCAPTCHA.

2. How We Use Your Information

• To provide the Service. Everything Lumer does — reading your inbox, tracking deadlines, managing your calendar and tasks, sending email, and sending reminders — requires processing your data.
• To send notifications. Push notifications may include a short preview of Lumer's reply, the titles of events or tasks it created, or the recipient of an email it sent. Apple and Google push services deliver them to your device.
• To improve Lumer. We use aggregated usage and analytics data to fix issues and build better features. We do not use the content of your email, calendar, tasks, or chats for this.
• To communicate with you. We send service, account, and security messages and respond to support requests. If we ever send marketing email, it will include a way to unsubscribe.
• To keep things secure. We monitor for fraud, abuse, and security threats.
• To comply with legal obligations. Sometimes the law requires us to keep or disclose information.

3. AI Processing

Lumer uses AI models from leading model providers, accessed through Amazon Bedrock, Amazon Web Services' managed AI service in the United States. What we send to these models depends on the feature you use. It may include your message, relevant email, calendar, and task content, files you upload, and your memory profile.

• No storage by the AI service: Amazon Bedrock does not store or log your prompts and responses. We have not enabled request logging.
• Never used for training: Amazon Bedrock does not use your prompts and responses to train any AI models and does not share them with model providers. Lumer does not use your data to train or fine-tune AI models either.
• Memory stays with us: Lumer's long-term memory of you is stored inside Lumer's own AWS account in the United States, encrypted with our own keys, and is never shared with the model providers.
• Used only for you: AI processing serves one purpose — running your personal assistant.

AI can make mistakes. You can review the actions Lumer took in the app. If you have concerns about AI processing, contact us at privacy@lumer.ai.

4. Google & Microsoft Account Access

Lumer uses OAuth 2.0, the industry-standard authorization protocol, to connect to your Google or Microsoft account without ever seeing your password. You sign in directly with Google or Microsoft and approve the permissions described in Section 1.2. We receive a secure access token, which we store encrypted.

• Signing out: Signing out ends that device's session. Other devices stay signed in, and if auto mode is on it keeps running, so Lumer keeps the access it needs for it. If you choose "Stop auto mode and log out from all devices", Lumer turns auto mode off, signs you out on every device, deletes every access token it holds for your account, and removes your devices from notifications. Lumer then has no way to reach your Google or Microsoft account until you sign in again.
• Revoking access: You can remove Lumer's access at any time. For Google, go to myaccount.google.com/permissions. For a personal Microsoft account, go to account.live.com/consent/Manage. For a work or school Microsoft account, go to myapps.microsoft.com.
• Deleting your account: When you delete your Lumer account, we revoke our Google access automatically. Microsoft does not let apps revoke their own access, so Microsoft users should also remove Lumer using the link above.
• What stays in your accounts: Events, tasks, calendars, labels, and emails that Lumer created in your Google or Microsoft account belong to you. They remain there after you delete your Lumer account unless you remove them.

5. Google User Data: Limited Use

Lumer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing assistant features described in this policy.
• We transfer Google user data only to the service providers needed to run those features — Amazon Web Services for hosting and storage, and Amazon Bedrock for AI processing. We may also transfer it when needed for security, to comply with the law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We never use Google user data for advertising, never sell it, and never use it to develop, improve, or train generalized AI or machine-learning models.
• No person at Lumer reads your Google user data, except where we are compelled to by law.

We apply the same commitments to data we receive from Microsoft.

6. Data Sharing & Disclosure

We do not sell or share your personal information (as those terms are defined under California law), and we do not use it for targeted advertising.

We disclose information only in these situations:

• Service providers who process data on our behalf to run Lumer:
  • Amazon Web Services — hosting, storage, AI processing (Amazon Bedrock), and push-notification delivery.
  • Google — Firebase Analytics, Firebase Cloud Messaging, and Firebase and reCAPTCHA for website forms.
  • Apple — push notifications and App Store purchases.
  • Google Play — purchases.
• Your connected accounts. We exchange data with Google or Microsoft to read and update the email, calendar, and tasks you connected.
• Email recipients. An email Lumer sends for you is, by design, delivered to its recipients.
• Legal requirements. If compelled by law, court order, or government request.
• Business transfers. If Lumer is acquired or merged, your data may transfer to the new entity, subject to the same protections. We will notify you.
• With your consent. If you explicitly authorize us to share your data.

