Lumi
privacy policy.

What we collect

Nothing. Lumi has no account, no sign-in, no email collection and no analytics. We do not collect your name, contact details, location, device identifiers or health information. There is no server that receives your cycle data, because Lumi has no backend to send it to.

Everything you enter — periods, symptoms, moods, discharge, sex, sleep, notes, monthly check-ins, pregnancy tests and free text — is stored in Lumi's own storage on your phone. It is never sent to us, and there is no account to attach it to. The app makes no network requests at all.

What can leave your phone

Copies leave your phone only when you make them. None of them are sent to us.

• Your phone's own backup, if you have it switched on. It is held by Google or Apple under your own account. See the section below.
• A backup file that you export from Settings yourself. The file is not encrypted: anyone who has it can read your record, so keep it somewhere private.
• A report you share, such as the Health 360 report for an appointment. It is shared only when you choose to send or print it.

The purchase is handled by the app store before the app is installed. The store knows that you bought Lumi, but learns nothing about what you write in it. The app contains no purchase code.

Your phone's own backup

Your phone's own backup is usually what carries your history to a new phone. That is why Lumi does not switch it off, and why it is worth being precise about.

Android backs up app data to your Google account, and iPhone backs up app data to iCloud. If backup is switched on for your phone, a copy of Lumi's stored data goes with it — your logged days, periods, monthly check-ins and setup answers.

That copy is made, encrypted and kept by Google or Apple under your account and your phone's settings. We cannot see it, we cannot read it, and it is never sent to us.

You control it, and switching it off does not change how Lumi works:

• Android: Settings → Google → Backup → turn backup off, or exclude Lumi under app data.
• iPhone: Settings → your name → iCloud → iCloud Backup → turn it off.

Because we store nothing, losing your phone without a backup means losing your history. If you would rather not rely on your phone's backup — or you are moving between Android and iPhone — use Settings → Backup and data → Export everything, and bring the file into the new phone with Import a backup.

Reminders, lock screen and widget

Reminders are scheduled on the phone. No push service is used, and nothing in a reminder is sent anywhere. By default a reminder says nothing about your cycle, so nothing is revealed on the lock screen. If you turn on “Show details on the lock screen”, that is your choice, and you can turn it off again.

The home-screen widget shows only the Lumi mark and a log button until you choose what it shows — for example your cycle day or next period. Each item is its own choice under Settings → Home-screen widget, and with app lock on the widget shows only the mark by default.

Advertising

Lumi contains no advertising. There is no advertising software in the app, so there is nothing to configure and nothing to consent to. The app is also built without Android's advertising-ID permission (com.google.android.gms.permission.AD_ID is blocked at build time), so it cannot read your advertising ID.

Your control over your data

• Export. Settings → Backup and data → Export everything gives you a copy of your data as a file that you decide where to keep. The file is not encrypted, so keep it somewhere private.
• Import. Import a backup reads the file, shows what will change, and either adds what is missing or replaces what is on the phone. You can undo an import straight afterwards. Older files are brought forward to the current format automatically, and your settings and app lock are not changed. On a fresh install, import is offered on the welcome screen.
• Deletion. Settings → Delete everything removes your periods, logs and monthly check-ins from the phone immediately. Backup files you saved elsewhere, and your phone's own backup, are not affected — delete those yourself if no copy should exist anywhere.
• Lock. Settings → App lock can require your fingerprint, face or passcode before Lumi opens. Screenshots and the app switcher preview can be hidden too.

Children

Lumi is not directed at children. The app collects no personal information from anyone.

Health content

The health library, the symptom checker and the monthly check-in provide general information. They are not a diagnosis and are not a substitute for an assessment by a clinician. Every article shows the date it was last reviewed.

Changes to this policy

If the policy changes, the new version is published at this address and the date at the top of the page changes. Because we collect no contact details, we cannot notify you individually — the privacy screen in the app always describes the current practice.

Contact

Privacy questions: privacy@railroutestudio.dk. Anything else about Lumi: kontakt@railroutestudio.dk. Railroute Studio, Denmark.

Because the app collects nothing, there is nothing to request, correct or delete on a server. Everything can be deleted from Settings in the app.