Privacy, in plain language.

1. Scope and who Lumo is for

Lumo is operated by Woosoo Pty Ltd, based in Sydney, New South Wales, Australia ("Lumo," "we," "us," or "our"). This policy explains how we handle information through the Lumo mobile app and lumomagic.com.

Lumo helps parents and caregivers turn ideas, photos, and voice-transcribed ideas into printable activities. The service is intended for adults and is not designed for children to operate independently. You must be at least 18, or the age of legal majority where you live, to create an account or make purchases.

If you provide a photo, name, voice, or other information about a child or another person, you confirm that you are authorised to provide it.

2. Information we collect

Information you provide

• Account and profile: identifiers supplied by Sign in with Apple or Google, such as email address, display name, provider identifier, and an optional profile image.
• Creation inputs: ideas, voice transcripts, photos, activity settings, and feedback you submit.
• Creations: generated printable activities, titles, categories, bookmarks, sharing choices, and related metadata.
• Support: messages and diagnostic details you choose to send us.

Information collected automatically

• App interactions, screens and features used, generation and purchase events, approximate timestamps, and performance or error information.
• Device and app information such as platform, operating-system version, app version, language, and identifiers used by our authentication, analytics, and purchase providers.
• Subscription, entitlement, and flower-purchase status. Apple or Google processes payment details; Lumo does not receive full card details.

The app requests photo-library, camera, microphone, or speech-recognition access only when a feature needs it and subject to your device permissions.

3. How we use information

• Authenticate accounts and keep your library available across sessions.
• Process ideas and images, generate printable activities, and provide print, save, bookmark, and sharing features.
• Maintain flower balances, subscriptions, purchases, and fraud-prevention controls.
• Moderate community submissions and enforce safety and acceptable-use rules.
• Operate, secure, troubleshoot, measure, and improve Lumo.
• Respond to support requests and send essential service communications.
• Comply with law and protect users, Lumo, and others.

We do not sell personal information. We do not use uploaded family photos for targeted advertising.

4. Service providers and AI processing

We disclose information to providers that help us deliver Lumo, subject to their contracts and policies. These currently include:

• Google Firebase and Google Cloud for authentication, databases, file storage, hosting, server functions, analytics, and Google AI image processing.
• OpenAI for AI image generation and processing.
• Apple and Google for sign-in, app distribution, device services, and payment processing.
• RevenueCat for subscription, entitlement, and in-app purchase management.

Creation inputs, including a selected photo or idea, may be sent to an AI provider to produce the requested activity. Lumo uses OpenAI's API and Google's paid Gemini API services. Under their applicable business API terms, these providers do not use submitted prompts, photos, or generated responses to train or improve their general models by default. They may retain information temporarily for service operation, security, legal compliance, and abuse monitoring. We do not authorise providers to use customer content for advertising.

We may also disclose information when required by law, to investigate abuse or security incidents, or as part of a merger, financing, acquisition, or sale of assets, subject to appropriate notice and protections.

5. Private creations and community sharing

Your creations are private by default. If you choose “Share with community,” the generated activity and associated non-sensitive metadata may be submitted for moderation and, if approved, displayed publicly in Lumo, on our website, or in related promotional surfaces. A separately selected public activity may also become eligible for search-engine indexing after editorial and rights review; community sharing by itself does not make an activity search-indexable.

• Your original source photo is not published as part of community sharing or search indexing.
• Do not submit a generated activity publicly if it contains personal information or if you lack permission for the source material or people depicted.
• You can contact us to request removal of community content. Copies may remain temporarily in caches, backups, legal records, or material already distributed where removal is not reasonably possible.

6. Your choices and controls

• Change camera, photo, microphone, speech, and notification permissions in device settings.
• Edit available profile details in Lumo.
• Manage or cancel subscriptions through the Apple App Store or Google Play account used for purchase.
• Request removal of publicly shared content by contacting us.
• Delete your account from Profile → Delete account. This removes your account profile, private creations, retained source uploads, and private generation records. It does not itself cancel an App Store or Google Play subscription.

Community history after deletion. Bookmarks, flowers or reactions, moderation records, and similar interactions involving other people's community activities are not automatically removed when you delete your account. These records may continue to contain an internal account identifier so that community counts, fraud controls, and shared activity history remain consistent, but the deleted account can no longer be used to sign in. Contact us if you want to make a privacy request concerning a specific retained interaction.

7. Retention, transfers, and security

We retain account information and private creations while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, prevent fraud, meet legal obligations, and maintain security. Account deletion removes the active profile and private account content described above, while community interactions described in section 6 may remain to preserve the integrity of shared features. Deleted data may remain for a limited period in backups or logs before being overwritten.

We are based in Australia. Our providers are likely to process information in the United States and may process it in other countries where they operate. Those countries may have different privacy laws from Australia or where you live.

We use administrative, technical, and organisational safeguards designed to protect information, including access controls and encryption in transit. No online service can guarantee absolute security.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal or complain to a regulator. We do not discriminate against you for exercising applicable rights.

To make a request, email us from the address connected to your account. We may need to verify your identity. If we rely on consent, you may withdraw it, although this does not affect earlier lawful processing.

Children’s information

Lumo is directed to parents and caregivers, not children. We do not knowingly allow children to create accounts. If you believe a child submitted personal information without appropriate adult authorisation, contact us so we can investigate and delete it where required.

9. Website analytics and links

Our website and app may use analytics, local storage, cookies, or similar technologies for operation, security, and measurement. Third-party links are governed by the third party’s privacy practices.

10. Changes to this policy

We may update this policy as Lumo changes. We will post the revised version here, update the date above, and provide additional notice when required by law.

11. Contact us and make a complaint