Privacy Policy

This Privacy Policy describes how Lumina Flo ("we", "us", "our") collects, uses, and shares information when you use luminaflo.com and the Lumina Flo mobile and web applications (together, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

Account information. When you create an account, we collect your email address, display name, and authentication identifiers from our authentication provider (Clerk).

Content you create. Tasks, captures, calendar entries, focus sessions, inbox items, settings, and any other content you add to the Service.

AI feature inputs. When you use voice capture or AI assistance, we process the recordings, text, task details, or support messages needed to provide that feature. See section 6 for the information sent to our AI service providers.

Usage data. Basic activity timestamps used to power features such as the trial countdown, weekly digest, and re-engagement nudges.

Billing information. When you start a paid plan, payment information is collected and processed by Stripe. We do not store your full card details on our servers. We retain a Stripe customer ID, subscription status, and the plan you selected.

Device and log data. IP address, browser type, and basic request metadata for security and debugging.

• To provide, maintain, and improve the Service.
• To process payments and manage subscriptions.
• To send transactional emails such as trial reminders, payment receipts, and product updates you have opted into.
• To send occasional marketing emails about Lumina Flo. Every marketing email includes an unsubscribe link, and unsubscribing takes effect right away.
• To respond to support requests and to detect, prevent, or address fraud, abuse, or security issues.

We do not sell your personal information. We share information only with service providers who help us operate the Service, including:

• Clerk for authentication and identity management.
• Stripe for payment processing and subscription management.
• Resend for transactional email delivery.
• Replit for hosting and managed AI API access, and OpenAI for AI processing described in section 6.
• TikTok for website page-view and registration-button analytics through its pixel. This can involve cookies and browser or device information. We do not use Google Workspace content for advertising or include task text or email content in the analytics events we send.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of our users.

Gmail add-on. When you open an email with the add-on, it reads that message's subject and plain-text body to populate an editable task title and notes. It does not search your mailbox, read attachments, send email, or modify messages. The temporary Google message-access token is used within Google Apps Script and is not sent to Lumina Flo's servers.

Only when you click Create task does the add-on send the title, notes, and energy level you reviewed to Lumina Flo to save the task. The import does not call an AI model. The saved content can later be processed by AI if you request AI subtask suggestions, as explained in section 6.

Google Calendar. If you connect Google Calendar, we access calendar information and events to display your selected calendars and synchronize tasks through the calendar features you enable. Calendar synchronization does not itself send event content to an AI model.

Limited Use commitment. Lumina Flo's use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

We use Google Workspace data to provide the user-facing productivity features you choose. We do not sell it, use it for advertising, or use raw, aggregated, anonymized, or derived Google Workspace data to create, train, or improve foundational or general-purpose AI or machine-learning models. We do not authorize service providers to use that data for those purposes.

Transfers are limited to providing or improving appropriate user-facing features with your consent, security purposes, compliance with applicable law, or a merger or acquisition with explicit prior user consent. Human access to Google Workspace data is limited to your affirmative consent for specific data, security needs, legal requirements, or internal operations involving aggregated, anonymized data as permitted by Google's policies.

We use OpenAI API models through Replit AI Integrations, which provides managed API access. This is hosted API processing, not a self-hosted or offline model, and is separate from the consumer ChatGPT service. Information needed for an AI feature is processed by Replit and the upstream AI provider, OpenAI.

• AI subtask suggestions: when you request suggestions, we send the task title, notes, energy cost, and existing subtask titles. This includes email-derived text if you use suggestions on a task created from Gmail.
• Voice and text capture: we send submitted audio for transcription and text for identifying tasks, events, or notes. Relevant timezone and task-category information may accompany the text.
• Support chat: we send the messages in your support conversation to generate a response. The support assistant is not automatically given access to your private tasks or mailbox.
• Image generation: requests to the image-generation feature send the supplied prompt to the image model.

OpenAI's API data-use policy states that API data is not used to train or improve its models by default, unless the API customer explicitly opts in.

No model training with Google-derived data. This app's Google-derived inputs and outputs are excluded from model training. This exclusion applies to raw, aggregated, anonymized, and derived Google Workspace data processed by Lumina Flo and its AI service providers, including Replit and OpenAI. These inputs and outputs are not used to create, train, or improve foundational or general-purpose AI or machine-learning models.

No-training terms are not the same as no retention. Providers may retain information for service operation, security, abuse monitoring, or legal compliance under their applicable terms. OpenAI documents default abuse-monitoring retention of up to 30 days, with exceptions. We do not claim Zero Data Retention or that AI requests remain only on your device.

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time by contacting us at the address below. After deletion, we may retain limited records for legal, billing, or security purposes.

Saved tasks created from email follow the same retention rules as other tasks. Disconnecting an integration does not delete tasks you already saved. The Gmail add-on can retain a pending task submission in your Google Apps Script user storage for retries; use its discard control to clear a pending submission you no longer want to send. AI provider retention is described in section 6.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

You can disconnect Google Calendar in Settings, disconnect Lumina Flo from the Gmail add-on, and revoke Google permissions through your Google Account. You can delete saved tasks separately or use the account-deletion control in Settings. You do not need to use optional AI suggestions to save a task from Gmail.

We use industry-standard safeguards to protect your information, including encryption in transit. No system is perfectly secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your information may be processed in countries other than the one in which you live. By using the Service, you consent to the transfer of your information to those countries.

We may update this Privacy Policy from time to time. We will post changes on this page and update the effective date above. Continued use of the Service after changes means you accept the updated policy.

Questions about this Privacy Policy can be sent to support@luminaflo.com.