Last updated: May 4, 2026
Contents
This policy explains what data Lumoro collects, why we collect it, how we protect it, and what rights you have over it. We believe privacy policies should be readable, so we wrote this one in plain English.
When you sign up for Lumoro, we collect:
During the onboarding quiz, we collect:
As you use Lumoro, we collect:
We also collect:
If you are in a region where Lumoro is not yet available, you may provide your email address to join our waitlist. We store your email, detected country, and the date you signed up. We use this only to notify you when Lumoro becomes available in your region.
We use PostHog to collect anonymous, aggregate website usage data. This helps us understand how visitors interact with our site. No personal data is shared with PostHog.
Your reflections sit on Lumoro servers. We're honest about the current state. They are not encrypted at the application layer yet. We will update this page the day that changes.
We do not sell your reflections or use them for ads. We do not use them to train any AI model. When you open Reflect, your conversation goes to Anthropic so Claude can respond. Anthropic does not train on API data.
We are a small team. Nobody routinely reads your reflections. If something breaks and we need access to debug, protect the service, respond to your request, or comply with law, we keep that access limited to what is reasonably needed.
You can request deletion from Settings or by emailing us. Some limited records may remain where needed for opt-out suppression, security, billing, dispute, tax, legal, or backup purposes.
We want to be explicit about what we will never do with your information:
You opt in to receive SMS messages from Lumoro by providing your phone number and checking the consent box during onboarding. This constitutes your express written consent under the Telephone Consumer Protection Act (TCPA).
Your consent to receive SMS messages is not a condition of purchasing any goods or services. You can opt out at any time without penalty.
We will never share, sell, or distribute your mobile phone number or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. Your phone number is collected solely to deliver the Lumoro SMS wellness program you opted into. Message and data rates may apply. Text STOP to cancel at any time.
SMS messages are not end-to-end encrypted. Standard carrier transmission applies. Lumoro cannot guarantee the security of SMS messages in transit. For maximum privacy, manage your device's message history and screen lock settings.
Your data is stored on secure servers with industry-standard encryption in transit and at rest. Access to personal data is restricted to essential personnel only. We conduct regular security reviews of our infrastructure and practices.
No system is 100% secure. While we take every reasonable measure to protect your data, we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you promptly.
Lumoro does not store full credit card numbers, bank account details, or other full payment method details. Stripe processes subscription payments, invoices, payment method details, billing events, and related payment metadata under its own security standards and PCI compliance. See Stripe's Privacy Policy.
We use a small number of third-party services to operate Lumoro. Each processes only the minimum data necessary for their function.
We do not use any other third-party services that receive your personal data.
We use two types of cookies on trylumoro.com:
On your first visit you will see a cookie banner. You can accept all, reject all, or manage preferences per category. You can change your choice at any time using the "Do Not Sell or Share My Personal Information" link in the footer, or by clearing your browser's local storage.
The cookie banner controls PostHog analytics preferences. Meta Pixel is used for ad measurement; it does not receive reflection or SMS content.
You have the right to:
To exercise any of these rights, email hello@trylumoro.com. All requests are processed within 7 business days.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
To submit a CCPA request, email hello@trylumoro.com with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days as required by law.
Lumoro is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a user under 18, we will delete their data and cancel their account immediately. If you believe a minor has signed up for Lumoro, please contact us at hello@trylumoro.com.
We may update this privacy policy from time to time. If we make significant changes to how we collect, use, or share your data, we will notify you via SMS before the changes take effect. Minor clarifications or formatting changes may be made without notice.
Continued use of Lumoro after notification of changes constitutes acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.
For any questions about this privacy policy, your data, or to exercise your rights, contact us at:
We respond to all privacy inquiries within 7 business days.