Privacy Policy

Who we are

The data controller is LUMINALITY PTE. LTD., a company registered in Singapore. For any privacy question or request, contact us at [email protected].

Information we collect

We collect the following, and only for the purposes described below:

• Account information — your email address and name, received when you sign in with Google or Apple. We use these to create and secure your account.
• Your journal content — the entries you write (text, mood, dates, tags) and any photos or audio you choose to attach. This is stored to provide the Service and sync across your devices.
• Your conversations with Ren — if you use our AI companion, the messages you send and the replies you receive are stored so the conversation persists across sessions.
• Purchase information — when you buy a prompt pack, pass, or credits, we record the product purchased. Payment card details are entered into and processed by Stripe; we never see or store your full card number.
• Device and notification information — if you enable notifications, a push token identifying your device, plus the device name and operating-system version, so we can deliver the reminders you asked for.
• Diagnostics and session recordings — crash reports, technical error information, and screen recordings of your sessions — both in the Luminality app and on our web app at app.luminality.ai. See Session recording below, which explains this in full. We do not use any of it for advertising.

We do not collect your location, contacts, calendar, phone number, or messages, and the app requests only internet access.

Sensitive information

A journal is, by its nature, a place where people write about their health, their beliefs, their relationships, and their state of mind. Anything you write may therefore reveal what data-protection law calls special-category or sensitive personal data.

We do not ask you to provide such information, and we do not analyse your entries to infer characteristics about you for marketing, profiling, or advertising. But because it is likely to be present, we treat all journal content as sensitive by default: it is access-controlled, it is never sold, and it is never used to build a profile of you.

Where the law requires an explicit legal basis for handling sensitive information — for example under the UK/EU GDPR — we rely on your explicit consent. AI features are off until you turn them on: nothing you write is sent to an AI provider unless you have enabled them, and enabling them is how that consent is given. Turning them off again, or deleting your account, withdraws it. Core journaling works either way, with or without AI.

How we use your information, and our legal bases

AI features, and what leaves our systems

Luminality offers AI features: Ren, an AI companion you can chat with, and Reflections & Insights, which summarise patterns across your journaling over time. These are powered by OpenAI, a third-party AI provider located in the United States.

You should know exactly what this means:

• If you use Ren, the messages you write in that conversation are sent to OpenAI to generate a reply.
• If Reflections & Insights are enabled, short excerpts of your entries are sent to OpenAI to produce a weekly summary, and those summaries — not your entries — are later used to write a longer reflection. We minimise what is sent: excerpts rather than whole entries, capped in number and length, and never your photos or audio.
• We do not use your content to train AI models, and we access our AI provider through its business API with model training and content sharing switched off at the account level.
• We have turned off content logging at the account level, so your entries and messages are not stored by our AI provider for human review. Our AI provider may still retain content briefly to monitor for abuse and misuse, in line with its API data-usage policy, and for no other purpose.
• Quantitative insights — the counts, calendars, and charts in Reflections — are computed on our own servers from structured fields such as dates and mood tags. They do not involve sending anything to an AI provider.

Automated safety screening. Before any excerpt is used to build a reflection, an automated classifier checks it for content indicating a crisis — such as self-harm or abuse. This is a filter, not a referral: its only effect is to exclude that material so it never surfaces back to you inside a generated reflection. It does not alert us, it does not create a report, it does not expose the text to our staff, and it produces no decision about you with legal or similarly significant effects. Ordinary difficult emotions — grief, sadness, stress, loneliness — are deliberately not treated as crisis content.

Your controls. AI features are off until you turn them on, in Settings (in the app: Menu → AI Settings). Until you do, nothing you write is ever sent to an AI provider. You can turn them off again at any time, with the same effect. You can also mark an individual entry as excluded from AI, and it will be left out of reflections while remaining in your journal. Core journaling never requires AI to be on.

Session recording

To understand where Luminality is confusing or broken, we use Sentry Session Replay, which records a reconstruction of your screen while you use the Service.

