Lumora is a calm-listening app — guided meditations, breathing exercises, and soothing stories for rest and quiet. This policy explains what we collect, why, and the choices you have. The short version: we collect as little as possible, we don't sell your data, and the things you do inside the app stay on your phone.
Your listening progress, favorites, day-plan check-ins, any private notes you write, and how you use features are stored only on your phone. They are never sent to us or to anyone else. If you uninstall the app, that information is gone.
Lumora is published by Jomats FZCO, a company registered in the United Arab Emirates at Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates (“we”, “us”). For any privacy question you can reach us at support@lumora.co.
You can use Lumora as a guest without creating an account. In guest mode we do not collect your name or email. You only give us an email if you choose to sign in or if you already have a subscription and want to restore access.
| What | Why | Kept where |
|---|---|---|
| Email address (only if you create an account or sign in) | To create and secure your account, verify a subscription, and send sign-in codes | Our server |
| Password (stored only as a secure, one-way hash) | To protect your account | Our server |
| Subscription status (if you have one) | To unlock and sync your access | Our server & our payment provider |
| Anonymous usage events (e.g. a screen opened, a session started, an optional mood check-in) | To understand what helps people rest and to fix problems | Our analytics provider (Amplitude), without your name or email |
| Feedback you send (and an email, only if you add one) | To read your note and, if you asked, reply | Our server |
| Basic technical logs (e.g. IP address, device type) when the app loads audio or talks to our server | Security, reliability, and abuse prevention | Our server & content delivery network (Cloudflare) |
We keep your account information for as long as your account exists. Anonymous analytics are kept in aggregate. When you delete your account, we delete your account record and the personal data tied to it from our server.
Depending on where you live (for example, the EEA/UK under GDPR, California under the CCPA/CPRA, or the UAE under the Personal Data Protection Law), you may have additional rights such as access, correction, deletion, and objection. To exercise them, contact support@lumora.co.
Lumora is a wellness and relaxation app. It is not a medical device and does not provide medical advice, diagnosis, or treatment. If you have a health concern, please talk to a qualified professional.
Lumora is intended for adults and is not directed to children under 13 (or under 16 where a higher age applies). We do not knowingly collect personal information from children.
We protect your information with encryption in transit, hashed passwords, tight access controls, and rate limiting. No system is perfectly secure, but we work to keep your data safe.
If we make material changes, we will update the date above and, where appropriate, notify you in the app. Continuing to use Lumora after an update means you accept the revised policy.
Jomats FZCO — Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates.
Questions or requests about your privacy: support@lumora.co.