Luma Balance

This Privacy Policy explains how Luma Balance ("Luma," "we," "us") collects, uses, shares, and protects information when you use our website and app (the "Service"). By using Luma, you agree to the practices described here.

1. Information we collect

Account information

When you create an account we collect your email address, password (stored securely and never in plain text), display name, and username. You may optionally add a profile photo, bio, and social links.

Health and wellness information

Weekly check-ins you log — weight, mood, and any notes you write — are health-related information you choose to share with us. This data is private by default and protected by row-level security at the database level, meaning it is restricted to your account unless you explicitly choose to share it. If you select health conditions during onboarding, we store that selection to personalize resources shown to you.

Content you create

Community posts, photos, short videos, comments, replies, likes, direct messages, and group chat messages are stored so the Service can display them to the people you share them with (or publicly, for community posts).

Connections and usage

We store who you follow and who follows you, group memberships and invites, and basic usage information such as timestamps of your activity, device push-notification subscription details (so we can deliver notifications to your device), and support requests you submit to us.

Automatically collected information

We use privacy-respecting analytics (Vercel Analytics) to understand aggregate usage of the Service, such as which pages are visited. This does not identify you individually to us beyond what your account already provides.

2. How we use your information

To provide and maintain the Service, including your weekly check-ins, community feed, and messaging.
To send you notifications you've enabled (in-app and push), such as new followers, likes, replies, comments, and group invites.
To personalize the resources shown to you based on health conditions you select.
To respond to support requests and enforce our Terms of Use, including content moderation.
To keep the Service secure and prevent abuse, spam, or fraud.

If you use Luma's AI assistant feature, the message you send is shared with our AI provider (Google Gemini) solely to generate a response to you. We do not use your private check-in data to train third-party AI models.

3. Who we share information with

We do not sell your personal information. We share information only with:

Other users, limited to what you choose to post publicly or send directly (e.g., community posts, direct messages, group chats).
Service providers who process data on our behalf under contract, including Supabase (database, authentication, and file storage), Vercel (hosting and analytics), Resend (transactional email delivery), and Google Gemini (AI assistant responses, when you use that feature).
Legal or safety purposes, if required by law, or to protect the rights, safety, or property of Luma, our users, or the public.

4. Data security

We use industry-standard safeguards, including encryption in transit (HTTPS), row-level security enforced at the database layer (not just in the app interface), and access controls limiting who can view your private data. No method of transmission or storage is 100% secure, but we work to protect your information at every layer.

5. Your choices and rights

Access and update: You can view and edit most of your profile and settings directly in the app.
Delete your account: You can permanently delete your account and associated data at any time from your account settings.
Notifications: You can control which in-app and push notifications you receive from your notification settings.
Data requests: To request a copy of your data or ask us a question about this policy, email us at lumabalancesupport@gmail.com.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data, except where we are required to retain it for legal, security, or fraud-prevention purposes.

7. Children's privacy

Luma is not directed to, and should not be used by, anyone under 16 years old. We do not knowingly collect information from children under 16. If you believe a child has created an account, contact us at lumabalancesupport@gmail.com and we will take appropriate action.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app.

If you are in crisis: Luma Balance is a wellness community, not a crisis or medical service, and cannot respond to emergencies in real time. If you or someone you know is struggling or in crisis, call or text 988 (Suicide & Crisis Lifeline) any time, day or night. In an emergency, call 911.

9. Contact us

Questions about this Privacy Policy? Email lumabalancesupport@gmail.com.