Lumi
privacy policy.

What we collect

Nothing. Lumi has no account system, no sign-in, no email collection and no analytics. We do not collect your name, your contact details, your location, your device identifiers or your health information. There is no server that receives your cycle data, because Lumi does not operate a backend for it.

Everything you enter — periods, symptoms, moods, discharge, sex, sleep, notes, check-ins, pregnancy tests and free-text notes — is written to Lumi's private storage on your device. It is never transmitted to us, and there is no account for it to be attached to.

Your phone's own backup

Your phone's own backup is the one copy that can exist outside the app, and it is what usually carries your history to a new phone. It is worth being exact about.

Android backs app data up to your Google account (Auto Backup / "Backup by Google One"), and iPhone backs app data up to iCloud. Lumi ships with that enabled. If your phone's backup is switched on, a copy of Lumi's stored data — your logged days, periods, check-ins and profile answers — is included in it.

That copy is created, encrypted and stored by Google or Apple under your account and your phone's settings. Google encrypts Android backups with the screen lock on your device. We cannot see this copy, we cannot read it, and we are never sent it. It is not part of our systems in any way; it is the platform's own backup of the app, exactly as it would be for your photos or messages.

You control it, and turning it off does not change how Lumi works:

• Android: Settings → Google → Backup (or Backup by Google One) → turn off backup, or exclude an app under "Back up by Google One" → App data.
• iPhone: Settings → your name → iCloud → iCloud Backup → turn off, or turn it off for the device.

Deleting your data inside Lumi (Settings → Delete all data) removes it from the app on that device. It does not reach into a backup that was already taken; an existing backup stays until it expires or you delete it from your Google or Apple account.

If you would rather not depend on the phone backup at all — or you are moving between Android and iPhone, where it cannot help — use Settings → Your data → Export everything. That writes a backup file you keep yourself, and Import a backup puts it back on the new phone. That path involves no third party and works the same on every platform.

What leaves your device

Two things, and only in these circumstances. Neither is Lumi sending your health data anywhere, and there are no advertising requests of any kind.

• Purchase information, once, when you buy Lumi. The purchase is handled by Google Play. Google knows that a purchase occurred and that it belongs to your Play account. Google does not receive any of the information you have entered in the app. Lumi costs 25 DKK once; there is no subscription and nothing to renew.
• Your phone's own backup, only if you have it switched on. A copy of the app's stored data is held by Google (Android) or Apple (iPhone) under your account. See "Your phone's own backup" above for what that includes and how to turn it off.

Reminders are scheduled locally on your device. Lumi does not use a push notification service, so no reminder content leaves your phone.

Advertising

Lumi contains no advertising. There is no ad SDK in the app, so there is nothing to configure, no consent to give and no request that could be made. The app also ships without the Android advertising ID permission (com.google.android.gms.permission.AD_ID is explicitly removed at build time), so it is technically incapable of reading your advertising identifier even if something later tried to.

Your control over your data

• Export. Settings → Your data → Export everything produces a copy of your data as a backup file (JSON) that you choose where to send — a cloud drive, an email to yourself, or a computer.
• Import. Settings → Your data → Import a backup reads that file back, checks it, and either adds what is missing or replaces what is on the phone. Older backup files are brought forward to the current format automatically. Import never touches your purchase or your app lock. On a brand new install the same screen is offered from the welcome screen, so a new phone can be restored before you answer the setup questions again.
• Delete. Settings → Your data → Delete all data erases your cycles, logs and check-ins from the device immediately and permanently. A backup taken earlier by your phone is outside our reach; delete it from your Google or Apple account if you want no copy to exist anywhere.
• App lock. Settings → App lock can require your biometric or device PIN before Lumi opens.
• Purchase. Paid once through Google Play and tied to the Play account. A new phone or a reinstall gets it back with Restore purchase in Settings.

Children

Lumi is not directed at children. The app contains no age-gated content and collects no personal data from anyone.

Medical information

The health library, symptom checker and score tools in Lumi provide general information. They do not diagnose any condition and do not replace advice from a clinician.

Changes to this policy

If this policy changes, the new version will be published at this URL and the date at the top of this page will change. Because we do not collect contact details, we cannot notify you individually — the in-app privacy screen always reflects the current practice.

Contact

Questions about privacy: privacy@railroutestudio.dk. Other questions about Lumi: kontakt@railroutestudio.dk. Railroute Studio, Denmark.