Privacy policy

Who we are

This policy covers LumiNote: AI PDF Reader ("LumiNote", "we", "us") — the mobile app and this website. LumiNote turns PDFs into narrated audio with word-by-word highlighting and answers questions about your documents. This page explains what that requires us to collect, who else processes it, and how to delete it.

For any privacy question or request, emailluminotesofficial@gmail.com.

What we collect

• Account info — your name, your email address, and a user ID we assign. Your name comes from sign-up, or from Google or Apple if you sign in with them (with Apple, you can choose to hide your email). Your password never reaches our servers in plain text; authentication is handled by Supabase.
• Profile photo — only if you choose to set one. It's stored at a non-guessable web address, but anyone who has that link can view the photo.
• Onboarding answers — your study goal, daily study time, and deadline, if you choose to give them, so the app can tailor itself to you.
• Your PDFs — the files you import and the text extracted from them, kept in private storage tied to your account. With each PDF we also store its title, file size, page count, and the folder it's in, and, if you delete it, the date you deleted it and the name of the folder it came from.
• Folders — the names of folders you create to organize your PDFs.
• AI chat history — the questions you ask about your PDFs and the answers you get, stored on our servers.
• Reports — if you report an AI answer, we store the question, the answer, and the reason you gave.
• AI consent choices — whether you've agreed to let your data be sent to our AI and premium-voice providers, stored with your account.
• Usage data — first-party usage events (characters of narration generated, PDF page counts, and chat message counts) and per-user usage totals. We collect these ourselves; no third party receives them.
• Purchases — your subscription status (Free, Pro, or Ultra), received through Apple In-App Purchase (or Google Play on Android) and RevenueCat. We never see or store your payment card details.
• Voice input — only when you tap the microphone in AI Chat, which needs microphone permission. The app uses your device's speech recognition (Apple's on iOS, your device's speech recognition service on Android), and Apple or Google may process that audio under their own terms. LumiNote doesn't record or store the audio. We only use the transcribed text, and it's sent to Google Gemini only if you send the message.
• Server logs — our hosting provider, Supabase, keeps server logs (such as IP addresses) for security and operations.
• Waitlist signups — the email address you give us on this website, and when you signed up. See Website waitlist.

We don't collect your location or contacts. Study reminders are local notifications scheduled on your device, so we don't collect push notification tokens. We don't use third-party analytics, crash reporting, advertising, or tracking SDKs anywhere in the app or on this site.

Stored only on your device

Some settings never leave your phone. They're cleared when you delete your account or uninstall the app:

• Your narration voice and speech rate
• Your highlight style and color, and your theme
• A copy of your display name
• Your notification settings
• Whether you've finished onboarding or been asked to rate the app

LumiNote doesn't save bookmarks or your reading position, and the word highlighting during narration is temporary. Nothing you highlight is stored.

How we collect it

• From you — when you create an account, answer onboarding questions, import a PDF, create a folder, ask a question, report an answer, or join the waitlist on this website.
• From sign-in providers — Apple or Google, if you sign in with them.
• From the app stores and RevenueCat — your subscription status after you buy, renew, or cancel.
• From the app and our servers as you use them — usage events and server logs.

How we use it

• To create your account and sign you in.
• To store your PDFs and folders in your account.
• To narrate your documents, using your device's voice or, if you choose one, a premium voice.
• To answer your questions about a PDF, with your consent (see Third-Party AI Services).
• To check your subscription status, enforce your plan's limits, and understand how the app is used.
• To review AI answers you report, so we can find and address harmful content.
• To keep our servers secure and running.
• To reply when you contact us.
• To email waitlist signups when LumiNote launches.

We don't use your data for advertising, and we don't sell it.

Third-Party AI Services

LumiNote uses two third-party AI services, both provided by Google LLC:

• Google Gemini (model gemini-2.5-flash) — powers AI chat about your PDFs. When you ask a question about a PDF, Gemini receives the PDF file, the text extracted from it, and your question.
• Google Cloud Text-to-Speech — used only for premium voices. When you play narration with a premium voice, it receives the text being read aloud. Device voices run on your device and send nothing to us or to Google.

When data is sent. Only when you use one of these features — asking a question in AI chat or listening with a premium voice — and only after you've agreed. Every request goes from the app to our server (hosted on Supabase), and our server sends it on to Google. The app never sends your data to Google's AI services directly.

Consent first. Before any of your data is sent to these services, the app asks for your permission. Your choice is stored with your account and enforced on our server, so nothing is sent without it. If you decline consent for premium narration, the app uses your device's voice instead.

Withdrawing consent. You can withdraw consent at any time in Profile → Account Settings → Account → Privacy → AI processing. After that, nothing more is sent to these services until you opt in again: AI chat stops working, and narration uses your device's voice.

Used only for your request. We send your data to these services only to provide the feature you asked for — an answer or narration audio — and for no other purpose. These providers are bound by terms that protect your data at least as well as this policy does. Under Google's paid API terms, this data is not used to train Google's models.

