Privacy Policy

1. Information We Collect

Information You Provide

• Email address and password when you create an account
• Display name / username if you choose to set one
• Profile picture if you upload or select one
• Daily reflections and chapter notes you write within the app

Information Collected Automatically

• Chapters you have marked as completed
• Bookmarked / saved chapters
• Reading plan progress and milestones
• Streak data (consecutive days of use)
• Subscription and purchase history
• Basic device information required for push notifications

Information We Do Not Collect

We do not collect your precise location, contacts, browsing history outside the app, or any sensitive personal data beyond what is listed above.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Luminary app
• Authenticate your account and keep it secure
• Sync your progress, notes, and bookmarks across devices
• Process and manage your subscription payments
• Send push notifications about new chapters and streak reminders (only if you have enabled them)
• Display relevant advertisements to free-tier users via AdMob
• Respond to your support requests and inquiries

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

3. Third-Party Services

Luminary uses the following third-party services. Each service has its own privacy policy which we encourage you to review:

4. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all your personal data — including reflections, notes, bookmarks, and progress — is permanently deleted from our systems within 30 days.

Anonymised, aggregated usage data that cannot identify you may be retained for analytical purposes.

5. Your Rights Under GDPR

As a Norwegian-based service operating under EU/EEA law, we comply with the General Data Protection Regulation (GDPR). You have the following rights:

• Right of access – request a copy of the personal data we hold about you
• Right to rectification – request correction of inaccurate data
• Right to erasure – request deletion of your data ("right to be forgotten")
• Right to portability – request your data in a machine-readable format
• Right to object – object to processing of your data for direct marketing
• Right to withdraw consent – withdraw consent for data processing at any time

You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

6. Children's Privacy

Luminary is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include encrypted data transmission (HTTPS), row-level security on our database, and secure authentication via Supabase.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The "Last updated" date at the top of this page will always reflect the most recent version.

Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.