We want to be precise about this, because it is more than crash reporting:

• We record sessions routinely — not only when something goes wrong. This applies both to the Luminality app and to our web app at app.luminality.ai. During our closed testing period we may record every session, because we have very few testers and no other way to see where people get stuck. We intend to reduce this substantially before general release.
• Text and images are masked. The recording captures layout, navigation, and interaction — not the words you type or the photos you attach. Masking is applied on every platform we ship and does not depend on the type of build.
• We record only inside Luminality. We cannot and do not see anything you do in other apps, in other browser tabs, or elsewhere on your device. Our marketing website, luminality.ai, is not recorded at all.
• Recordings are kept for no more than 90 days, and are then deleted automatically. See Data retention below.
• Recordings are processed by Sentry and are used only to diagnose problems and improve the Service. They are not used for advertising, and we do not sell them.

If you would prefer not to be recorded at all, email [email protected] and we will discuss the options available to you.

What we do NOT do

• We show no advertising and use no ad networks.
• We do not use an advertising identifier.
• We do not sell your personal information or share it for cross-context behavioural advertising.
• We do not use your journal content to train AI models.
• We do not read your entries to build a marketing or advertising profile of you.

How your data is shared

We share data only with service providers who process it on our behalf to operate the Service:

Some of these providers use their own sub-processors to deliver their service to us — for example, the cloud infrastructure our AI provider runs on. Our agreements require them to place equivalent obligations on those sub-processors and to remain responsible for them. Providers may change their sub-processors over time; where our agreement gives us a right to object to such a change, we review it and may object.

We may also disclose information if required by law, or where necessary to protect the rights, safety, or security of our users, the public, or the Service.

Where your data is stored, and international transfers

Your account and journal data are stored on our backend hosted by DigitalOcean in Singapore. Data is transmitted over encrypted connections (HTTPS), and authentication tokens are stored encrypted on your device.

Several of the providers above — including OpenAI, Sentry, Stripe, and Postmark — process data outside Singapore, including in the United States.

Luminality is a Singapore company, so transfers out of Singapore are governed by the Personal Data Protection Act, which requires us to take reasonable steps to satisfy ourselves that the recipient protects your data to a standard comparable to the PDPA's. In practice that means we put a written data-processing agreement in place with each provider, binding them to process your data only on our instructions, to keep it confidential, and to maintain appropriate security.

For OpenAI, which receives your content when AI features are on, that agreement is a Data Processing Addendum signed on 11 August 2026 with OpenAI OpCo, LLC. Under it, OpenAI acts as our data processor: it may process your content only on our documented instructions, it will not respond to a request about your data without our authorisation, and it must return or delete your content on our instruction when the agreement ends. Where the data is subject to UK or EU law, that agreement incorporates the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

For other providers handling data subject to the UK or EU GDPR, we rely on the transfer safeguards offered under that provider's own data-processing terms.

Data retention

• Your account and journal data are kept for as long as your account is active.
• When you delete your account, we permanently delete your profile, journal entries, photos and audio, Ren conversations, preferences, notification data, and sessions. See Delete Your Account for the full list.
• Purchase records are retained after deletion to meet tax and accounting obligations, with the link to your profile removed so they no longer identify you.
• Security and audit logs — records of significant account events, kept to detect and investigate misuse — are retained for up to 365 days, including after account deletion, and then removed.
• Session recordings and crash reports are held by our diagnostics provider, Sentry, and are deleted automatically on its retention schedule — no more than 90 days after they are collected.

Your rights and choices

You can, at any time:

• Export your data — request a machine-readable copy of your information directly in the app (Menu → Security & Data → Download My Data), or by emailing us.
• Delete your account and data — directly in the app (Menu → Account Settings → Delete Account). See Delete Your Account.
• Turn off AI features — for your whole account, or exclude an individual entry, in Settings.
• Turn off notifications — for each category, in Settings.
• Access or correct your information, by emailing [email protected].
• Withdraw consent you previously gave, without affecting the lawfulness of processing before withdrawal.

Depending on where you live (for example, the EEA or UK under the GDPR), you may have additional rights to object to or restrict processing, to data portability, and to lodge a complaint with your local supervisory authority. We will respond to requests within the time the applicable law requires, and in any event within 30 days.

Children

Luminality is not directed to children. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under this age. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

Changes to this policy

We may update this policy from time to time. When we make a material change — for example, adding a new category of data or a new provider that receives your content — we will publish the updated version, revise the effective date, and, where the change requires it, ask you to review and accept the new version before continuing to use the Service.

Contact us

Questions about this policy or your data? Email [email protected].