Privacy Policy

Who we are

Lumiri makes small apps for iPhone, iPad and Mac that stay out of your way. This policy covers the website at lumiriapps.com and our apps.

The controller of your personal data is:

There is no data protection officer. Write to the address above with anything about privacy.

The short version

The apps collect nothing and send nothing to us. Lumiri Todo can sync through your own private iCloud if you turn that on — the data then sits in your iCloud account, not with us. The website keeps ordinary server logs. If you agree, it also uses Google Analytics to see which pages are read. Apple handles every payment, and we never see your card or your Apple ID.

Our apps

Our apps do not create accounts. They do not connect to lumiriapps.com. There is no Lumiri server holding anything of yours.

Each app stores its own settings and content on your device, in the app’s own storage. In Lumiri Focus that means your task list and your timer settings. In Lumiri Todo it means your tasks, categories, notes and attachments — photos, PDFs and voice memos.

This data never reaches us, so we are not in a position to read it, export it, or delete it. Deleting the app deletes it from the device. The app itself stays with your Apple ID and can be downloaded again.

There are no ads, no analytics SDKs, and no tracking SDKs in our apps. We do not sell data.

Lumiri Todo: iCloud and calendars

iCloud Sync. Off by default. If you turn it on — in Lumiri Todo tap the gear and, under Data, turn on iCloud Sync — Apple keeps your tasks and attachments in your private iCloud database, and they reach your other devices signed into the same Apple ID. Only you can read them; we have no access. Apple’s iCloud terms and privacy policy apply. If you turn sync off or delete the app, the copy in iCloud stays in your account until you remove it in your device’s iCloud storage settings.

Calendar events. Off by default. If you turn them on, the app shows events from Apple Calendar, read on your device with your permission and never sent anywhere. You can also add an external calendar by its .ics or webcal:// link; the app then downloads that calendar straight from the address you entered. Nothing goes to Lumiri on the way.

Camera, microphone and photos. The app asks for access only when you use it — to take a photo, record a voice memo or pick pictures for a task. What you add stays in that task.

Purchases

Lumiri Focus and Lumiri Todo are paid apps, sold by Apple through the App Store. Apple is the seller and handles the payment.

We never receive your card number, Apple ID password, or billing address.

What Apple gives us

Independently of the app, Apple provides us with aggregated reports through App Store Connect:

• sales and download figures
• App Analytics — impressions, downloads, retention. Apple builds these only from users who have turned on sharing with developers in Settings → Privacy & Security → Analytics & Improvements.
• crash reports, likewise only from users who have agreed to share them

These reports are aggregated and anonymised. We cannot identify you from them, and we have no way to link them to your tasks or your device. Apple, not Lumiri, decides what appears in them. Apple’s own privacy policy applies: https://www.apple.com/legal/privacy

Notifications and system features

Alerts at the end of a session in Lumiri Focus and task reminders in Lumiri Todo are local notifications. They are created on your device and do not leave it.

Live Activities and Dynamic Island in Lumiri Focus use system APIs, with data that stays on the device.

Share in Lumiri Todo passes the link or text you chose in another app straight into your list, on the device.

The website

Server logs. The site is hosted by Hostinger International Ltd on servers in the European Union. The host keeps ordinary logs — IP address, browser, time of request, page requested — to run the site and keep it secure. We do not use them to build a profile of you and we do not combine them with anything else. Legal basis: our legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR). Logs are kept for a short period, normally up to 30 days, and then deleted by the host.

Cookies. The site uses as little as it can, and nothing at all for advertising. Always present: lumiri-analytics, a first-party cookie recording whether you accepted or refused Analytics, and when. Kept for up to 12 months so we do not ask on every visit. Your language preference is stored in local storage on your device. Only if you accept Analytics: _ga and _ga_JN4GCS2JP2, set by Google Analytics to tell one visit from another and to count returning visitors, kept for 12 months. Neither set is used to follow you across other websites. There are no advertising cookies and no tracking pixel of our own. If you refuse, the Google cookies are never set; if you withdraw consent later, they are removed.

Email. If you write to hello@lumiriapps.com, your address and the content of your message reach a mailbox run by Hostinger on servers in the European Union. We keep the correspondence for as long as the matter is open and for up to 24 months afterwards, in case you come back to it. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR), or performance of a contract (Art. 6(1)(b)) where the message concerns a purchase.

Transfers outside the EEA. Our host and our mailbox sit inside the European Union. If you accept Analytics, Google processes that data, including in the United States, under its terms and Standard Contractual Clauses. Apple processes purchases under its own terms and its own privacy policy.

Google Analytics

If you press Accept on the cookie bar, the website loads Google Analytics 4 (measurement ID G-JN4GCS2JP2). Nothing is sent to Google until you accept. Reject, and the script is never loaded.

Google may then record which pages you view, your approximate location, your device and browser, and where you came from. Your IP address is used to work out that approximate location and, according to Google, is not logged or stored in Analytics 4. We use this to see which pages are read. We do not use it for ads, and we do not sell it. Legal basis: your consent (Art. 6(1)(a) GDPR).

The processor is Google Ireland Limited, with Google LLC in the United States. Google’s privacy policy: https://policies.google.com/privacy

You can withdraw consent at any time with Cookies in the footer. That stops further collection. Google keeps Analytics data for a limited period under its own settings, 14 months.

None of this touches the apps. They have no analytics inside them and do not know this website exists. Analytics here measures a website, not an app.

Your rights

You have the right to access your data, to have it corrected or erased, to have its processing restricted, to object to processing based on legitimate interest, and to data portability.

In practice this concerns server logs, any email you have sent us, and — if you accepted Analytics — the data Google holds. Write to hello@lumiriapps.com and we will answer within a month. You may also withdraw Analytics consent from Cookies in the footer.

You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland — or with the supervisory authority in your own country.

Children

Our apps are rated 4+. None of them is a social network. They collect no personal data from anyone, children included.

Refunds

Refunds are handled by Apple, not by Lumiri. Use Settings → Apple ID → Media & Purchases, or reportaproblem.apple.com

Changes

If this policy changes, we update this page and the date at the top.

Contact

hello@lumiriapps.com