Data Compliance

Lumina takes care of the platform controls described below. You are responsible for keeping your sign-in credentials safe and for the content you choose to store. This page describes current, enabled controls — it is not a certification.

Every reminder is scoped to the account that created it. Application routes that show your data require an authenticated session, and the backend enforces per-user row-level access so one account cannot read or modify another account's rows.

All traffic between your device and the Lumina backend is served over HTTPS.

Lumina supports email and password sign-in and Google sign-in. Passwords are never stored in plaintext; authentication is handled by our managed identity provider.

Lumina runs on a managed cloud backend that provides our database, authentication, and hosting. These providers process your data solely to deliver the service. We do not share your data with advertisers or data brokers.

We collect only what Lumina needs to work: your account, profile preferences, and the reminders you create. Data is kept until you delete it from Settings or ask us to delete your account.

• Access and edit your reminders directly in the app.
• Export your reminders as CSV from Settings.
• Reset all of your data from Settings.
• Request account deletion by emailing us.

To report a security concern or a suspected incident, email hello@luminaprogress.com. We investigate reports promptly and notify affected users when required.

This page describes controls that are enabled in Lumina today. It is not an audit, certification, or legal guarantee of compliance with any specific framework.