Reporting AI answers. You can report any AI answer in the app. When you do, we store the question, the answer, and the reason you gave, so we can review it for harmful content. Reports are deleted when you delete your account.

Narration caching

To make narration faster, generated audio is cached in two places:

• Shared cache on our servers — audio of the spoken text, stored under a hash of the text and the voice settings. If the same text is requested again with the same voice — for example, two students listening to the same textbook page — the cached audio is reused. It's keyed by the content, not by who asked for it, isn't linked to any account, and is deleted after 30 days.
• On your device — up to 150 MB of narration audio. It's cleared when you delete your account.

Third parties that process your data

• Supabase — authentication, our database, file storage (your PDFs, profile photo, and shared narration cache), the server functions that run AI and narration requests, and server logs for security and operations.
• Google Gemini (Google LLC) — answers your questions about your PDFs. Receives the PDF file, its extracted text, and your questions, only after you've given in-app consent.
• Google Cloud Text-to-Speech (Google LLC) — generates premium-voice narration. Receives the text being read aloud, only after you've given in-app consent.
• RevenueCat — manages your subscription status. It receives your purchase receipts and your LumiNote account ID, and no other details about you.
• Apple — Sign in with Apple, In-App Purchase (App Store billing), and the speech recognition used for voice input on iOS.
• Google — Google Sign-In if you choose it, Google Play Billing for purchases on Android, and the speech recognition used for voice input on Android.

Your content is never sold, never used for advertising, and never shared with other users. Each processor receives only what it needs for the purpose listed above.

Website waitlist

If you join the waitlist on this website, we store your email address and the time you signed up, and use them only to email you when LumiNote launches. Waitlist signups aren't linked to app accounts, so deleting your LumiNote account doesn't remove you from the waitlist. To be removed, email luminotesofficial@gmail.com with the subject "Remove me from the LumiNote waitlist".

No tracking

We do not track you across apps or websites owned by other companies.

How long we keep it

• Account info, profile photo, onboarding answers, subscription status, and AI consent choices: for as long as your account exists.
• Your PDFs and folders: until you delete them or delete your account.
• PDFs you delete: held in "Recently Deleted", where you can restore them, for 30 days. After that they're permanently deleted by a daily server job. Deleting a folder moves its PDFs to Recently Deleted rather than deleting them immediately.
• AI chat history: until you delete it or delete your account.
• Reports of AI answers: until you delete your account.
• Usage events and totals: for as long as your account exists.
• Shared narration cache: deleted after 30 days. It isn't linked to your account, so it isn't removed when you delete your account, but it expires within 30 days.
• On-device audio cache (up to 150 MB): cleared when you delete your account.
• Server logs: kept by Supabase for security and operations.
• Waitlist email and signup time: until you ask us to remove them.

Security

All data travels between the app, our servers, and our processors over encrypted connections (HTTPS/TLS). Your PDFs are kept in private storage tied to your account, and database access controls ensure only your account can read your documents and chats. Your profile photo is the exception: anyone with its link can view it. Service keys for Google's APIs live on our servers, not in the app. No system is perfectly secure, but we limit what we collect and who can reach it.

Deleting your account

You can delete your account in the app at Profile → Account Settings → Account → Danger Zone → Delete Account. This permanently deletes your profile, profile photo, folders, PDFs, AI chat history, AI reports, usage records, your RevenueCat subscriber record, and the caches and settings on your device. If you used Sign in with Apple, we also revoke LumiNote's authorization with Apple. It can't be undone.

If you signed in with Google, deleting your account doesn't remove LumiNote's access from your Google account automatically. You can remove it atmyaccount.google.com/connections.

If you no longer have the app installed, emailluminotesofficial@gmail.comfrom your account's email address with the subject "Delete my LumiNote account", and within 30 days we'll delete your profile, profile photo, folders, PDFs, AI chat history, AI reports, usage records, and RevenueCat subscriber record, and revoke your Sign in with Apple authorization. Waitlist signups are separate: to be removed from the waitlist, email us with the subject "Remove me from the LumiNote waitlist". SeeDelete your account for the full details, including what's kept.

Deleting your account does not cancel an active subscription — Apple or Google bills it, not us. Cancel it separately on iPhone in Settings → your name → Subscriptions, or on Android in Google Play → Payments & subscriptions → Subscriptions, ideally before deleting your account. Apple and Google keep their own records of your purchases.

Your rights

You can access, correct, or delete your data at any time. Most of it you can view and edit directly in the app, and you can delete individual PDFs, folders, and chats or your whole account there. Deleting a folder moves its PDFs to Recently Deleted, where you can restore them for 30 days. You can also withdraw AI consent at any time in Profile → Account Settings → Account → Privacy → AI processing. For anything else — a copy of your data, a correction you can't make yourself, or a deletion request — emailluminotesofficial@gmail.com.

Children

LumiNote is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top, and for significant changes we'll let you know in the app or by email.

Contact

Questions about this policy or your data: luminotesofficial@gmail.com.