Privacy Policy
Last updated: February 24, 2026
1. Scope
This Privacy Policy explains how Lumly collects, uses, stores, and shares personal data when you use our website and product.
2. Information We Collect
We collect information you provide directly and information generated when you use Lumly, including:
- Account information such as your email address
- Transactions you enter manually or import (amounts, merchants, dates, notes)
- Categories, labels, and rules you create
- IP address and basic device/browser information
- Usage data (feature usage, page views, interactions, error logs)
- Support messages you send us
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process and categorize your transactions
- Send you technical notices and support messages
- Monitor performance, reliability, and security
- Respond to your comments and questions
4. How We Store and Share Data
We use cloud infrastructure providers and other service providers to host, store, and process data on our behalf (for example, hosting, databases, authentication, and operational tooling). These providers are contractually required to protect data and use it only to provide services to us.
We do not sell your personal data. We may disclose data if required by law, to enforce our terms, or to protect the rights, safety, and security of Lumly and our users.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. We use encryption in transit and apply access controls to production systems.
6. Data Retention
We retain your personal data only for as long as necessary to provide you with our services and for legitimate business and legal purposes, such as security, backups, and dispute resolution. Retention periods may vary by data type.
7. Account and Data Deletion
You can request deletion of your account and data from within the app: go to Settings, open the General tab, and use the Delete account action.
If you cannot access your account, email hello@lumly.app from your account email address (or include enough information for us to verify your request).
Deletion may be processed as a soft-delete first and some data may remain in backups or logs for a limited period before final removal.
8. GDPR Rights (EEA/UK Users)
Where applicable under GDPR, you have the right to:
- Access your personal data
- Rectification of inaccurate or incomplete data
- Erasure of personal data
- Data portability
- Restriction of processing
- Object to processing
To exercise these rights, contact hello@lumly.app. We may request information to verify your identity before completing your request.
9. International Transfers
Your data may be processed in countries where our service providers operate. When required, we use appropriate safeguards for international data transfers.
10. Cookies
We use cookies and similar technologies necessary to run the service and remember preferences. See our Cookie Policy for details.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at hello@lumly.app