Privacy Policy

Last updated: March 14, 2026

1. Introduction

CCC Media LLC ("we," "us," or "our") operates Lumira. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

In Short: We collect minimal personal information (name, email, birth date) to provide you with personalized digital content. We do not sell your data. We use secure, PCI-compliant third-party services to process payments and store information.

2. Information We Collect

Personal Information You Provide:

• Name: Your first name to personalize your experience
• Email Address: For account creation, login, and service communications
• Birth Date: To generate your personalized readings
• Ethnicity Preference (Optional): To personalize your soulmate sketch appearance
• Payment Information: Processed securely through our PCI-compliant payment partners (we do not store credit card details on our servers)

Information Collected Automatically:

• Usage Data: Pages visited, features used, time spent in app
• Device Information: IP address, browser type, operating system, device model
• Cookies and Tracking: We use cookies to maintain your login session and analyze usage patterns

3. How We Use Your Information

We use your information to:

• Provide the Service: Generate personalized AI-generated sketches and digital readings
• Process Payments: Manage one-time purchases securely through our payment partners
• Communicate With You: Send purchase confirmations, account access details, and customer support responses
• Improve the Service: Analyze usage patterns to enhance features and user experience
• Prevent Fraud: Detect and prevent fraudulent transactions and unauthorized access
• Comply With Legal Obligations: Respond to legal requests and enforce our Terms

We do NOT:

• Sell your personal information to third parties
• Use your birth date for purposes other than generating readings
• Share your sketch or personal readings with anyone without your consent

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in these limited circumstances:

Service Providers:

• Payment Processors: Our PCI-compliant payment partners handle credit card information securely. We do not store card data.
• Supabase: Database and authentication services
• Resend: Email delivery service for login codes and notifications
• ClickFlare: Anonymous advertising analytics (no personally identifiable information shared)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Legal Requirements:

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

Business Transfers:

If Lumira is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you before your information becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Secure Storage: Personal data is stored in encrypted databases managed by Supabase
• Payment Security: We do not store credit card information. All payment data is handled by PCI-compliant processors.
• Access Controls: Only authorized personnel have access to user data, and access is logged

However: No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

• Active Accounts: We retain your personal information for as long as your account is active or as needed to provide services
• Inactive Accounts: If you do not log in for 2+ years, we may delete your account and associated data
• Account Deletion: You may request deletion of your account and data at any time by emailing support@lumira-app.com. We will delete your information within 30 days, except where retention is required by law

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access:

Request a copy of all personal data we hold about you.

Correction:

Update or correct inaccurate information through your account settings or by contacting us.

Deletion:

Request deletion of your account and all associated data (subject to legal retention requirements).

Data Portability:

Request your data in a machine-readable format (JSON/CSV).

Opt-Out of Marketing:

Unsubscribe from promotional emails at any time. You will still receive transactional emails like purchase confirmations and account access details.

To exercise these rights, email us at support@lumira-app.com with your request.

8. GDPR Rights (European Union Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing:

• Contract Performance: Processing necessary to provide the Service you purchased
• Legitimate Interests: Improving the Service, preventing fraud
• Consent: Marketing communications (you can withdraw at any time)

Data Controller: CCC Media LLC
To exercise GDPR rights, contact: support@lumira-app.com
Response Time: We will respond within 30 days.

9. CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so no opt-out is necessary
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise CCPA rights: Email support@lumira-app.com with "CCPA Request" in the subject line.

Categories of Personal Information We Collect:

• Identifiers (name, email)
• Demographic information (birth date, optional ethnicity preference)
• Commercial information (purchase history)
• Internet activity (usage data, device information)

We do NOT sell personal information.

10. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Stripe: stripe.com/privacy
• Supabase: supabase.com/privacy
• Facebook/Meta Ads: facebook.com/privacy/policy

We encourage you to review their privacy policies.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain Login Sessions: Keep you logged in across sessions
• Remember Preferences: Save your settings and choices
• Analyze Usage: Understand how users interact with Lumira
• Advertising: Measure ad campaign effectiveness (via Facebook Pixel)

You can control cookies through your browser settings. Disabling cookies may limit functionality.

12. Children's Privacy

Lumira is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately at support@lumira-app.com and we will delete it promptly.

13. International Data Transfers

Lumira is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using Lumira, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

For EU users: We rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and sending an email notification for significant changes. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

CCC Media LLC
Email: support@lumira-app.com
For GDPR/CCPA requests, include "Privacy Request" in the subject line.