Privacy policy

LumiNote turns PDFs into narrated audio with word-by-word highlighting and answers questions about the page you're on. This page explains what that requires us to collect, who else touches it, and how to delete it.

What we collect

• Account info — your email address, and if you sign in with Google, the name and profile photo Google shares with us. Your password never reaches our servers in plain text; authentication is handled by our backend provider, Supabase.
• Your study content — the PDFs you upload, the text extracted from them, how you organize notes into folders, and any AI chat conversations you have about a document.
• Study preferences — the goal, daily study time, and deadline you pick during onboarding, so the app can tailor itself to you.
• Profile photo — only if you choose to set one.
• Voice input — if you ask a question out loud, your device's own speech recognition converts it to text. LumiNote never stores the audio itself.
• Subscription tier — whether your account is Free, Pro, or Ultra.
• Waitlist signups — just the email address you give us before launch.

We don't collect your location or contacts, and we don't run third-party analytics or ad trackers anywhere in the app or on this site.

How your documents are handled

Your PDFs are stored in private cloud storage tied to your account — nobody else's account can read them. They are not sold, shared with advertisers, or used to train any model.

To produce narration, the text of the page you're reading is sent to Google Cloud Text-to-Speech through our own server. To answer a question, that page's text and your question are sent to Google's Gemini model, also through our own server — your device never talks to Google directly, and no separate API key ships in the app.

Generated narration audio may be cached and reused if the exact same text, voice, and speed are requested again — for example, when two students listen to the same textbook page. That cache is keyed by the content itself, not by who asked for it, and isn't linked back to your account.

Third parties that process your data

• Supabase — hosts our database, authentication, and file storage (your PDFs, avatar, and cached audio).
• Google Cloud Text-to-Speech — converts page text into narration audio.
• Google Gemini — generates answers to in-document questions.
• Apple App Store / Google Play — process app purchases and subscriptions. LumiNote never sees your card details.
• RevenueCat — manages subscription status once in-app purchases go live; it receives your purchase/subscription state, never payment details.

We don't use advertising SDKs, third-party analytics, or crash-reporting tools that track you across apps.

How long we keep it

• Account and profile data: kept for as long as your account exists.
• Notes or PDFs you delete: held in "Recently Deleted" for 30 days, then permanently erased — both the database record and the file.
• AI chat conversations: kept until you delete them or delete your account.
• Cached narration audio: kept only as anonymous, content-keyed cache entries, never linked to your account.
• Waitlist emails: kept until launch, or until you ask us to remove yours.

Deleting your data

Deleting your account from the app (Profile → Account Settings → Delete Account) is permanent and immediate: it removes your notes, folders, and AI conversations, and erases your uploaded PDFs and avatar from storage. It cannot be undone from the app.

You can also email us at luminotesofficial@gmail.com to request deletion of your account or any specific data.

Children

LumiNote is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we'll delete it.

Contact

Questions about this policy or your data: luminotesofficial@gmail.com.