Lumina Privacy Policy

Version: 1.0
Last updated: June 19, 2026
Effective: June 19, 2026

This Privacy Policy explains how the Lumina Android application and its official support and legal information pages handle personal data. It should be read together with the Lumina Terms of Use.

The controller responsible for Lumina is JJE APPS, located at São Paulo, Brazil. Privacy questions and requests may be sent to lumina@jjeapps.com.

1. Summary

• Lumina requires no registration, login, or account.
• Journal entries, moods, tasks, reminders, favorites, and progress remain on the device.
• Journal text is encrypted before storage, and its key is protected by Android Keystore.
• Personal content created by the user is not sent to any online content service or developer-controlled database.
• Internet access downloads global reflections and background images.
• Lumina has no ads, advertising SDK, behavioral analytics, or sale of personal data.
• Users control notifications, sharing, item deletion, and clearing app data.

2. Scope

This Policy applies to the official version of Lumina distributed through Google Play and the official privacy and support pages linked from its store listing. It does not govern third-party apps, websites, or services opened by the user, including destinations selected from the Android share sheet.

3. Data we handle

3.1. Content and data stored locally

Depending on the features used, Lumina may handle on the device:

• display name and selected avatar;
• task titles, items, completion status, dates, and times;
• reminders, recurrence, advance notice, and enabled state;
• journal entries, formatting, date, and selected mood;
• favorite reflections and state required to present daily content;
• theme, notification, and journal-protection preferences;
• progress, experience points, activity streaks, and achievements;
• local counters, such as shares initiated by the user;
• cached global reflections and downloaded images.

This data provides the features requested by the user and is not sent to any online content service. Tasks, reminders, and operational fields are stored in the app's private storage. Journal text is stored in encrypted form.

Users decide what to write. Journal entries may contain intimate information or data considered sensitive under applicable law. Lumina does not ask users to provide such information. Do not record another person's data without authorization or use Lumina as the only repository for critical information.

3.2. Connection and technical data

To update reflections and images, the app sends the content service:

• the active language code;
• the start date and number of days for the requested content window;
• requests for selected image files;
• ordinary headers and technical metadata required for HTTPS communications.

The infrastructure provider may process IP address, date and time, requested route, response code, network information, user agent, and security logs needed to operate and protect the service. The app does not add profile name, tasks, reminders, journal entries, favorites, advertising identifier, contacts, or precise location to these requests.

3.3. Support data

If a user contacts us, we may receive their name, email address, message, attachments, voluntarily supplied technical information, and the history required to respond. Do not send passwords, credentials, unnecessary identity documents, or full journal content in a support request.

3.4. Google Play and Android platform data

Google Play and Android may handle installation, updates, security, compatibility, store transactions, and diagnostic data under Google's policies and device settings. This platform processing does not mean Lumina contains its own advertising or analytics SDK.

4. Purposes and legal bases

We handle data, as applicable, to:

• perform features requested by the user and preserve local app state;
• deliver and reschedule notifications enabled by the user;
• protect the journal, prevent unauthorized access, and secure the service;
• update and cache the global content catalog;
• answer support and privacy requests;
• diagnose failures reported by users;
• comply with law and establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, processing may rely on performance of the requested service, the user's consent or choice for optional features, legitimate interests in operating and securing the service, compliance with legal obligations, or the exercise of legal rights. Optional permissions may be withdrawn in Android settings without affecting lawful processing that occurred before withdrawal.

5. Permissions and device features

• Internet: downloads global reflections and images over HTTPS.
• Notifications: delivers daily reflections and reminders enabled by the user. When Android requires permission, Lumina asks only after the user enables notifications in app Settings.
• Alarms: schedules alerts. If exact alarms are unavailable, Lumina uses approximate scheduling; delivery and timing are not guaranteed.
• Device startup, time, and time-zone changes: reschedules local alerts after these events.
• Device authentication: uses biometrics or device credentials to restrict journal access. Android performs verification; Lumina receives only the result and does not access or store biometric templates, images, or characteristics.
• Clipboard: used only when the user selects the command to copy a reflection.
• Sharing: opens the Android share sheet at the user's request.

Notification content may appear on the lock screen depending on Android privacy settings. Users should adjust system notification visibility if they want to hide it.

