Privacy Policy

1Who we are

Lumo is made by Woosoo Pty Ltd, based in Sydney, New South Wales, Australia (“Lumo”, “we”, “us”). This policy covers the Lumo app (Lumo Family Album), lumomagic.com and lumo-family.web.app.

Lumo used to be an app for making coloring pages. Information from that earlier app is described in the previous privacy policy.

2Who Lumo is for

Lumo accounts are for adults: you must be at least 18, or the age of legal majority where you live. Family albums may contain photos of children, shared by their families. When you add a photo of someone else, you confirm you’re allowed to share it with your family.

3What we collect

• Your account: your name, email address (or the private relay address Apple gives us), and how you sign in (Apple, Google or email).
• What your family adds: photos and videos (the original files, including their camera details), a compressed copy for viewing, titles, descriptions, tags, comments, reactions, and the things you make with magic.
• Places: when a photo carries a location, your phone turns it into a place name (for example “Cannon Beach”). We store the name, not the coordinates. The original file keeps its camera details, which may include where it was taken.
• Your family: who is in the album, invitations, and requests to join, including the name and relationship someone gives when they ask.
• Purchases: we use account-linked purchase records to manage subscriptions, restore purchases and understand purchase activity. Apple handles payments; we do not receive your card details.
• Your device: a device identifier that lets us send the notifications you allow, and information used to check that requests come from the real Lumo app.
• App usage: app usage analytics is currently turned off in versions used by families. We check this feature only in private test versions using sample data. We would update this policy and tell you before turning it on.
• Our websites: basic usage information through Google Analytics, described below.

4How we use it

We use this information to run your family album: to store and show photos to your family, send the notifications you allow, make magic when someone asks, handle purchases, keep Lumo secure and prevent abuse (including looking at usage, such as upload volume, to enforce fair use), answer support requests, and meet legal obligations.

We don’t show ads, sell your information, or use it to profile you for advertising.

5Who can see your photos

Only the members of your family album. A person joins with an invite link, or after someone in the family approves their request to join. If someone is removed, they lose access straight away, although images they have already loaded may stay on their device.

Someone in your family can also share a single photo or video by link, for a person who isn’t in the album. Anyone with that link can see the photo or the first minute of the video for 45 minutes; after that, the link shows only a small image preview. The link can be revoked. Only share links with people you trust.

Lumo staff don’t browse family albums. We look at your content only if you ask us for help, or where the law requires it.

6Magic and AI

When someone in your family makes a coloring page, a card or another magic version, we send that photo to OpenAI or Google to create it, and save the result in your album.

Magic never changes the original: the new version is saved next to it. AI results can be imperfect, and details in restored or recolored photos may be a careful guess.

7Service providers

We use trusted providers to run Lumo. They process information on our behalf, for these purposes only:

• Google: storing your data, running Lumo, sign-in, notifications, security checks and website analytics
• Apple: Sign in with Apple, payments, notifications and protecting access to the app
• RevenueCat: managing Lumo Pass subscriptions and flower purchases
• OpenAI and Google: creating magic versions when someone asks

8Where it lives, and keeping it safe

Lumo runs on Google Cloud in the United States. We are based in Australia, and our providers may process information in other countries, which may have different privacy laws from where you live.

Data is encrypted in transit and at rest, and access is restricted to the people and systems that need it. No online service can guarantee perfect security, but we work hard to protect your family’s photos.

9Keeping and deleting

We keep your information while your account is active. Delete a photo and it’s removed for everyone, with its comments and the versions made from it.

Delete your account in Settings and you’re signed out everywhere at once; your photos, comments, reactions and profile are then deleted in the background. Deleted data may remain in backups or logs for a limited time before it’s overwritten. We keep purchase records as long as tax and accounting law requires. Deleting your account doesn’t cancel an App Store subscription.

10Your choices and rights

You can change photo, camera, location and notification permissions in your device settings, and manage Lumo Pass in your App Store account settings.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to complain to a regulator. To make a request, email us from the address connected to your account; we may need to verify it’s you. We won’t treat you differently for exercising your rights.

11Children

Lumo accounts are for adults, and we don’t knowingly let children create accounts. Photos of children shared by their families are visible only inside that family’s album. If you believe a child has created an account, contact us and we’ll delete it.

12App usage analytics

App usage analytics is currently turned off in versions of Lumo used by families. We check this feature only in private test versions using sample data. Before turning it on, we would review what it collects, update this policy and tell you.

This is separate from purchase records and the information needed to run your family album. We do not use your data for advertising or track you across other companies’ apps or websites.

13Our websites

lumomagic.com uses Google Analytics, which sets cookies, to measure visits and App Store clicks. Our pages may also use your browser’s local storage for things like remembering a setting. Links to other sites are covered by their own privacy policies.

14Changes to this policy

If we change this policy in a way that matters, we’ll tell you in the app before the change takes effect, and update the date at the top of this page.

15Contact and complaints

Questions, requests and complaints go to Woosoo Pty Ltd at contact@doola.ai. Please put “Lumo privacy” in the subject, and don’t email photos unless we ask for them through a secure channel.

We’ll acknowledge a complaint and look into it within a reasonable time. If you’re not satisfied with our answer, you can contact the Office of the Australian Information Commissioner or the privacy regulator where you live.