Privacy Policy for Lume

Last updated: October 2, 2026

The content you create in Lume—such as tasks, labels, focus history, and selected apps—is designed to remain on your device. Separate technical, diagnostic, subscription, and website information may be processed by the service providers described in this policy.

In this policy, Lume, we, us, and our refer to Viktor Persson, the developer and data controller identified in the Contact section.

1. Information processed by Lume

Information kept on your device

Depending on the features you use, the App stores the following locally on your device:

focus sessions, focus history, statistics, and streak information;
tasks, labels, timer settings, and other preferences;
selected apps to block and their package identifiers;
whether requested device permissions have been granted;
custom background images that you choose from your device; and
information needed to restore an active focus session and operate the App.

This information is stored locally on your device and is not uploaded to servers operated by us. Local information remains on your device until you delete it in the App where that option is available, clear the App's storage, or uninstall the App.

App-blocking information

If you choose to use app blocking, Lume asks for Android Usage Access so it can detect when an app you selected for blocking is opened during a focus session. The App may access:

the list of installed apps that can be launched on your device, including app names, icons, and package identifiers; and
foreground-app activity while the blocking feature is running.

This information is processed locally on your device to display the app selector and enforce your blocking choices. Lume does not collect, transmit, or send specific app names, package identifiers, or detailed app-usage histories to external servers, Firebase, or RevenueCat.

If you grant Display Over Other Apps permission, Lume uses it to show the blocking experience over a selected app. If you grant notification permission, Lume uses it for the active timer and related functional notifications. You can revoke these permissions in Android settings at any time, although the related features may no longer work.

Analytics and diagnostics (optional)

If you choose to enable optional analytics and diagnostics, Google Firebase (Analytics and Crashlytics) may process:

pseudonymous installation and app-instance identifiers;
technical device information (such as device model, OS version, language, and app version);
coarse location (such as country or region derived from truncated IP address);
feature engagement and interaction telemetry (such as timer sessions, general feature usage, task interactions, and aggregate preference choices); and
crash logs, stack traces, and performance diagnostics.

We use this information to understand how Lume is used, diagnose bugs, improve performance, and maintain security. We do not use this information for the purpose of identifying you by name or linking it to your real-world identity, and we do not use Firebase data for advertising. The App removes the Android advertising-ID permission.

Optional analytics and crash reporting remain disabled until you choose Share analytics during onboarding or in settings. You may withdraw your consent at any time through Share analytics in Profile. Withdrawing consent stops future collection and resets locally held Firebase analytics identifiers, without affecting processing that occurred prior to withdrawal.

Purchases and subscriptions

Lume uses Google Play Billing and RevenueCat to offer and manage Lume Plus. These providers may process:

a randomly generated RevenueCat App User ID that is not based on your name or email address;
product identifiers, offers and prices presented to you;
purchase and subscription history, transaction and receipt information, entitlement status, trial eligibility, renewal status, and expiration date;
country, platform, app version, device information, IP address, and technical request information; and
information needed to validate purchases, prevent fraud, restore purchases, provide entitlements, and produce subscription analytics.

Google Play processes your payment method and billing details. We and RevenueCat do not receive your full payment-card details. RevenueCat makes subscription information available to us through its dashboard so we can operate Lume Plus and assist with purchase issues.

Firebase App Check

Lume uses Firebase App Check with Google Play Integrity to help verify that requests come from an authentic installation of the App and to prevent abuse. This may involve device and app attestation material and short-lived App Check tokens. Attestation is also subject to Google's terms and privacy practices.

Information you provide to us

If you contact us, we receive the information you choose to include, such as your email address, message, attachments, and support details. The App's Contact support action may prefill an email with your RevenueCat App User ID, Lume version, Android version, and device model to help us troubleshoot; these details are sent only if you choose to send the email. If you join the iOS waitlist on our website, we collect the email address you submit, the platform you select (currently iOS), page-source and campaign parameters in the link you used (if present), your country code supplied by Cloudflare, your browser's User-Agent string, and the submission time. You can ask us to remove your waitlist entry by emailing us.

Website information

Cloudflare hosts the website and its waitlist API. When you submit the waitlist form, Cloudflare processes the request and stores the information described above in its D1 database. The waitlist API stores a country code derived from the request and the browser's User-Agent string; Cloudflare may also process your IP address and request details to deliver, secure, and troubleshoot the website. The website loads fonts from Google Fonts, so Google may receive your IP address, browser/device request details, and the requested font files. The website code currently does not include a non-essential analytics or advertising tracker or set browser cookies for analytics.

2. Why we process information and our legal bases

Where the GDPR, UK GDPR, or similar law applies, we rely on the following legal bases:

Performance of a contract (GDPR Art. 6(1)(b)): to provide requested App features, validate and restore purchases, and deliver Lume Plus entitlements.
Consent (GDPR Art. 6(1)(a)): for optional Firebase analytics and crash diagnostics (which remain disabled until you affirmatively opt in), and for sending iOS waitlist availability updates. You can withdraw your consent at any time.
Legitimate interests (GDPR Art. 6(1)(f)): to protect the security and authenticity of the App (including Firebase App Check with Play Integrity), prevent fraud and abuse, diagnose technical faults, and respond to support inquiries.
Legal obligation (GDPR Art. 6(1)(c)): to comply with mandatory tax, accounting, consumer protection, and statutory legal requirements.

