Privacy
Updated 2026-09-16.
What we want
Account email if you sign in, your progress, space names, checklists, and evidence notes you choose to sync. Age attestation. Consent versions.
What we refuse by default
Room photo clouds, 3D meshes of your house, live microphone archives, precise GPS of your bedroom, passwords, full card numbers.
AI tutor
Questions you type are sent to Google Gemini under our API key to generate a defensive explanation. We instruct the model to refuse offensive, stalking, or exploit content. Do not paste other people’s private data. Photos are not sent unless a future, explicit, 2FA-gated control says so — and this build does not send them.
Cookies
Essential: age gate, theme, session, PWA-install snooze. No advertising tracker in this build. Company transactional email (Resend) is not live yet — ignore placeholder addresses until a real domain is attached.
Photos & scans
Default: photos, audio samples, and inspection frames never leave this device. Lumina’s servers do not need them to teach you. Optional cloud backup of notes (not photos) requires an account. Cloud backup of images is disabled in this phase on purpose. A later phase may offer end-to-end encrypted, 2FA-gated backup under your keys — still never used to train public models, still refused if the content appears to be someone else’s private space.
Audio
The optional sound meter is a live level display. It is not a recorder by default and is not a microphone bug detector. A single phone cannot certify its own audio path. If you need to document possible real-time alteration of a call, a helper records room air and the far end records on a clean device you never collect onto yours. Recording other people’s private conversations can be a crime (one-party vs all-party consent).
Location
We do not request precise GPS for homes in this version. Name your spaces in words. Addresses are optional and stored only if you type them.
Children
If a child’s safety is involved, contact local authorities and child-protection resources. Do not use this app to monitor a child with hidden cameras in intimate spaces.
Retention
Local data lives until you clear site data. Synced account rows (when enabled) last until you delete the account. Tutor prompts may be processed by Google under their Gemini API terms; do not paste secrets or other people’s private data.