Privacy Policy

Lumela ("Lumela", "we", "us") is a group travel app for planning trips together — itineraries, shared expenses, live location, reminders, documents and contacts. This policy explains what we collect, how we use it, and the choices you have. Questions? Email hello@lumela.tours.

Information we collect

• Account details — your name, email address and/or phone number, and (if you sign in with Apple, Google or Telegram) the basic profile your provider returns. Used to create your account and sign you in.
• Content you create — trips, events, tasks and reminders, documents and files, expenses and receipts, contacts you choose to import, locations and messages. Stored to provide the service and visible only to the members of your groups.
• Location — only when you choose to share your live location with a group. Location sharing is always opt-in and can be turned off at any time.
• Device & push tokens — a push notification token so we can deliver the notifications you have enabled.
• Usage analytics — collected only after you give explicit in-app consent, and used to understand and improve the app.

How we use your information

• To provide, maintain and improve Lumela and its features.
• To sync your content across your devices and share it with the group members you choose.
• To send notifications you have enabled (for example, expense activity or trip updates).
• To keep the service secure and prevent abuse.

What we do not do

• We do not sell your personal data.
• We do not show advertising in the app, and we do not share your data with advertising networks.
• We do not share your location outside the group you chose to share it with.

How your information is stored

Data is stored on Google Firebase (Firestore, Cloud Storage and Authentication) on secure infrastructure with encryption in transit and at rest. We retain your data while your account is active and delete it on request as described below.

Sharing & third parties

Group content is visible to members of that group only. We share data only with the infrastructure and service providers required to operate Lumela:

• Google Firebase — hosting, database, file storage and authentication.
• Apple Push Notification service and Firebase Cloud Messaging — to deliver push notifications.
• RevenueCat — to manage Lumela+ subscriptions, if and when you subscribe.
• AI providers — if you use the optional AI assistant, the relevant request content is sent to the AI provider to generate a response. The assistant is off by default.

Your rights & choices

• Access & deletion — you can delete your account at any time from within the app (Settings → Delete Account), which removes your account and personal content. You can also email us to request access or deletion.
• Location — turn live location sharing on or off whenever you like.
• Analytics — opt in or out of analytics in the app.
• Notifications — manage or disable push notifications in your device settings.

Children

Lumela is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We update this page whenever we make a material change to how we handle your data.