Privacy Policy
In short: Lumi is local-first. Period logs, symptoms, notes and predictions stay on your iPhone. Apple Health is optional and read-only. We do not run ads, sell data, use analytics, or operate a health cloud for this app.
Overview
Lumi (“we”, “the app”) is a period and cycle tracker for iPhone and iPad. This policy explains what the app stores, what leaves your device, and your choices. By using Lumi you agree to this policy.
What Lumi stores on your device
- Period and cycle dates you log
- Flow intensity, symptoms, mood, energy, sleep and notes
- Predictions and insights generated on your device
- App preferences (cycle and period length, reminders, appearance, optional app lock) and the name Lumi calls you
- Optional on-device AI chat history and downloaded Gemma model files
- Periods you choose to import from Apple Health
This data stays on your device unless you export or delete it. Like other app data, it is included in your own iPhone backups (iCloud Backup or your computer), which are controlled by you and Apple, not by us.
Apple Health
Connecting Apple Health is optional. Lumi asks only when you tap Connect Apple Health or turn on Sleep and heart rate in Settings, and iOS shows you exactly what it can read.
- What Lumi reads: periods (menstrual flow), sleep, and resting heart rate. Lumi only reads; it never writes to Apple Health.
- Periods you import are saved in Lumi on your device, like periods you log. A period you logged in Lumi always takes priority over an imported one.
- Sleep and resting heart rate are read fresh when you use Lumi and kept in memory only. Lumi never saves them. They are compared only with your own usual, to shape Lumi’s notes on Today, the Insights card, the on-device AI’s answers, and the wording of reminders.
- Apple Health data never leaves your device. It is never used for advertising, marketing or data mining, and never shared with or sold to anyone.
You can turn off Sleep and heart rate or remove imported periods in Settings → Apple Health, and change or revoke Lumi’s access at any time in the Health app (Sharing → Apps → Lumi).
Widgets
Lumi’s Home Screen and Lock Screen widgets are optional. To draw them, Lumi saves a small summary in storage shared only between the app and its widget on your iPhone: today’s phase and cycle day, the next predicted date, the feeling and outfit Lumi shows. It never includes flow, symptoms, notes, or Apple Health data. With app lock on, the widget shows only a lock. Delete all data clears it.
What we do not collect
- No Lumi account and no server that receives your health logs
- No third-party analytics or advertising SDKs
- No tracking across apps or websites
- No sale or sharing of personal data
Because we never receive your data, we cannot view, recover or hand it over to anyone.
Network use
Lumi works offline for tracking. It goes online only for these optional features:
- Downloading the Gemma AI model from Hugging Face (litert-community) when you tap Download in the Ask tab. That request goes directly to Hugging Face; we do not proxy it, and no health data is sent. Hugging Face may log standard connection metadata under their own policy. The model is provided by Google under the Gemma Terms of Use.
- Lumi+, an optional one-time purchase of cosmetic extras. Buying it, restoring it, and checking whether your Apple Account owns it are handled entirely by Apple through the App Store, under Apple’s privacy policy. We never see your name, Apple Account or payment details, and no health data is sent.
Once downloaded, the AI runs entirely on your device. Your questions and its answers are not sent anywhere.
Reminders
Reminders are local notifications scheduled on your device. They do not use a push server. If you use Sleep and heart rate, reminders before a period may mention that you often sleep less around then; heart rate is never shown in a notification.
Security
Cycle data is stored with SwiftData in the app’s private sandbox, protected at rest by iOS Data Protection. The optional Face ID / Touch ID app lock uses Apple’s LocalAuthentication framework on device; Lumi never sees or stores biometric data.
Your choices
- Export your data as JSON or CSV in Settings, and import a JSON export back
- Delete all data on the device in Settings
- Remove the downloaded AI model without deleting cycle data
- Turn reminders off at any time
- Turn off Sleep and heart rate, remove imported periods, or revoke Apple Health access
- Delete the app to remove all of its data from the device
Medical disclaimer
Lumi helps you notice patterns in your own cycle. It is not a medical device and does not diagnose, treat or prevent any condition. Ovulation estimates are not a form of birth control. Talk to a clinician for medical decisions.
Age
Lumi is intended for users old enough to track menstruation. Parents or guardians should supervise use by minors.
Changes & contact
We may update this policy when the app changes, and will update the date above. Continued use after an update means you accept the revised policy.
Questions about privacy: hello.lumi.support@gmail.com