Your data, your control

Privacy & Security

Your journal entries are among the most sensitive data you own. Here's exactly how we handle them — no fine print, no surprises.

You own your data — always

Every journal entry, insight, mood record, and pattern you create in Lumina belongs to you. We are the custodian, not the owner.

Export anytime: Download your entire journal as PDF, CSV, or JSON — one click, no waiting.
Delete permanently: Delete your account and all associated data is purged within 30 days. No retention games.

We never train AI on your entries

Your journal entries are sent to AI providers (Anthropic, OpenAI, DeepSeek) solely for the purpose of generating your reflection and insights. They are not used to train or improve the underlying AI models. This is contractual — all providers we use have zero-data-retention policies for API usage.

Anthropic: "We do not train our models on user or customer data submitted through the API." Read policy →

Bring Your Own Key (BYOK) — maximum privacy

If you add your own Anthropic API key in Settings, your journal entries are sent directly from your browser to Anthropic's API using your credentials. Lumina's servers never see your AI requests or responses. Your data stays between you, your browser, and Anthropic.

Your key, your control: Revoke it anytime in your Anthropic dashboard. Lumina has no access to your Anthropic account.
Pay at cost: Analyses cost ~$0.01–$0.05 each at Anthropic's API rates. With BYOK, you bypass all credit limits entirely.

Infrastructure & encryption

Data at rest: Journal entries, user data, and AI analysis results are stored in a PostgreSQL database with encryption at rest (AES-256).

Data in transit: All traffic between your browser and Lumina is encrypted via TLS 1.3. API calls to AI providers are also TLS-encrypted.

Authentication: We use industry-standard OAuth 2.0 (Google) and secure password hashing (bcrypt) with email verification.

Hosting: Lumina runs on secure cloud infrastructure with regular security patches, access controls, and monitoring.

Your rights

Export: Download all your data in machine-readable formats (PDF, CSV, JSON) anytime.
Access: Request a complete copy of all data we hold about you within 30 days.
Delete: Delete your account and all associated data permanently. We confirm deletion within 30 days.
No sale of data: We do not sell, rent, or share your personal data or journal entries with third parties for marketing or advertising.

Questions about privacy?

We take data privacy seriously. If you have specific questions about how your data is handled, reach out.

privacy@infolumina.com

← View pricing

You own your data — always

Every journal entry, insight, mood record, and pattern you create in Lumina belongs to you. We are the custodian, not the owner.

Export anytime: Download your entire journal as PDF, CSV, or JSON — one click, no waiting.

Delete permanently: Delete your account and all associated data is purged within 30 days. No retention games.

We never train AI on your entries

Anthropic: "We do not train our models on user or customer data submitted through the API." Read policy →

Bring Your Own Key (BYOK) — maximum privacy

Your key, your control: Revoke it anytime in your Anthropic dashboard. Lumina has no access to your Anthropic account.

Pay at cost: Analyses cost ~$0.01–$0.05 each at Anthropic's API rates. With BYOK, you bypass all credit limits entirely.

Infrastructure & encryption

Data at rest: Journal entries, user data, and AI analysis results are stored in a PostgreSQL database with encryption at rest (AES-256).

Data in transit: All traffic between your browser and Lumina is encrypted via TLS 1.3. API calls to AI providers are also TLS-encrypted.

Authentication: We use industry-standard OAuth 2.0 (Google) and secure password hashing (bcrypt) with email verification.

Hosting: Lumina runs on secure cloud infrastructure with regular security patches, access controls, and monitoring.

Your rights

Export: Download all your data in machine-readable formats (PDF, CSV, JSON) anytime.

Access: Request a complete copy of all data we hold about you within 30 days.

Delete: Delete your account and all associated data permanently. We confirm deletion within 30 days.

No sale of data: We do not sell, rent, or share your personal data or journal entries with third parties for marketing or advertising.