Privacy Notice

This Privacy Notice is provided by Lumen ("Lumen", "we", "us"), the operator of the Lumen dashboard service. Lumen acts as the data controller for the personal data described in this notice — meaning we determine how and why your data is processed.

Questions about this notice or your data? Contact us at support@lumenz.fyi.

• Account details — your name, email address, and sign-in credentials (via Google sign-in or email).
• Dashboard content — events, habits, notes, and tasks you choose to add.
• Preferences — your theme, layout, widget, and notification settings.
• Usage and device data — pages visited, feature interactions, browser type, and IP address, used for security and product improvement.
• Support messages — anything you send us when you ask for help.

• Your private messages from other services.
• Your passwords for third-party accounts.
• Your payment card details — these are handled entirely by Paddle, our payment processor, and never touch our servers.

We process personal data only where we have a valid legal basis:

• Contract performance — to create your account, provide the dashboard, sync your data, and deliver the features you use.
• Legitimate interests — to secure the service, prevent fraud and abuse, and improve the product through aggregated, non-identifying analytics.
• Consent — for optional features such as AI-powered suggestions and notifications, which you can turn off at any time in Settings.
• Legal obligation — where we must retain or disclose information to comply with the law.

We share personal data only with the categories of recipients needed to run Lumen:

• Service providers and subprocessors — cloud hosting, database, and analytics providers who process data on our behalf under contract.
• Paddle — our Merchant of Record. When you purchase a membership, Paddle processes the sale, payments, taxes, and invoicing, and receives the information needed to do so. See Paddle's own privacy policy at paddle.com for how they handle buyer data.
• Professional advisers — legal and accounting advisers, where necessary.
• Authorities — where disclosure is required by law or to protect rights and safety.

We do not sell your personal data to anyone.

We keep your personal data only for as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain limited records to meet legal, tax, or fraud-prevention obligations. Backups roll off on a fixed cycle and are then unrecoverable.

We protect your data with appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS) and at rest, row-level access controls on every account's data, restricted staff access, and ongoing monitoring. No system is perfectly secure, but protecting your information is a core design principle of Lumen.

We use a small number of cookies and similar storage:

• Essential — sign-in sessions and security tokens. Required for the app to work.
• Preferences — remembering your theme and layout choices.
• Analytics — aggregated usage statistics that help us improve Lumen (where enabled).

You can control or delete cookies through your browser settings; essential cookies are needed to stay signed in.

Depending on where you live, you have rights over your personal data, including the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (you can delete your account in Settings).
• Restrict or object to certain processing.
• Data portability — export your data.
• Withdraw consent for optional features at any time, without affecting prior processing.
• Complain to your local data protection authority.

To exercise any of these rights, email support@lumenz.fyi. We respond within one month.

If your data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

If we make material changes to this Privacy Notice, we'll let you know in the app or by email before they take effect. The "last updated" date above always reflects the current version. See also our Terms of Service and Refund Policy.