6. Storage, encryption, and backup

App data is kept in Android private storage. Journal text is protected with AES/GCM, and its cryptographic key is created or migrated into Android Keystore, where it should not be exportable by the app. When journal protection is enabled, Lumina also uses device authentication and blocks screenshots on the journal screen. These controls reduce risk but cannot eliminate all risks from a compromised, unlocked, or outdated device.

Android backup and device transfer may include selected preferences such as display name, avatar, and settings. The local database containing tasks, reminders, favorites, progress, and journal entries—and the journal key—is excluded. Those records are not automatically restored to another device. Clearing app data, uninstalling Lumina, or losing or damaging the device may result in permanent loss.

7. Disclosure and processors

We do not sell or rent personal data. Providers may be used only for the purposes described:

• Content infrastructure: hosts the global catalog and images and receives only the technical requests described above.
• Google Play and Android: provide distribution, updates, security, permissions, notifications, authentication, and preference backup.
• Website and email providers: may process technical logs and support messages when the official site or support channel is used.

We may also disclose information when required by law, a valid order, or the need to protect rights or safety. Because primary personal content remains local and there is no account, we generally do not possess that content to disclose it.

When users share content with another app, they choose the recipient. The third party then handles that content under its own terms and privacy policy.

8. International transfers

Infrastructure providers may process technical data outside the user's country depending on project region, network routing, and their service providers. Where required, we will use transfer mechanisms recognized under applicable law and require appropriate contractual and security protections. Users may request available information about relevant destinations or safeguards.

9. Retention and deletion

• Local data: remains until the user deletes an item, clears app data, or uninstalls Lumina.
• Backed-up preferences: follow Google/Android account controls and retention.
• Global cache: may be replaced or deleted automatically during content updates and cleanup.
• Technical infrastructure logs: are retained only for the period configured in the infrastructure and reasonably necessary for security, abuse investigation, service integrity, and legal obligations; they are then deleted or anonymized when appropriate.
• Support records: are retained as needed to answer the request, preserve a reasonable history, prevent abuse, and comply with law, then deleted or anonymized when appropriate.

Lumina has no user account or remote personal user database. Tasks, reminders, and journal entries must therefore be deleted on the device. If the device is no longer available, the developer has no remote copy to delete or recover.

10. Privacy rights

Depending on applicable law, individuals may have rights to confirmation, access, correction, portability, anonymization, restriction, objection, deletion, information about disclosures, review of automated decisions, and withdrawal of consent.

Many controls are available directly through Lumina or Android: edit or delete items, disable notifications, revoke permissions, clear app data, or uninstall. For support records or technical logs that may be associated with a requester, contact lumina@jjeapps.com. We may request reasonable information to verify identity and locate a record without collecting excessive data.

Lumina does not make solely automated decisions with legal or similarly significant effects and does not profile users for advertising. Individuals may also complain to Brazil's National Data Protection Authority (ANPD) or the competent authority in their jurisdiction.

11. Children

Lumina is not specifically directed to children and is not intended to operate as a child-directed service. Minors should use it only with guardian authorization and supervision where required. We do not knowingly collect children's personal content through the app. A guardian may request deletion if a child's data is improperly sent through support.

12. Security and incidents

Measures include Android private storage, journal encryption, Android Keystore, optional device authentication, screenshot blocking on the protected journal, and HTTPS. Technical access is limited to what is required to operate the global catalog. No system is completely secure. Users should protect their device lock, keep Android and Lumina updated, and avoid unofficial versions.

If we identify an incident involving data under our control, we will assess the risk and notify affected individuals and authorities where required.

13. Advertising, analytics, and tracking

Lumina has no ads, advertising SDK, behavioral analytics, marketing pixels, or advertising identifier. We do not sell or share personal data for targeted advertising. Official pages should not add marketing cookies unless this Policy and any required consent controls are updated first.

14. Changes to this Policy

We may update this Policy to reflect changes in the app, providers, or law. The revised version will show a new update date. Where required, material changes will be communicated in the app, store listing, or official site before they take effect.

15. Contact

Controller: JJE APPS
Location: São Paulo, Brazil
Privacy and support: lumina@jjeapps.com
General contact: contact@jjeapps.com
Website: https://lumina.jjeapps.com

16. Related services

• Google Privacy Policy: https://policies.google.com/privacy
• Google Play User Data guidance: https://support.google.com/googleplay/android-developer/answer/10144311