Effective date: [30 June 2026]
This Privacy Policy explains how Lume ("Lume", "we", "us") collects, uses, and shares information when you use the Lume: The GLP-1 Companion app (the "App"). If you have questions, contact us at lumecompanion@gmail.com.
Lume is a wellness companion for people on a GLP-1 journey. It is not a medical provider and does not give medical advice.
The health information you enter (weight, doses, injections, meals, check-ins, lab results) is stored on your device. We do not run a server that keeps a copy of your health diary.
When you use AI features (Bloodwork Analysis and the AI Concierge), the relevant content is sent to Google for processing — and only after you give in-app consent for that feature.
We use AppsFlyer and Meta to measure advertising, and RevenueCat and Apple to manage subscriptions.
You can export or delete your data in the app, withdraw AI consent at any time, and decline ad tracking when prompted.
When you use Lume, you may enter:
Your name and basic profile details
Weight (starting, current, goal, and your weight log over time)
Medication details (your GLP-1 medication, dose, and dose history)
Injection logs and reminders
Meals and nutrition (calories, protein, fiber), hydration, and daily check-ins
Goals, concerns, and coaching preferences
Photos you choose to add
Lab/bloodwork PDFs you upload for analysis
Messages you send to the AI Concierge
This information may include health-related data. You choose what to enter, and you can edit or delete it.
Device and usage data — app version, device type, operating system, and general interaction data used to keep the App working and improve it.
Identifiers for advertising — if you allow tracking when prompted (Apple's App Tracking Transparency), we and our partners may use your device's advertising identifier (IDFA) and an AppsFlyer device identifier to measure the performance of our ads. If you decline, we rely on privacy-preserving measurement (Apple's SKAdNetwork) instead.
Most of the information you enter is stored locally on your device. Lume does not operate a central database that retains your health diary. Certain features send specific data to third parties for processing, as described below, and subscription and advertising-measurement data are handled by the partners listed under "Third parties."
Two features use Google's Gemini AI:
Bloodwork Analysis — when you upload a lab PDF, the document is sent to Google to generate your analysis.
AI Concierge — when you send a message, your message and relevant context are sent to Google to generate a response.
These features ask for your explicit in-app consent the first time you use them, and you can withdraw consent at any time in Profile → Privacy & Security. Data sent to Google is processed under Google's terms and privacy policy: https://policies.google.com/privacy. Please avoid including information you do not wish to share with a third-party AI service.
We share limited information with the following service providers so the App can function:
Google — AI processing for Bloodwork Analysis and the AI Concierge. https://policies.google.com/privacy
AppsFlyer — mobile attribution and analytics (measuring which ads lead to installs and key actions). https://www.appsflyer.com/legal/services-privacy-policy/
Meta Platforms — advertising and ad measurement, including via AppsFlyer and Apple's SKAdNetwork. https://www.facebook.com/privacy/policy/
RevenueCat — manages your subscription and free trial. https://www.revenuecat.com/privacy/
Apple — processes payments and provides privacy-preserving ad measurement (SKAdNetwork) and the App Store. https://www.apple.com/legal/privacy/
We do not sell your personal information.
To provide and operate the App's features
To process your subscription and free trial
To measure and improve our advertising
To maintain security, prevent abuse, and fix problems
To respond to your support requests
When you first reach the main app, iOS asks whether you allow tracking. You can change this anytime in iOS Settings → Privacy & Security → Tracking. If you decline, you'll still see the App normally; we simply rely on aggregated, privacy-preserving measurement.
Access / export — export a copy of your data in Profile → Privacy & Security.
Delete — clear your data in the App, or delete the App to remove locally stored data from your device.
Withdraw AI consent — turn off Bloodwork or Concierge AI consent in Profile → Privacy & Security.
Manage your subscription — in your Apple ID subscription settings.
Depending on where you live (for example, the EEA, UK, or California), you may have additional rights to access, correct, or delete personal information, or to object to certain processing. To make a request, email lumecompanion@gmail.com.
Information you enter remains on your device until you delete it or remove the App. Information processed by our service providers is retained according to their own policies linked above. Subscription records are retained as needed for billing and legal purposes.
We take reasonable measures to protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Lume is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will address it.
If you use Lume outside the country where our service providers operate, your information may be processed in other countries, including the United States, under the safeguards of the providers listed above.
Lume is a wellness and tracking companion. It does not diagnose, treat, or prescribe, and it is not a substitute for professional medical advice. Always consult a licensed clinician about your GLP-1 protocol — especially before changing your dose, stopping medication, or interpreting lab results.
We may update this Privacy Policy from time to time. We'll revise the "Effective date" above and, where appropriate, notify you in the App.
Questions or requests: lumecompanion@gmail.com