What Lumen knows, and nothing beyond it.
Lumen holds your goals, so this page starts with the summary rather than burying it. There are no analytics SDKs, no advertising identifiers, and no third-party trackers in the app or on this site.
In effect 18 August 2026. Last updated 18 August 2026.
The privacy label.
Tracking means following you across other companies' apps and sites. Lumen does none of it. The column is there because the answer is no in every row, and that is the point of showing it.
The categories Lumen never asks for.
- Location, precise or coarse
- Contacts, photos, camera, or microphone
- Health, fitness, or biometric data
- Advertising identifiers
- Browsing history outside Lumen
- Card numbers or bank details
What we do with it, and on what basis.
| Data | Purpose | Legal basis |
|---|---|---|
| Email and account ID | Sign you in and keep your goals attached to you. | Performance of the contract |
| Goals and questionnaire answers | Store your plan, and generate or revise it when you ask. | Performance of the contract |
| Push token | Send the reminders you switched on. | Your consent, withdrawable at any time |
| Request and token counts | Rate limiting, abuse prevention, and cost control. | Legitimate interests |
| Server logs | Find and fix faults, and investigate abuse. | Legitimate interests |
| Subscription status | Know whether your plan is active. | Performance of the contract, and legal obligation for records |
What the AI receives.
When you ask Lumen to build or revise a plan, the text you wrote for that goal and the answers you gave to the five questions are sent to a language model provider. Your email address, your other goals, and your progress history are not part of that request.
The provider processes the request and returns the plan. It runs the model on our instruction, as a processor, and is not permitted to use what you wrote for its own purposes.
- DeepSeek, China. Default provider for goal mapping and revisions.
- OpenAI, United States. Alternate provider, selected per environment.
Because those providers sit outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses together with the safeguards in each provider agreement. The full detail of how AI is used, and what it is allowed to decide, is set out on the transparency page.
The full list of processors.
- Google Firebase. Authentication, database storage, and push delivery.
- Railway. Hosting for the application server and this site.
- DeepSeek. Goal mapping, as described above.
- OpenAI. Goal mapping, as described above.
- The payment provider or app store. Takes the payment and tells us only whether it succeeded.
That is the whole list. Nobody buys this data, because it is not for sale, and there is no advertising business attached to Lumen that would want it.
Kept while you use it, then gone.
Your goals stay while your account exists. If your subscription lapses, three goals of your choosing remain readable and the rest move to the archive; nothing is deleted for lapsing alone.
Delete your account and the goals, answers, and account record go with it. Server logs are kept only as long as they are useful for faults and abuse, and they are never assembled into a profile of you.
Export it, correct it, or take it away.
- Access and export. Ask for a copy of everything held about you, in a portable format.
- Correction. Fix anything inaccurate, in the app or by asking.
- Erasure. Delete your account and its contents.
- Restriction and objection. Ask us to pause a use of your data, or object to one based on legitimate interests.
- Withdraw consent. Switch reminders off and the push token stops being used.
- Complain. Raise it with [national data protection authority], or the authority where you live.
Write to [privacy address] and we answer within one month. There is no fee, and asking costs you nothing in the product.
The practical guarantees.
Traffic runs over TLS. Stored data is scoped per account, so one account cannot read another's goals. Access to production data is limited to the people who keep it running.
Lumen is not built for children. You need to be at least 16 to hold an account. No part of the product is directed at anyone younger.
The controller, and how to reach them.
[registered legal name], [registered address], is the controller for the data described here.
Privacy questions go to [privacy address]. Anything else goes to [contact address].
If this policy changes in a way that matters, the date above changes and we say so in the app before the change takes effect.