Privacy Policy

Effective [EFFECTIVE DATE]

This policy explains what Lumi collects, why, who we share it with, and what you can do about it. It covers the Lumi mobile app and the Lumi API.

Lumi is operated by BoonWiz ("we", "us").

Questions: Boonyboonapp@gmail.com

The short version

• We ask for your birth date, time and place because that is what an astrological chart is calculated from. Without them the app cannot work.

• We ask about your mood, fears and goals so readings reference your situation. This is optional in the sense that you choose the answers, but the onboarding flow does require an answer to continue.

• Your birth details and your partner's details are encrypted in our database.

• We send some of this to Gemini to write your readings. See "AI-generated readings".

• We show ads to users on the free tier, and share advertising identifiers to do so.

• Lumi is entertainment. Nothing in it is medical, legal, financial or psychological advice, and no reading is a prediction of real events.

What we collect

You give us directly

Data

Why

Notes

Birth date

Calculates your Sun sign and all planetary positions

Encrypted at rest

Birth time

Calculates your ascendant and house placements

Encrypted at rest. Optional — the app works without it, with reduced detail

Birth place

Determines house placements; converted to coordinates and a timezone

Encrypted at rest

Relationship status

Personalises love readings

Fears and goals (three each)

Personalises readings

Chosen from a fixed list

Current mood (0–100)

Personalises readings

Name or nickname

Used in readings and notifications

Optional

Email address

Account sign-in and recovery

Only if you create an account

Partner's name, birth date, birth time and birth place

Compatibility readings

Encrypted at rest. See "Data about other people"

Questions you ask the AI Astrologer

To answer them

Stored so your history survives reinstalling

Tarot questions

To interpret the spread

Created automatically when you use Lumi

• Derived astrology: your Sun, Moon and rising signs, planetary positions, house placements and aspects. Calculated from your birth data, stored unencrypted because they do not identify you.

• Usage: app opens, screens viewed, streak length, readings viewed, compatibility checks, tarot draws, shares, and which onboarding screen you last reached.

• Purchases: what you bought, when, the price, the store, and a transaction identifier. We never see your card details — the App Store, Play Store and RevenueCat handle payment.

• Device and technical: platform (iOS/Android), app version, timezone, IP address (in server logs), and a push notification token if you enable notifications.

• Experiment assignment: which A/B test group you are in.

We do not collect

• Payment card numbers or bank details

• Your device's precise GPS location (the "birth place" is a city you type, not your current position)

• Contacts, photos, microphone or camera. Saving a share card writes to your photo library; it does not read from it.

• Health records or any clinical data

Data about other people

If you enter a partner's birth details for a compatibility reading, you are giving us personal data about someone who is not our user and has not agreed to this.

Please only enter someone else's details if they are happy for you to. We store those details encrypted, use them solely to produce the reading you asked for, and never contact that person or build a profile of them. If someone believes their details are in Lumi and wants them removed, they can email [PRIVACY EMAIL] and we will delete them.

We may ask you to confirm the request relates to details you entered, because we have no other way to identify whose data it is.

AI-generated readings

Your readings are written by a large language model provided by Gemini. To do that we send Gemini:

• your Sun, Moon and rising signs and your full chart data

• your birth date and birth place (not your birth time)

• your stated mood, fears and goals, and your relationship status

• your first name, if you gave one

• the message you type when using the AI Astrologer, and recent chat context

We do not send your email address, your account identifier, your device identifiers, or your payment history.

Gemini processes this to generate a response and, under their API terms as at the effective date of this policy, does not use API data to train their models. Gemini is based in the United States; if you are outside the US this means your data is transferred there.

If Gemini is unavailable, Lumi falls back to its own built-in text engine, which runs on our servers and sends nothing externally.

A reading is generated text. It is not advice, not a prediction, and not reviewed by a person before you see it.

Advertising

If you are on the free tier we show ads through Google AdMob, including banners, interstitials, rewarded videos and native ads. To do that, your device's advertising identifier and ad interaction data are shared with Google.

• On iOS, we ask for permission through Apple's App Tracking Transparency prompt. If you decline, ads still appear but are not personalised.

• On Android, you can reset or delete your advertising ID in your system settings.

