Effective Date: April 27, 2026 · Last Updated: April 27, 2026
Summa Studios™ ("we," "our," or "us") develops and operates Lumafy AI™, a wellness application available at lumafyai.com. This Privacy Policy applies to all users of our website and application.
For privacy-related questions or requests, contact us at: support@lumafyai.com
| Data Type | When Collected | Purpose |
|---|---|---|
| Name & Email address | Account registration | Authentication, account management, transactional emails |
| Password (hashed) | Account registration | Secure authentication — never stored in plain text |
| Payment information | Subscription checkout | Billing — processed by Stripe. We never store full card numbers. |
| Mood & energy ratings | Daily check-ins | Personalize your wellness experience and track your progress |
| Journal entries | Journaling feature | Displayed to you; optionally shared with AI coach for context |
| AI coach conversations | Coaching sessions | Generate AI responses — not stored indefinitely, cleared per session |
| Recovery Mode data | If Recovery Mode enabled | Sobriety date, meeting logs, recovery type — stored locally on your device (localStorage). Not uploaded to our servers. |
| App review / feedback | In-app review prompt | Service improvement — stored in our database with your consent |
| W9 tax information | Affiliate program only | Tax compliance for affiliate payouts — not collected from regular users |
We do not sell your personal data. We share data only in the following limited circumstances:
| Recipient | Data Shared | Purpose |
|---|---|---|
| Supabase | Account info, check-in data, push tokens | Database hosting and authentication infrastructure |
| Stripe | Email, payment info | Subscription billing and payment processing |
| OpenAI | Your coach conversation messages | AI response generation — subject to OpenAI's data policy |
| Resend | Email address | Transactional email delivery |
| Google Analytics | Anonymized usage data | Product analytics and performance monitoring |
| Meta (Facebook) | Pixel events (page views, trial starts) | Ad performance measurement and optimization |
| Netlify | Web traffic data | Hosting and serverless function infrastructure |
| Law enforcement | As legally required | Compliance with valid legal process, court orders, or government requests |
Your data is stored on Supabase-managed PostgreSQL databases hosted on secure cloud infrastructure. We use industry-standard security measures including:
While we implement strong security practices, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
We use cookies and similar technologies for:
You can control cookies through your browser settings. Disabling cookies may affect your ability to stay logged in or use certain features.
If you opt in to push notifications, we will send you wellness reminders, streak notifications, and check-in prompts. You can revoke notification permissions at any time through your browser or device settings. Revoking permissions does not affect your account or subscription.
Lumafy AI is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@lumafyai.com and we will promptly delete it.
Depending on your location, you may have the following rights regarding your personal data:
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and sold, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights.
If you are in the European Economic Area, you have rights under the General Data Protection Regulation including the right to access, rectify, erase, restrict processing, and data portability. Our legal basis for processing your data is contract performance (to provide the service you signed up for) and legitimate interests (analytics, security, fraud prevention).
To exercise any of these rights, email us at support@lumafyai.com. We will respond within 30 days.
Our app may contain links to third-party websites (such as SAMHSA, AA, or NA resources). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. For significant changes, we will notify you via email or an in-app notice. Continued use of Lumafy AI after changes are posted constitutes your acceptance of the updated policy.
For privacy-related questions, data requests, or concerns, contact us at:
Lumafy AI — Privacy
Email: support@lumafyai.com
Website: lumafyai.com