Lumina AI legal

Privacy Policy

Learn how Lumina AI collects, uses, protects, and processes information.

Effective Date: July 3, 2026

Last Updated: July 3, 2026

Lumina AI is an AI-powered document intelligence and notes summarization service. This Privacy Policy explains how information is collected, used, processed, and protected when users access the Lumina AI app, website, backend API, APK/update pages, and related services.

This policy is intended to support clear privacy transparency, including under applicable Indian data protection principles and the Digital Personal Data Protection Act, 2023 where applicable. It does not claim that every possible legal requirement is fully satisfied in every jurisdiction.

Information We Collect

Account information such as name, username, email address, user ID, profile photo URL, sign-in provider, email verification status, account creation date, last login time, recovery email where provided, and profile updates.
Authentication information handled by Firebase Authentication, including email/password login, Google sign-in, verification email status, password reset flows, and session tokens.
User content such as pasted text, uploaded PDFs, uploaded images, camera scans, OCR text, extracted document text, selected AI mode, selected task, and AI-generated outputs.
Saved workspace information such as summaries, markdown, plain text, sections, folders, favorites, pinned status, document history, search tokens, timestamps, reading estimates, and user-specific usage counters.
Usage and routing information such as request counts, timestamps, task type, mode, processing route, model metadata, cache status, daily limit usage, feedback ratings, and processing diagnostics.
Device, browser, app, and diagnostic information such as app opens, crashes, errors, performance events, update prompts, and feature usage where Firebase Analytics or Crashlytics are enabled.
Technical security information such as IP-derived rate-limit data, request timing, API errors, service health information, and abuse-prevention signals.
Cookies, local storage, or similar local device storage may be used by the Flutter web/app runtime, Firebase, authentication flows, and local app preferences such as onboarding and appearance settings.

How We Use Information

To authenticate users and protect account access.
To extract text from images, camera scans, and PDFs using app-side and backend-side OCR/extraction features.
To process submitted text and extracted content with AI models and return summaries, tables, reports, notes, action items, flashcards, Q&A, email drafts, and other requested outputs.
To save generated documents, folders, favorites, profile settings, feedback, and usage limits to the user's account where those features are used.
To detect crashes, measure reliability, prevent abuse, apply rate limits, and improve the product experience.
To cache or reuse responses where configured, improve reliability, debug errors, operate job queues, and reduce repeated processing.
To communicate important service or update information when applicable.

Uploaded Documents and AI Processing

Users may upload or paste documents for processing. Uploaded content and extracted text are processed to generate the requested output. AI-generated outputs may not always be accurate, complete, current, or suitable for a user's specific purpose. Users should review outputs before relying on them and should not upload documents they do not have the right to process. Users should avoid uploading highly sensitive information unless it is necessary for their use of the service.

Third-Party Services

Firebase Authentication for sign-in, verification, password reset, and account identity.
Cloud Firestore for user profiles, summaries, folders, favorites, and daily usage counters.
Firebase App Check, Analytics, and Crashlytics for abuse protection, diagnostics, app-open analytics, and crash reports.
Google sign-in where the user chooses Google authentication.
Google Gemini or Google AI services for AI generation where configured by the backend.
Google ML Kit or device OCR libraries for image and camera text recognition in the app where supported.
Redis-compatible caching infrastructure where REDIS_URL is configured for exact response caching or queue support.
Hugging Face Spaces and Cloudflare Worker/proxy infrastructure where used to host or route the backend and public website.

These providers may process data as needed to deliver authentication, storage, analytics, crash reporting, hosting, OCR, caching, and AI generation features.

Legal Basis and Lawful Use

Lumina AI processes information to provide the service requested by users, operate accounts, generate AI outputs, maintain security, enforce limits, prevent abuse, and support service reliability. Users provide document content voluntarily when they paste, upload, scan, or save content in the service.

Data Retention

Uploaded files handled by the backend are written to temporary storage for processing and the backend code deletes those temporary files after processing completes. Extracted text, generated summaries, folders, favorites, profile records, usage counters, statistics, and saved workspace data may be retained while the account remains active or until deleted by the user where deletion features are available. Cached/generated outputs may be stored temporarily where caching is configured. Logs, diagnostic records, security records, and provider records may be retained for a limited period where needed for service operation, debugging, legal obligations, abuse prevention, or limit enforcement.

Data Sharing

Lumina AI does not sell user data. Information may be shared with service providers that help operate authentication, storage, hosting, analytics, crash reporting, OCR, caching, and AI generation. Data may also be disclosed where required by law, to protect users or the service, to investigate abuse or security issues, or with user consent.

Security

Lumina AI uses reasonable technical and organizational safeguards for the current service, including HTTPS for the public domain, Firebase authentication, user-specific records, backend rate limits, App Check where enabled, trusted host checks, upload size limits, and security headers. No online system can be guaranteed completely secure.

User Rights and Choices

Users may request access to information associated with their account.
Users may correct profile information supported by the app.
Users may delete generated summaries and folders from inside the app.
Users may reset passwords, update profile information, and manage sign-in methods supported by Firebase.
Users may delete their account and associated saved data from the Profile section.
Users may withdraw consent where applicable by stopping use of the service or requesting deletion, subject to data needed for security, legal, or operational reasons.
Users may contact support for privacy, deletion, grievance, or user-rights assistance.

Children's Privacy

Lumina AI is not intended for children below the legally relevant age unless parental, guardian, or school consent is provided where required. Lumina AI does not knowingly collect children's personal data without appropriate consent.

International Processing

Because Lumina AI uses providers such as Google/Firebase, Google AI services, Hugging Face, Cloudflare, and Redis-compatible infrastructure where configured, data may be processed in countries other than the user's country depending on provider infrastructure.

AI Output Disclaimer

Outputs are generated by AI and may contain mistakes, omissions, formatting errors, or misleading interpretations. Users are responsible for verifying outputs before academic, professional, legal, medical, financial, or other important use.

Changes to This Policy

This Privacy Policy may be updated as Lumina AI changes. The Last Updated date will be changed when material updates are made.

Contact and Grievance Requests

For privacy questions, grievance requests, user-rights requests, or deletion assistance, contact: support@lumina-ai.co.in