• Premium subscribers see no ads, and no advertising identifier is shared for ad purposes.

We do not sell your personal information for money. Sharing advertising identifiers for personalised advertising may count as "sharing" or "selling" under some US state laws — see "US state privacy rights".

Who we share data with

Who

What they get

Why

Gemini

Chart data, birth date and place, mood/fears/goals, chat messages

Writes your readings

Google Firebase

Email, account ID, usage events, push token

Sign-in, analytics, notifications, feature flags

Google AdMob

Advertising identifier, ad interactions

Ads on the free tier

RevenueCat

Account ID, purchase and subscription events

Manages subscriptions and receipts

Apple / Google

Purchase and subscription data

Process payments and run the stores

Google Places

The city text you type when searching

Birth-place lookup. Only used if configured; a built-in city list handles most searches without any external call

Our hosting and infrastructure providers

Whatever is needed to run the service

Hosting, database, error logs

We do not sell your personal information. We may disclose data if legally required, to protect our rights or someone's safety, or as part of a business sale — in which case this policy continues to apply until you are told otherwise.

How we protect it

• Birth date, birth time, birth place and all partner details are encrypted at rest using AES-256-GCM. They are decrypted only to calculate a chart or produce a reading.

• Traffic between the app and our servers uses HTTPS.

• Our server logs redact authorisation headers and birth data, so your details do not end up in log files.

• Access to production data is limited to people who need it.

No system is perfectly secure, and we cannot guarantee absolute security.

How long we keep it

• Your account and chart data: until you ask us to delete it.

• Compatibility results: 30 days, then recalculated on demand.

• Daily horoscopes: cached 24 hours.

• Readings, tarot draws and AI chat history: kept so you can revisit them, until you delete them or close your account.

• Usage events and notification records: kept for analysis.

• Purchase records: kept as long as needed for tax, accounting and dispute handling.

You can clear your AI chat history at any time from within the app.

Your choices

In the app: turn notifications on or off; clear cached readings; clear your AI chat history; manage or cancel your subscription through your store account; opt out of tracking on iOS via App Tracking Transparency.

By contacting us at [PRIVACY EMAIL]: get a copy of your data; correct it; delete your account and everything associated with it; object to or restrict certain processing; withdraw consent where processing is based on consent.

We will respond within the time your local law requires — 30 days in most cases. We may ask you to verify your identity first.

Account deletion: at present, deletion is handled by emailing us rather than through a button in the app. We action requests within 30 days.

US state privacy rights

If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you have the right to know what we collect, to get a copy, to correct it, to delete it, and to opt out of "sale" or "sharing" for targeted advertising — without being discriminated against for exercising those rights.

We do not sell personal information for money. To opt out of personalised advertising, decline App Tracking Transparency on iOS, reset your advertising ID on Android, or subscribe to Premium, which removes ads entirely. You can also email [PRIVACY EMAIL].

Under California's "Shine the Light" law you may request details of any disclosure to third parties for their direct marketing purposes. We do not make such disclosures.

If you are in the UK, EU or EEA

Our legal bases:

• Contract — creating your account, calculating your chart, delivering readings you requested, and handling subscriptions.

• Consent — notifications, personalised advertising, and optional profile details. Withdrawable at any time.

• Legitimate interests — keeping the service secure, preventing abuse, and understanding how the app is used, balanced against your rights.

You also have the right to data portability and to lodge a complaint with your data protection authority. Data is transferred to the United States (our infrastructure, GeminiI, Google and RevenueCat) under Standard Contractual Clauses or an equivalent safeguard.

Note that mood and stated fears may, in combination, be treated as sensitive data in some jurisdictions. We use them only to write your readings and never to infer a health condition.

Children

Lumi is not for children under 13, and we do not knowingly collect their data. Sign-up requires a birth date showing you are at least 13. If you believe a child under 13 has given us data, email [PRIVACY EMAIL] and we will delete it.

Lumi is designed for adults. If you are between 13 and 18, please get a parent or guardian's permission before subscribing.

Changes

We will update this policy when the app changes. If a change is significant we will tell you in the app or by email before it takes effect. The "Effective" date at the top always shows the current version.

Contact

Boonwiz boonyboonapp@gmail.com