This Privacy Policy explains what information the Luma app
("Luma", "we", "us") collects, how we use it, who we share it with, and the
choices you have. Luma is an AI companion app that remembers your conversations
to feel continuous over time. Please read this policy before using the app.
1. Who we are
Luma is developed and operated by Kamuran Doğan, an independent developer.
If you have any questions about this policy or your data, contact us at
kamuranofficial@gmail.com.
2. Information we collect
Account information
Your username, used to create and sign in to your account.
Your email address, collected at sign-up and used only to
recover your account. We do not use it to sign you in.
Your password, which we store only as a securely hashed value
(Argon2) — we never store or see your password in plain text.
An optional display name, if you provide one.
Profile & onboarding
Onboarding preferences such as your gender and your companion's gender and
name, used to personalize the experience.
Your country and time zone, reported by your
device, used to show time-appropriate context and schedule notifications.
We do not collect your GPS location or use IP-based geolocation.
Any sense of your region is derived only from the time zone your device reports.
Content you create
Your chat messages with the companion.
Companion images ("selfies") generated for you by AI.
Derived "memories" and relationship/mood state that the app
keeps so the companion stays continuous across conversations. This may include
emotional context inferred from your chats.
Technical & usage data
A push notification token (via Firebase Cloud Messaging) so we
can deliver notifications, if you enable them.
Operational telemetry tied to your conversations (e.g. message counts, model
latency, token/cost accounting) used to keep the service reliable and debug issues.
Product analytics (via Google Analytics for Firebase): which
screens you open, whether you complete sign-up and onboarding, counts of messages
and photo requests, and error or failure events. We use this to find broken flows
and fix them — never for advertising.
Crash and error reports (via Sentry): the type of error, the
screen it happened on, and technical diagnostics, so failures that would otherwise
be silent can be found and fixed.
Your chat messages are never sent to analytics or crash reporting.
Those systems receive only counts, screen names and error codes — never message text,
your username, or your email address. Your account appears there only as an opaque
identifier, and this data is never used for advertising or sold to anyone.
Purchases
In-app purchases (credit top-ups) are processed by the Apple App Store
or Google Play through RevenueCat. We
never receive or store your payment card details. We store only
the resulting transaction identifiers and your credit-balance records.
3. How we use your information
To provide the core companion experience and keep it continuous over time.
To generate AI responses and images.
To deliver notifications you have enabled.
To apply safety and content moderation.
To process purchases and manage your credit balance.
To operate, secure, and troubleshoot the service.
We do not sell your personal data. Luma is designed so that safety
always overrides engagement — we do not exploit loneliness, guilt inactivity, or
gamify attachment.
4. AI processing
To generate replies and images, your messages and the relevant context are sent to
third-party AI providers listed below. Please avoid sharing highly sensitive
information (for example financial account numbers, government IDs, or health
details) that you would not want processed by an AI provider.
5. Third-party service providers
We share only the data needed for each service to do its job. These providers act as
our processors and may process data on servers outside your country (for example in
the United States or the European Union).
Provider
Purpose
Anthropic (Claude)
Generating chat responses
OpenAI
Text embeddings for memory recall (when enabled)
fal.ai / Replicate
Generating and moderating companion images
Cloudflare R2
Storing generated images
Firebase Cloud Messaging (Google)
Delivering push notifications
RevenueCat, Apple App Store, Google Play
Processing in-app purchases
Google Analytics for Firebase
Product usage analytics (no message content)
Sentry
Crash and error reporting (no message content)
6. Age requirements
Luma is intended for adults (18+) and is not directed at children. We enforce
protections against sexualizing or impersonating minors. Optional age-restricted
features, where offered, may require age verification through a third-party provider
and are disabled by default.
7. Data retention
We keep your account information and content for as long as your account is active.
When your account is deleted, your associated data — including your messages and
generated images — is removed.
8. Your rights & deleting your data
You have the right to access, correct, or delete your personal data. To
delete your account and all associated data, or to make any other
data request, email us at
kamuranofficial@gmail.com. We will
process your request within 30 days.
9. Security
We protect your account with token-based authentication, hashed passwords, and
encrypted (HTTPS) connections. No method of transmission or storage is completely
secure, but we work to protect your information using reasonable safeguards.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the
"Last updated" date at the top of this page. Significant changes may be communicated
in the app.