Information processed only on your device is used to provide the feature you requested and is not available to us.

Whether you need to provide information

You do not have to enable optional analytics. Declining analytics does not limit Lume's core features. Providing an email address for the waitlist is optional, but without it we cannot send you product availability updates or launch notifications. Providing an email address when contacting support is optional, but without a way to reply we may not be able to resolve your request. Google Play requires information from your Google Play account to process a purchase or restoration; if you do not provide it to Google Play, you cannot complete that purchase or restore the related entitlement. Device permissions are optional, though features that depend on a permission may not work if you decline it.

We do not make decisions based solely on automated processing of your personal data, including profiling, that produce legal effects concerning you or similarly significantly affect you. Third-party providers may use automated processes for their own services, as described in their notices.

3. Who receives information

We use trusted service providers who process information on our behalf as data processors or under their respective terms. We do not sell or rent your personal information and do not use it for targeted advertising. We disclose information only as described in this policy:

Google LLC and its affiliates: Firebase Analytics, Crashlytics, App Check, Play Integrity, Google Play Billing, and subscription management;
RevenueCat, Inc.: purchase validation, subscription status, entitlements, restoration, fraud prevention, and subscription analytics;
Cloudflare, Inc.: website hosting, delivery, security, and waitlist infrastructure;
Google LLC: delivery of fonts used on the website;
professional advisers or service providers where reasonably necessary and subject to appropriate confidentiality and data-protection obligations;
a buyer or successor if the App or business is reorganized, sold, or transferred, subject to applicable law; and
authorities or other parties when disclosure is required by law or reasonably necessary to protect legal rights, users, or the security of the App.

Third-party service providers process information pursuant to applicable data-protection agreements and their respective terms and privacy notices.

4. International transfers

Some providers may process information outside Sweden or the European Economic Area, including in the United States. Where required, we use or rely on appropriate safeguards, such as an adequacy decision, the EU Standard Contractual Clauses, and supplementary measures. You may contact us for more information about applicable safeguards.

5. Retention

On-device information: retained locally until you delete it in the App where available, clear App storage, or uninstall Lume.
Firebase Analytics and Crashlytics: retained in accordance with the retention settings configured within Firebase (up to 14 months for user-level data) and Google's standard data policies.
Purchase and subscription records: we retain transaction and entitlement records available through RevenueCat and Google Play for as long as reasonably necessary to maintain your subscription, provide customer support, and comply with statutory tax and accounting retention periods (such as under Swedish accounting law). RevenueCat and Google process transaction data under their own retention policies.
Support correspondence: retained for as long as reasonably necessary to resolve your request and maintain records of the interaction, after which it is deleted or anonymized unless a longer period is required for dispute resolution.
Waitlist details: retained until the iOS launch announcement has been sent, or until you request removal or unsubscribe.

We may retain de-identified or aggregated information that can no longer reasonably identify or single out an individual.

6. Your choices and rights

You can:

decline or revoke Usage Access, Display Over Other Apps, and notification permission in Android settings;
activate or deactivate optional analytics and diagnostics through Share analytics in Lume's Profile screen;
delete local App data by using available deletion controls, clearing Lume's storage, or uninstalling the App;
manage or cancel a subscription through Google Play; and
unsubscribe from waitlist or marketing messages through the provided method or by contacting us.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; to withdraw consent; and to complain to a data-protection authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

Because Lume does not require an account and most remotely processed data uses pseudonymous installation identifiers, we may need your RevenueCat App User ID or other information to locate a record. The App's Profile → Contact support action can include the current RevenueCat App User ID in a prefilled email; you can also include it in a privacy request. We may be unable to identify data that cannot reasonably be linked to you. We will explain the outcome of your request.

To exercise a privacy right, email [email protected] with the subject Privacy Request. We may ask for information reasonably necessary to verify and complete the request.

Notice to United States residents

We do not sell personal information, nor do we share or process your personal data for targeted or cross-context behavioral advertising. Depending on your state of residence, you may have statutory rights to access, correct, or delete your personal data. You may exercise any applicable rights by emailing [email protected] with the subject US Privacy Request.

7. Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

Lume is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or legal guardian and believe a child has provided us with personal information, contact us so we can investigate and delete it where appropriate.

9. Changes to this policy

We may update this policy to reflect changes to Lume, our providers, or applicable law. We will post the revised policy with a new "Last updated" date. If a change is material, we will provide additional in-app notice and request consent where required.

10. Contact

Questions, complaints, and privacy requests may be sent to:

Viktor Persson
Svanvägen 28
891 40 Gimåt, Örnsköldsvik
Sweden
Email: [email protected]