Privacy Policy

1. Who we are

Lumie Affirmations ("we", "us", or "our") is a wellness application that helps users build a daily affirmation practice through writing, recording, and listening to personal affirmations. Contact us at hello@lumieaffirmations.com.

2. What we collect

We collect only what is necessary to provide the service:

• Account information — your name and email address when you create an account
• Affirmations and notes — the text you write in the app, stored securely in your personal account
• Voice recordings — audio you record of your affirmations, stored privately and accessible only to you
• Voice profile — a 30-second voice sample used to create your AI voice profile, processed by ElevenLabs (see Section 4)
• Usage data — streaks, credit usage, recording counts, and plan information
• Payment information — processed securely by Stripe; we never see or store your card details
• Device information — browser type and device type for technical support purposes only

3. Microphone and audio data

Lumie Affirmations requests access to your device microphone solely to record your affirmations. We will always ask for your explicit permission before accessing your microphone.

• Microphone access is only active while you are actively recording
• We do not record audio in the background
• You can revoke microphone permission at any time in your device settings
• Voice recordings are stored securely and are only accessible to your account
• Recordings are deleted when you delete your account or delete an individual affirmation

Data retention for audio: Individual recordings are kept until you delete them or delete your account. Upon account deletion all audio files are permanently removed within 30 days.

4. AI voice processing disclosure

The AI Voice Enhancement feature is available to Pro and Lifetime subscribers only. Here is exactly what happens when you use it:

• You record a 30-second voice sample in Settings and tap "Use this sample"
• That sample is transmitted to ElevenLabs to create a personal AI voice profile
• When you tap Enhance on an affirmation, your recorded audio is sent to ElevenLabs for processing
• ElevenLabs returns an enhanced version which is stored in your account
• ElevenLabs processes your data in accordance with their own privacy policy at elevenlabs.io/privacy

You can delete your AI voice profile at any time in Settings, which sends a deletion request to ElevenLabs. You are never required to use this feature — it is entirely optional.

AI data retention: Your ElevenLabs voice profile is retained until you delete it in Settings or delete your account, at which point we request deletion from ElevenLabs within 30 days.

5. How we use your data

We use your data solely to:

• Provide and improve the Lumie Affirmations service
• Sync your affirmations, notes, and recordings across your devices
• Process payments and manage your subscription
• Send account-related emails (confirmation, password reset, receipts)
• Provide customer support when you contact us
• Analyze aggregate usage patterns to improve the app (never at individual level)

We do not use your data for advertising, sell it to third parties, or use your affirmations or notes to train AI models.

6. Third party services

We use the following trusted services to operate the app. Each receives only the minimum data necessary:

• Supabase (supabase.com) — secure database and user authentication. Stores your account, affirmations, notes, and usage data.
• Stripe (stripe.com) — payment processing. They handle all card and billing data. We only receive confirmation of payment status.
• ElevenLabs (elevenlabs.io) — AI voice processing for Pro and Lifetime subscribers who choose to use voice enhancement. Only activated with your explicit consent.
• Netlify (netlify.com) — web hosting for the application.

7. We do not sell your data (CCPA)

We do not sell, rent, trade, or share your personal information with third parties for monetary or other valuable consideration. This applies to all users including California residents.

California residents have the following additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt out of the sale of personal information (we do not sell data)
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit use of sensitive personal information (including voice data)

To exercise any of these rights, email hello@lumieaffirmations.com. We will respond within 45 days.

8. GDPR — legal basis for processing (EU and UK users)

If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing your account information and affirmations to provide the service you signed up for
• Consent — processing your voice recordings and AI voice profile, which you can withdraw at any time
• Legitimate interests — improving the app, preventing fraud, and providing customer support
• Legal obligation — maintaining payment records as required by law

EU and UK users have the right to access, rectify, erase, restrict, or port their data, and to lodge a complaint with their local data protection authority. Contact us at hello@lumieaffirmations.com to exercise these rights.

9. Data retention

We retain your data for the following periods:

• Account and profile data — for the duration of your account plus 30 days after deletion
• Affirmations and notes — until you delete them or delete your account, then permanently removed within 30 days
• Voice recordings — until you delete them or delete your account, then permanently removed within 30 days
• AI voice profile — until you delete it in Settings or delete your account, removed from ElevenLabs within 30 days
• Payment records — 7 years as required by financial regulations
• Support communications — 2 years after the last interaction

10. Your rights

Regardless of where you live, you have the right to:

• Access all data we hold about you
• Export your affirmations and notes
• Delete your account and all associated data (available in Settings)
• Correct any inaccurate information
• Withdraw consent for AI voice processing at any time
• Revoke microphone permission through your device settings
• Request a copy of your data in a portable format

To exercise any of these rights email hello@lumieaffirmations.com. We will respond within 30 days.

11. Children's privacy

Lumie Affirmations is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@lumieaffirmations.com and we will delete the information within 72 hours.

Users between 13 and 18 should review this policy with a parent or guardian before using the app.

12. Cookies and tracking

Lumie Affirmations uses only essential cookies and local storage necessary for the app to function — specifically to keep you logged in across sessions. We do not use:

• Advertising or tracking cookies
• Third-party analytics that track you across other websites
• Fingerprinting or device tracking
• Any form of behavioral advertising

You can clear local storage data at any time through your browser settings, though this will log you out of the app.

13. Security and breach notification

We take security seriously and implement the following measures:

• All data is encrypted in transit using TLS/HTTPS
• All data is encrypted at rest in our Supabase database
• Row-level security ensures users can only access their own data
• Audio files are stored in private, access-controlled storage buckets
• We regularly review our security practices

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of becoming aware of the breach, as required by GDPR. We will also notify relevant supervisory authorities where required by law.

14. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email and by a prominent notice in the app at least 14 days before the changes take effect. Your continued use of the app after the effective date means you accept the updated policy.

Material changes include: new types of data collection, new third-party sharing, changes to AI processing, or changes to your rights.

15. Contact us

For any privacy questions, data requests, or concerns:

• Email: hello@lumieaffirmations.com
• We respond to all privacy requests within 30 days
• For urgent matters involving children's data we respond within 72 hours

This privacy policy was last reviewed by our team in March 2026.