Lumo Privacy Policy

Last updated: October 29, 2026

Lumo lets you keep your baby's memories together with your family. This policy explains what data we process, why, and your rights. In short: we cannot read your memories. Text, photos, videos, voice recordings and the child's profile are encrypted on your phone, and only you and the family members you invite hold the keys.

1. Data we collect

Data	Why	Where
Email address, sign-in provider ID (Apple, Google, Microsoft)	Create your account and sign you in	Supabase
Display name	So family members recognise you	Supabase
Encrypted memories, child profile, growth measurements, letters	Sync and backup	Supabase; content is end-to-end encrypted, we cannot read it
Encrypted media files	Backup and family sharing	Lumo Cloud, Google Drive or OneDrive, as you choose; files are encrypted
Family memberships, roles, invitations	Family sharing	Supabase
Technical metadata (record dates, file sizes, sync order)	Make sync work, storage quota	Supabase
Subscription status and purchase history	Unlock Premium	RevenueCat, Apple App Store, Google Play
Crash reports (device model, OS, app version, error trace)	Fix bugs	Sentry; no personal data or memory content, emails and key-like text are removed before sending

We show no ads, sell no data, and do not track you across apps or websites. We use no marketing analytics.

2. End-to-end encryption

Memories are encrypted on your phone with AES-256-GCM. Only ciphertext reaches our servers.
Your key lives in your phone's secure storage and in the Recovery Kit we give you. If you lose the kit and no signed-in device remains, we cannot recover your memories either.
Time-capsule letters are the exception: the key of a locked letter is held by the Lumo server until its opening date and released to no one before then. The letter itself stays encrypted.

3. Legal basis

Performance of a contract for the account, sync and family sharing; legal obligation for subscription records; legitimate interest for crash reports (keeping the app safe and working). Notifications need your device permission, and reminders are scheduled on your phone only.

4. Children's data

Lumo is for parents and family members, not for children to use themselves. You enter information about your child as a parent, and it is stored encrypted. People under 18 should not create an account.

5. Sharing

We share data only with processors that run the service: Supabase (database, authentication, Lumo Cloud storage), RevenueCat (subscriptions), Apple and Google (purchases, sign-in), Sentry (crash reports). If you choose Google Drive or OneDrive, encrypted files are written to your own account. Some of these processors operate outside your country; transfers rely on the safeguards of GDPR and Turkish KVKK (standard contractual clauses, or consent where required).

6. Retention and deletion

Deleted memories stay in the trash for 30 days, then are removed for good.
You can delete your account in the app (Settings → Delete account). Your account, sign-in data and the family books that are only yours are deleted from our servers immediately. Books shared with another parent stay with that parent; your sealed letters are kept for their opening day.
During deletion you can ask us to delete your files in Google Drive or OneDrive; otherwise they stay in your account.
Subscription records are kept as long as tax law requires. Cancel the subscription itself with Apple or Google.

7. Your rights

Under GDPR and KVKK Article 11 you can access, correct, delete and port your data and object to processing. Export in the app gives you all your memories as a ZIP and PDF. For anything else: destek@babylumo.app. You may also complain to your data protection authority.

8. Changes

If we change this policy we will tell you in the app.

9. Contact

Lumo, destek@babylumo.app