Privacy Policy
LumaHabit (“we”, “us”) is a habit and wellness tracker. This policy explains what data the app handles, why, and the choices you have. In short: no ads, no selling of data, no third-party analytics or tracking.
Using the app without an account
LumaHabit works fully offline. Without an account, everything you enter stays on your device and is never sent to us.
Data we process when you create an account
- Account data: your name, email address and a securely hashed password (we never store your password in plain text).
- Content you enter: habits, check-ins, routines, planner items, mood entries (including notes), water intake, sleep and body measurements, and app settings — synced so they appear on all your devices.
- Subscription status: if you buy Premium, Apple or Google sends us a purchase confirmation (product, dates, renewal status). We never receive your card or bank details.
- Technical data: standard server logs (IP address, time, request) kept for up to 30 days for security and troubleshooting.
How we use it
- To provide the app: sign-in, syncing between devices, Premium features, password reset emails.
- To keep the service secure and working.
We do not use your data for advertising, profiling or tracking, and we do not sell or share it with third parties, except service providers that host our servers and send emails on our behalf under confidentiality obligations, or when required by law.
Health-related information
Mood, sleep, water and body entries are personal wellness data. They are used only to show you your own progress. LumaHabit is not a medical device and does not provide medical advice.
Storage and security
Data is transmitted over encrypted connections (HTTPS) and stored on our servers. Sign-in tokens on your device are kept in the platform's secure storage (iOS Keychain / Android private app storage).
Retention and deletion
We keep your account data until you delete your account. You can delete it at any time in the app (Profile → Data & Privacy → Delete account) or as described on our account deletion page. Deletion removes your account and synced data from our servers within 30 days (backups included).
Your rights
You can access, correct, export or delete your data, and object to or restrict its processing. Contact us at the address below. If you are in the EU/UK you may also complain to your data protection authority.
Children
LumaHabit is not directed at children under 13 (under 16 in the EU) and we do not knowingly collect their data.
Changes
We will post updates on this page and change the date above. Significant changes will be announced in the app.
Contact
Email [email protected].