Privacy Policy
Lumen ("we", "us") is a prayer and Bible app with an AI companion, available on the web and on mobile. It is operated by [Your full legal name or company name], [Postal address]. This policy explains what information we collect when you use Lumen, why, who we share it with and the choices you have.
- We collect what we need to run the app: your account, your preferences and what you write in it.
- Your prayers, intentions, notes and conversations are private. We never sell them or use them for advertising.
- To answer you, the AI companion sends your messages to our AI provider. They are not used to train AI models.
- You can download or delete your data, or your whole account, at any time.
1. What we collect
Information you give us
- Account details: email address, first name (optional), and an identifier from Apple or Google if you sign in with them.
- Quiz and profile answers: for example your Christian tradition, preferred Bible translation, what you would like prayer for (such as worry or grief), how often you pray, and your reminder time.
- Your content: prayers you save, prayer intentions, journal notes and your conversations with the companion.
- Support messages you send us.
Information collected automatically
- Usage data: pages and screens viewed, features used (for example "prayer marked as done"), quiz steps completed, and how you arrived (such as a link or ad campaign).
- Device data: device and browser type, operating system, language, time zone, and IP address (used to estimate country or region).
- Cookies and similar technologies: to keep you signed in, remember your quiz progress and measure how the site is used. See Cookies below.
- Push token: if you allow reminders on your phone.
Information from others
- Payment providers (Stripe, Apple, RevenueCat) tell us whether your subscription is active, its plan and renewal dates. We never receive or store your full card number.
- Apple or Google share your email (or an Apple relay address) and name when you choose to sign in with them.
2. How we use information
- To provide Lumen: create your account, write and show your daily prayer, run the companion, save your journal, sync between web and phone.
- To personalise: match prayers and Scripture to your tradition, translation and what you asked prayer for.
- To keep people safe: automatically check companion messages for crisis signs and show emergency resources, and prevent abuse of the service.
- To handle subscriptions: free trials, renewals, cancellations and refunds.
- To communicate: sign-in codes, receipts, trial-ending reminders, service updates, and, if you choose, prayer reminders.
- To improve Lumen: understand which features help, fix bugs, and measure our marketing. We use usage data for this, not the content of your prayers or conversations.
- To comply with law and protect our rights.
If you are in the European Economic Area or the UK, we rely on these legal bases: performing our contract with you (running the service), your consent (sensitive information, optional cookies, reminders), our legitimate interests (security, improving the service, measuring marketing, which we balance against your rights) and legal obligations.
3. The AI companion
When you write to the companion or ask for a prayer, the relevant text (and the preferences needed to answer, such as your tradition and translation) is sent to our AI provider, Anthropic, to generate the reply. Under its commercial terms, Anthropic does not use this data to train its models. Bible verses shown in replies are loaded from our own Bible database, not written by the AI.
AI replies can be wrong. They are not pastoral, medical, legal or professional advice. You can turn the companion off in Settings and keep using the Bible, prayers and journal. Conversations are stored encrypted so you can read them later, and you can delete them at any time.
4. Who we share information with
We do not sell your personal information. We share it only with service providers that process it for us under contract, to run Lumen:
| Provider | Purpose | Information involved |
|---|---|---|
| Anthropic | Generates prayers and companion replies from what you write | Your messages, prayer requests, quiz answers needed for the reply |
| ElevenLabs | Turns prayer text into audio | Prayer text |
| Stripe | Web payments and subscription management | Email, payment details (held by Stripe, never by us), subscription status |
| Apple (App Store) and RevenueCat | In-app purchases and subscription status | Purchase and subscription records, an app user id |
| PostHog | Product analytics: which features are used, where people drop off | Usage events, device and browser data, approximate location from IP. Never your prayers, intentions, notes or chats |
| Resend | Sending sign-in codes and service emails | Email address, email content |
| Vercel | Hosting the website and API | Request data, logs |
| Database host | Storing your account and content | Everything stored in your account |
| Cloudflare R2 | Storing prayer audio files | Audio files (not linked to you for library prayers) |
| Expo (push notifications) | Delivering reminders to your phone | A device push token |
Advertising. If we run ads, our website may use advertising pixels (such as Meta or TikTok) that learn only that someone visited the site, signed up or started a subscription, so we can measure campaigns. They never receive your quiz answers, prayers, intentions, notes or conversations, and the mobile app does not track you across other companies' apps. Some US state laws may call this "sharing"; you can opt out at any time by contacting us.
We may also disclose information if required by law, to protect someone's safety, or as part of a merger or sale of the service (in which case this policy continues to apply to your information).
5. Cookies
We use necessary cookies to keep you signed in and to remember your quiz progress, and analytics cookies (PostHog) to understand how the site is used. Analytics never record what you type, and session recordings, if used, hide all text on the page. Where the law requires it, we ask before setting non-essential cookies. You can also block cookies in your browser settings.
6. How long we keep information
- Your account and content: for as long as your account is open.
- After you delete your account: removed within 30 days, and from backups within a further 30 days.
- Payment and tax records: as long as the law requires (often up to 7 years).
- Unfinished quiz sessions without an account: deleted after 90 days.
- Analytics data: up to 2 years, then deleted or anonymised.
7. Your choices and rights
- Access and export: download your data from Settings, or ask us.
- Correct: edit your profile in Settings.
- Delete: delete individual items, or your whole account in Settings or on our delete account page.
- Withdraw consent and turn things off: the AI companion, reminders and marketing emails can each be turned off.
- Object or restrict: ask us to stop certain processing, such as analytics.
Depending on where you live (for example the EEA, UK, California and other US states) you have rights to access, correct, delete and port your information, to object to or restrict processing, to opt out of the sale or sharing of personal information and of targeted advertising, and to limit the use of sensitive information. We honour these requests for all users. We will not treat you differently for using them. To make a request, email [privacy@your-domain.com] from the address on your account; we may need to verify your identity. You may also complain to your local data protection authority.
8. Security
We protect information with encryption in transit (HTTPS), encryption of conversations at rest, access controls and limited staff access. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
9. International transfers
We and our providers are mainly based in the United States, so your information may be processed there. Where the law requires, we use safeguards such as the European Commission's Standard Contractual Clauses.
10. Children
Lumen is not for children under 13 (or the higher minimum age in your country). We do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
11. If you are in crisis
Lumen is not an emergency service. If you are thinking about harming yourself, call or text 988 (Suicide & Crisis Lifeline, US) or call 911. Outside the US, contact your local emergency number.
12. Changes to this policy
We will post any changes here and update the date above. If a change is significant, we will tell you by email or in the app before it takes effect.
13. Contact
[Your full legal name or company name], [Postal address]. Email: [privacy@your-domain.com].