How Lumynous Care handles your information.

Depending on how you use the Service, we may collect:

• Account information, such as your Sign in with Apple account identifier, relay or real email address provided by Apple, and your authenticated service user ID.
• Profile and preference information you enter in the app, such as display name, preferred language, skin type, skincare concerns, allergies, fragrance preference, routine goal, budget level, and appearance preferences.
• Product interaction data, such as favorites, compare lists, routines, saved products, and scan history.
• Scan submission data, such as barcode values, product name or brand hints, ingredient photos you upload, OCR text extracted from those photos, normalized ingredient text, and scan result status.
• Subscription and entitlement data needed to provide premium access, such as subscription status, entitlement state, product identifiers, expiration dates, and related purchase lifecycle events supplied through Apple and RevenueCat.
• Limited technical and security data, such as request metadata, device-facing error details, and diagnostic logs used to keep the Service secure and functioning.

• Directly from you when you create an account, complete the onboarding flow, save products, build routines, or upload ingredient photos.
• From Apple when you sign in with Apple or complete an in-app subscription purchase handled by Apple.
• From our infrastructure and processors when the app syncs favorites, processes uploads, validates subscriptions, or generates scan results.
• From your device with permission, such as camera or photo library access when you choose to scan or upload an ingredient image.

• Authenticate you and maintain your account session.
• Provide personalized product, ingredient, and routine features.
• Process barcode and ingredient-photo scans, including OCR, structured extraction, storage, and result retrieval.
• Sync your saved items and account-backed state across app sessions.
• Deliver and manage premium access, free trials, and purchase restoration flows.
• Protect the Service, troubleshoot failures, detect abuse, and improve reliability.
• Respond to support requests and comply with legal obligations.

We do not sell your personal information. We share information only as necessary to operate the Service, for example with:

• Apple, to authenticate your Sign in with Apple session and to process App Store purchases and subscription management.
• Cloudflare, which hosts our API, database, and file storage used for account-backed features and image uploads.
• RevenueCat, which helps us process subscription status and entitlement events.
• Service providers or contractors who help us operate, secure, or support the Service under confidentiality and data-use restrictions.
• Law enforcement, regulators, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of the Service.

Any third party that receives user data from us is expected to protect that data with safeguards that are at least equal to the protections described in this Privacy Policy.

• Account-linked data is retained for as long as your account is active unless a longer period is required for legal, security, or fraud-prevention reasons.
• Ingredient photos, scan submissions, favorites, entitlement records, and related account data are deleted when you use the in-app account deletion flow, subject to limited backup, security, or legal retention windows.
• When you delete your account in the app, we currently delete the authenticated account, active sessions, favorites, entitlements, scan submissions, stored Apple refresh token records, and associated uploaded scan assets tied to your account.
• Local-only data stored on your device, such as routine drafts or exported JSON files, remains on your device until you remove it, reset the app, or delete the app.
• Operational logs are kept only as long as reasonably necessary for security, debugging, and service integrity.

• You can use parts of the app without signing in, but account-backed sync and upload features may require an authenticated account.
• You can revoke camera or photo library permission through iOS Settings at any time.
• You can delete your account in the app under More > Settings > Account > Delete Account.
• You can export a JSON copy of local app data from the app settings screen.
• If applicable law gives you privacy rights such as access, correction, deletion, or objection, you can contact us at support@lumynous.app.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will investigate and take appropriate action.

Your information may be processed in countries other than the one where you live. Those countries may have different data protection laws. When we transfer personal information, we take reasonable steps to protect it using contractual, technical, and organizational safeguards appropriate to the transfer.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and may provide additional notice in the app or on the website when required.

If you have questions about this Privacy Policy or our privacy practices, contact Alterkon at support@lumynous.app.