Privacy Policy

LumiEcho is operated by LumaScor LLC. This Privacy Policy explains what information we collect, how we use it, and what choices you have. We take your privacy seriously — your reflections, voice recordings, and personal data are used only to power your experience and are never sold.

Account information: Your email address when you create an account. Optionally: your name, phone number, and how you heard about LumiEcho.

Voice recordings and transcripts: When you use voice check-in, your audio is sent to OpenAI Whisper for transcription. We store the resulting transcript, not the raw audio. Transcripts are used to generate your daily brief and build your Echo profile over time.

Check-in content: Your morning intentions, evening reflections, mood selections, and any typed input you provide.

Chat messages: Conversations you have with Echo are stored and used to provide context for future interactions and brief generation.

Usage data: Day count, streak, check-in dates, and Echo Score history. Used to power insights and progressive intelligence unlocks.

Settings: Timezone, wake time, wind-down time, voice preferences, and reminder settings.

• To generate your personalized daily brief using Anthropic Claude
• To provide semantic memory — Echo references past check-ins to give you relevant, contextual responses over time
• To calculate your Echo Score and track patterns across your check-ins
• To power Echo Chat with context from your day and history
• To send reminders if you have enabled notifications
• To manage your account, trial, and subscription

We do not use your data for advertising. We do not sell your data. We do not share your personal reflections with third parties except as described below.

LumiEcho uses the following third-party services to operate:

• Anthropic — AI brief generation, chat, sentiment scoring, and pattern detection. Your transcript and check-in content is sent to Anthropic to generate responses. Anthropic's privacy policy applies.
• OpenAI — Voice transcription (Whisper) and text-to-speech (TTS). Audio is processed by OpenAI and not retained by us after transcription. OpenAI's privacy policy applies.
• Supabase — Database and authentication. Your data is stored securely in Supabase. Supabase's privacy policy applies.
• Vercel — Hosting and serverless functions. Vercel's privacy policy applies.
• RevenueCat / Stripe — Subscription billing (when applicable). Payment data is handled by these processors and not stored by LumaScor LLC.

We retain your check-ins, briefs, and chat history for as long as your account is active. This data powers Echo's memory and intelligence — deleting it would reduce the quality of your experience.

You may request deletion of your account and all associated data at any time by contacting us at christina@lumascoraiapp.com. We will process deletion requests within 30 days.

All data is transmitted over HTTPS. Your data is stored in Supabase with row-level security — you can only access your own data. We apply reasonable technical and organizational measures to protect your information.

LumiEcho is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.

You have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at christina@lumascoraiapp.com.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or in-app notice. Your continued use of LumiEcho after changes constitutes your acceptance of the updated policy.

Questions about this policy? Reach us at christina@lumascoraiapp.com.

LumaScor LLC · lumiecho.app