Privacy Policy

1. Who is responsible

Lumday is an app for birthdays, reminders, widgets, and personal greeting suggestions. Privacy questions and data requests can be sent to support@lumday.app.

2. Data you add

Lumday stores information you voluntarily add, including names, birthdays, groups, notes, avatar emoji, and selected photos. This data is used only to provide the people list, search, profiles, reminders, backups, widgets, and greeting features.

3. Storage and iCloud

Data is stored on your device using Apple system technologies. If iCloud is enabled, Lumday synchronizes saved records through your private Apple CloudKit database between devices connected to your Apple Account. iCloud synchronization is available in both the free and PRO versions. Apple processes CloudKit data under its own terms and privacy policy. Lumday does not use CloudKit records for advertising or marketing.

4. Contacts and Photos

Contacts access is requested only when you choose to import people. Lumday reads contacts on your device to show import candidates and saves only people you explicitly select. It does not upload your full address book or save unselected contacts, phone numbers, email addresses, or Contacts identifiers.

Photos access is requested only when you choose a photo for a person. The selected image is stored with that person’s Lumday record.

5. AI greetings

AI greeting generation is an optional Lumday PRO feature. Before the first generation, Lumday asks for explicit consent to send the person’s saved name, birthday and calculated age, group, note, selected tone, length, and language through the Lumday Cloudflare Worker to Cloudflare Workers AI using Google’s Gemma model.

The Worker processes this information only to create the requested greeting. It does not persist request or response content, associate greeting content with an analytics identity, or include names, birthdays, notes, prompts, or generated text in logs. The IP address is used momentarily only for security and rate limiting. Operational metrics contain only technical and categorical information such as outcome, status class, language, tone, length, model, error code, duration, attempt count, and response length.

You can reset AI consent in the greeting generator. Lumday will then ask again before another AI request.

6. Purchases, entitlement verification, and App Attest

Apple processes purchases through StoreKit. Lumday receives signed transaction and entitlement information needed to unlock PRO features, but never receives your payment card details. The Lumday Cloudflare Worker verifies the signed data but does not retain the raw signed transaction or the original Apple transaction identifier.

To provide paid access, enforce AI quotas, and prevent abuse, the Worker retains a pseudonymous HMAC-derived subscription subject, the purchased product ID, entitlement status and expiry, quota counters, and short-lived idempotency records. These records are not used for advertising or cross-app tracking.

When App Attest is supported, Lumday sends an attestation or assertion for verification. The private App Attest key remains on your device. The Worker retains an opaque installation key ID, its corresponding public key, assertion counter, and limited protocol, validation, distribution, and build metadata needed to verify future requests and detect replay or abuse. Lumday does not receive payment card details or personal Apple Account information.

7. Anonymous product analytics

Lumday uses Aptabase EU to understand which app features are used, diagnose broad usage problems, and plan improvements. Anonymous analytics are enabled by default and can be disabled at any time in Lumday Settings.

Events may include a generic event name and categorical properties such as app version, interface language, operating-system version, device class, feature name, result, or error category. Lumday does not send names, birthdays, groups, notes, photos, contact details, Apple Account or transaction identifiers, advertising identifiers, AI prompts, generated greetings, or other user-created content to Aptabase. Lumday does not use analytics for advertising, cross-app tracking, or user profiling.

Lumday does not include Firebase Analytics, Firebase Crashlytics, advertising SDKs, or session replay. Apple may separately provide privacy-preserving App Store Connect Analytics and Xcode Organizer diagnostics according to your Apple system sharing settings.

8. Website data

If you submit information through lumday.app, we use it only for the purpose shown on the relevant form. The website may use Cloudflare Web Analytics to understand aggregate traffic without advertising profiles or cross-site tracking. Legal pages do not set Lumday advertising cookies.

9. Notifications and widgets

Lumday schedules reminders locally through iOS system services. Notification permissions are controlled in iOS Settings. Widgets receive a limited, reduced snapshot through an Apple App Group. When PRO access is inactive, paid widgets display a locked state without personal birthday data.

10. Backups, retention, and deletion

A backup file is created only when you request an export and is stored wherever you choose in Files or iCloud Drive. App records remain until you edit or delete them, clear the people list, remove synchronized data through Apple or iCloud settings, or uninstall the app where no synchronized copy remains.

Server-side records used to verify paid access, enforce AI quotas, and protect App Attest requests are separate from the records on your device. Quota counters reset with their allowance period; request de-duplication records expire after 24 hours, and App Attest challenges expire after five minutes. The current service does not automatically expire entitlement snapshots or App Attest verification-key metadata, so these may remain after you uninstall Lumday. For privacy requests concerning server-side records, contact support@lumday.app.

11. Advertising and tracking

Lumday does not show third-party advertising, sell personal data, or track users across other companies’ apps or websites.

12. Security

We use reasonable safeguards including Apple system storage, private CloudKit, authenticated and validated backend requests, App Attest where supported, rate controls, timeouts, response-size limits, and controlled error messages. No electronic storage or transmission method can guarantee absolute security.

13. Children

Lumday is not intended for independent use by children below the age at which they may legally consent to personal-data processing in their country.

14. Changes and contact

This policy may be updated as Lumday evolves or legal requirements change. The current version is always published here with its update date. Questions or access and deletion requests can be sent to support@lumday.app.