7. Data Retention & Deletion

We keep data only as long as needed:

Data	How long we keep it
Account information, settings, and memory	Until you delete your account
Chat history — your messages and Lumer's replies	90 days, then deleted automatically. The app shows your most recent 90 days. Lumer also keeps a short running summary of your conversation so it can pick up where you left off; that summary is refreshed as you keep chatting and is deleted 90 days after your last activity.
Activity record — what Lumer did on your behalf, including the subject and recipients of emails it sent	90 days, then deleted automatically. The app shows your most recent 90 days. Anything Lumer created in your Google or Microsoft account stays there until you remove it.
Email conversations Lumer started for you — the subject, the people on the thread, and which messages Lumer sent	Up to 1 year after the last message Lumer sent on the thread, then deleted automatically. This is separate from the activity record above: Lumer needs it to recognise a reply to an email it sent and keep handling that conversation for you. Each new message Lumer sends on a thread starts the year again, so a conversation you are still having is never cut off — but a reply that arrives more than a year after Lumer last wrote will not be acted on.
Conversation content Lumer uses to build its memory of you	Up to 90 days
Uploaded files	Deleted automatically 30 days after upload (a small preview image stays in your chat history)
Your email	Lumer does not keep a copy of your mailbox. Email text Lumer reads to answer you is held only temporarily while that conversation is active, and never becomes a separate copy of your mail. Anything Lumer then writes back to you in chat is kept with your chat history for 90 days, and details it copies into an event or task are kept in your activity record for 90 days. The event or task itself stays in your Google or Microsoft account until you remove it.
Feedback you send us, and messages sent through our website forms	Up to 2 years, then deleted automatically
AI usage records	90 days
Server and security logs (may include IP addresses)	Up to 90 days
Encrypted backups	Up to 35 days

Deleting your account. You can delete your account in the app under Profile → Delete My Account, or by emailing privacy@lumer.ai (see how to delete your account). Deletion is usually complete within minutes. If a technical problem delays it, we will finish within 30 days. After deletion we keep only:

• a one-way hash of your email address and an internal ID, kept indefinitely, to record that your account was deleted and to prevent reuse of free trials;
• records of your App Store or Google Play purchase transactions, kept for up to 7 years for accounting, tax, refund, and fraud-prevention purposes;
• AI usage records (which model handled each request and how much processing it used), which we use to reconcile our costs and which are deleted 90 days after the request;
• copies in backups and logs, which are erased on the schedule above.

Deleting your Lumer account does not cancel an App Store or Google Play subscription. Cancel it in your App Store or Google Play subscription settings.

8. Your Privacy Rights

Depending on where you live, you may have these rights:

• Access. You can see your last 90 days of chat history and activity record in the app, and ask Lumer what it remembers about you. Your email, calendar, and tasks stay in your Google or Microsoft account, where you can always reach them directly — Lumer does not keep a copy of your mailbox.
• Correction. Ask Lumer to update or forget something it remembers, change your settings in the app, or contact us.
• Deletion. Delete your account and data as described in Section 7.
• Opt-out. Turn off auto mode or notifications at any time in the app. Unsubscribe from any marketing email.
• Restrict processing. Limit how we use your data in certain situations.
• Object. Object to processing based on legitimate interests.

8.1 California Residents (CCPA)

If you're a California resident, you have additional rights under the California Consumer Privacy Act:

• Know. Learn what personal information we collect, use, and disclose (Sections 1, 2, and 6 describe this).
• Delete and correct. Request deletion or correction of your personal information.
• Opt out of sale or sharing. Not applicable — we don't sell or share personal information.
• Sensitive personal information. We process the contents of your email and your account sign-in only to provide the Service you request, so the right to limit its use does not apply.
• Non-discrimination. We won't discriminate against you for exercising your rights.

To exercise any of these rights, email us at privacy@lumer.ai. We'll respond within 30 days, or within the time the law in your location requires.

9. Security

We protect your data with these measures:

• Encryption in transit: all connections between the app and our servers use TLS 1.2 or higher.
• Encryption at rest: data is encrypted with AES-256 using AWS Key Management Service. Your Google or Microsoft access tokens get an additional layer of encryption with a dedicated key.
• Secure infrastructure: data is hosted by Amazon Web Services in the United States. AWS maintains SOC 2 Type II and ISO 27001 certifications.
• Access controls: access to production systems is limited to authorized team members through single sign-on, following least-privilege principles.

9.1 Data Breach Notification

If a data breach affects your personal information, we will notify you and the relevant authorities without undue delay, as required by applicable law. We'll explain what data was affected, what we're doing about it, and what steps you can take to protect yourself.

No system is perfectly secure, but we take your data protection seriously and continuously work to improve our security.

10. Cookies & Tracking

The Lumer website does not set its own cookies and uses no analytics or advertising cookies. Our early-access and contact forms use Google reCAPTCHA, which may set Google cookies, and the Firebase software on those pages may store a technical token in your browser. Our pages also load fonts from Google Fonts.

The Lumer app does not use cookies. App analytics are described in Section 1.6. We do not track you across other companies' apps or websites.

11. Where Your Data Is Processed

Lumer stores and processes data in the United States using Amazon Web Services. If you use Lumer from outside the United States, your information will be transferred to and processed in the United States.

If you have questions about international data transfers, contact privacy@lumer.ai.

12. Children's Privacy

Lumer is not intended for users under 13. We do not knowingly collect data from children. If you believe we've collected data from a child, contact us immediately at privacy@lumer.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you at least 30 days before they take effect — via email or a prominent notice in the Service.

Continued use after changes means you accept the updated policy.

14. Contact Us

Questions, concerns, or privacy requests? Reach us at:

Lumer AI LLC
Email: privacy@lumer.ai
General inquiries: hello@lumer.ai