Privacy Policy

1. Controller and contact

The controller is the LumaMemo seller or developer identified on the App Store product page. Provider and contact information are available at Legal & Contact. For support and privacy questions, email lxfzzw@foxmail.com.

2. Information we process

We process information needed to provide the features you choose, protect accounts and content, handle purchases, and meet legal obligations.

Account and profile: Sign in with Apple supplies a user identifier and, when authorized, your name and email. You may use Hide My Email. You may also provide a nickname, avatar, hometown, residence, biography, birthday, membership signature, user code, and visibility settings. These can be linked to your account for display, friends, sync, and account management. Explore Demo uses bundled fictional local data; it does not create a real account or upload demo content to your CloudKit.

Memories and media: Titles, text, categories, photos, videos, audio, transcripts, dates, addresses, files, and metadata are processed on your device and may be synced to Apple CloudKit for display, search, sync, backup, export, and sharing. Speech recognition prioritizes Apple system capabilities; saved transcripts become part of your memories. Apple system capabilities also support sensitive-content checks that can warn about or block inappropriate media before saving or sharing.

Location and journeys: With permission, the app processes precise or approximate location, addresses, countries or regions, routes, stops, starting and ending points, and times for memory maps, travel recording, shared trips, nearby suggestions, and location-based capsules. Background location is used only when you actively start a travel feature that needs continuous recording. You can end recording in the app or change permission in iOS Settings.

Friends, sharing, and safety: Friend invitations, CloudKit sharing, shared trips, and memory sharing can involve friend relationships, user codes, invitations, visibility, participants, routes, summaries, and viewed status. Reports involve reporter and reported-party identifiers, content identifiers, reasons, processing status, and timestamps for manual review, safety, and abuse prevention. Block and sharing-revocation records prevent later display or sync. APNs device tokens, notification preferences, and delivery status may be processed for app and CloudKit notifications. You can disable notifications in iOS.

Purchases and technical information: Apple processes payments. StoreKit provides product identifiers, transaction status, subscription type, purchase dates, and expiry status to enable, restore, and manage membership. We do not receive payment card details. Runtime, sync, and error information may be processed on-device. We receive diagnostics and feedback materials only when you choose to send them.

3. Why information is used

Information supports creating, displaying, searching, syncing, backing up, exporting, and deleting memories, journeys, and capsules; identifying accounts, syncing profiles, restoring data, and managing membership; providing maps, background trip recording, friends, sharing, shared trips, widgets, Live Activities, and notifications; sensitive-content checks, reports, blocking, revoked sharing, and abuse prevention; and support, troubleshooting, and legal obligations.

We do not integrate third-party advertising SDKs, sell personal information, or use information for tracking across apps or websites.

4. Storage and sharing

Data may be stored on your device and in Apple CloudKit. Personal memories, personal journeys, capsules, rewards, and appearance settings generally use the private database. Shared content may use the shared database. Friend invitations, shared trips, reports, some notifications, and configuration records may use the public database for cross-account collaboration or safety. This does not mean all records are publicly browsable.

We do not claim that all data is exclusively in a private database or that all data is end-to-end encrypted. Apple processes information needed by CloudKit, iCloud, Sign in with Apple, StoreKit, MapKit, APNs, Speech, Photos, WidgetKit, ActivityKit, and LocalAuthentication under its security measures, terms, and privacy policy.

When you add friends, accept invitations, change visibility, send content, or start or join a shared trip, chosen users may receive your nickname, avatar, user code, photos, audio, text, location, routes, times, and viewed status. You can delete friends, revoke sharing, block, or report users. Copies already saved, exported, or captured by others may not be fully retractable.

The developer may manually review reports and necessary context. Your email provider processes contact details and content you send for support. Necessary disclosures may occur as required by law, courts, or regulators, or when lawfully needed to protect users, the public, the platform, or the service.

5. System permissions

The app may request location for maps, routes, shared trips, nearby places, and capsules; Photos and camera for adding media, taking photos, saving invitation codes, and exports; microphone and speech recognition for voice recording and searchable text; notifications for capsules, reminders, export completion, and CloudKit changes; Face ID to protect access to private content on the device; and Bluetooth and local network access when you actively use nearby-friend features to exchange contact cards.

Declining nonessential permissions does not prevent use of unrelated features. Manage permissions at any time in iOS Settings.

6. Retention and deletion

Account and feature data are retained for as long as needed to provide services. Deleting individual content removes the local copy and, where feasible, syncs deletion of CloudKit records you control.

Start account deletion on the Privacy & Account screen. After Apple reauthentication, the app attempts to delete your private CloudKit data, shared or public records you created and have permission to delete, local caches, and notifications. Records owned by others and their saved copies may not be directly deletable. Necessary deletion markers prevent old notifications from recreating deleted content.

If the network or CloudKit is unavailable, the app shows unfinished stages and allows retrying. Deleting an account or uninstalling does not cancel Apple subscriptions; cancel auto-renewal in Apple Account settings. Apple may retain transaction records under its policies or legal obligations.

7. Your choices and rights

You can access, correct, export, or delete content; adjust visibility, revoke sharing, delete friends, block or report users; manage system permissions; and delete your account in the app. Send privacy requests or complaints to lxfzzw@foxmail.com.

Depending on applicable law where you live, you may also have rights of access, correction, erasure, restriction, objection, portability, withdrawal of consent, or complaints to a regulator. Requests are handled according to applicable law after verifying identity.

8. Children

The app is not intended for children under 13. Users aged 13 to 17 should use it with guardian consent and guidance. If we learn that an ineligible user provided personal information, or receive a valid guardian deletion request, we will handle it according to law.

9. International processing and safeguards

Apple services may process data in other countries or regions depending on your Apple Account, location, and Apple’s service arrangements. We use limited permissions, CloudKit access controls, system authentication, transmission and storage protections, visibility controls, reporting, and blocking. No device, network, or cloud service can guarantee absolute security.

10. Policy changes

We will update this policy when features, data practices, or legal requirements materially change, and provide notice in the app, on the website, or by another appropriate method. The effective date appears at the top.

11. Contact

For privacy and support: lxfzzw@foxmail.com. Provider and contact information: Legal & Contact.