Privacy Policy

Lumsa only holds data you give it or that the app needs to do the thing you asked for. There is no advertising SDK, no analytics broker, and no tracking of what you do in other apps or on other websites.

Account

Your email address and a one-way hash of your password. Lumsa never stores the password itself and cannot recover it.

Profile

Your name, and optionally a phone number, a description of where you keep your plants, your experience level, the light in your home, your reminder preference, and a postal code.

Plants and care history

The plants you add, nicknames, watering schedules, and every care event you record.

Photos and scans

Photos you take or choose for plant identification, light readings, and growth checks, together with the result the scan produced.

Location

Precise coordinates, only while the app is open and only if you grant the permission. They are used to fetch local weather for plant care. You can refuse and everything else keeps working.

Orders and shipping

The plants you buy, the amounts charged, and the delivery address you enter: name, phone, street, city, state and postal code.

Technical logs

Server request logs used to keep the service running and to investigate errors.

Payments run through Stripe. Your card number is sent from your device straight to Stripe and never touches a Lumsa server. Lumsa stores only the payment reference Stripe returns, the amount, and whether the payment succeeded.

Lumsa does not sell personal data and does not share it for advertising. It reaches exactly four companies, each for one job:

OpenAI

When you scan a plant or a spot, the photo is sent to OpenAI to identify the plant or read the light. Only the image and the prompt are sent — not your name, email, or address.

Stripe

Processes payments and receives the card details entered at checkout, along with the order amount.

Open-Meteo

Receives the coordinates your device reports, sent directly from the app, and returns the local forecast. No account information is attached.

Vercel

Hosts the Lumsa servers and stores uploaded plant photos.

Lumsa may also disclose data where the law requires it, or to establish or defend a legal claim.

Uploaded photos

Deleted automatically 90 days after upload.

Scans and their results

Deleted automatically 180 days after the scan.

Account, plants and care history

Kept until you delete your account.

Orders

Kept after account deletion, with your personal details stripped out, because a completed purchase is an accounting record.

In the app, open Profile → Settings → Delete account and confirm with your password. Deletion is immediate and cannot be undone. It removes:

• your profile and preferences
• every plant, care event and reminder
• every scan and every photo you uploaded, including the stored image files
• your cart and wishlist
• saved weather readings, including the coordinates in them
• every signed-in session, on every device

Past orders are kept as payment records, with your name, phone and street address removed from the delivery details. Your email address is released, so you can sign up again later with the same one.

If you cannot reach the app, write to support@lumsa.io from your account email and the same deletion will be carried out.

The camera, photo library and location permissions are each requested only when you first use the feature that needs them, and each can be withdrawn at any time in your device settings. Refusing a permission disables that one feature and nothing else.

Lumsa is not directed to children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to support@lumsa.io and it will be removed.

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, by writing to support@lumsa.io. Depending on where you live, you may also have the right to object to certain processing or to complain to a data protection authority.

If this policy changes in a way that affects what is collected or who receives it, the effective date above changes and the app will say so before the change takes effect.

Questions about this policy or about your data: support@lumsa.io.