← Back to Lumen

Privacy Policy

Last updated: 14 July 2026

Lumen is operated by Graham Endres, Caernarfon, Wales.

  1. We are the data controller. Contact: mylumen.ltd@gmail.com.
  2. Lumen is 16+ only; confirmed at signup.
  3. Data we collect: account data (email, name and age confirmation); the content you choose to save in conversations, memory, plans, calendar, business records and private job photos; payment status from Stripe (never card numbers); feedback and essential technical logs.
  4. Lawful basis: contract performance (service + payments), legitimate interest (support, security).
  5. Used only to run Lumen for you — never sold.
  6. Shared only with the services needed to run Lumen: Stripe (payments), Supabase (account data, database and private file storage), Netlify (hosting), and OpenAI (AI replies, web research, speech and transcription when you use those features). Do not put sensitive information into AI prompts unless you are comfortable with that processing.
  7. Kept while your account is active; deleted within 30 days of account deletion (billing records kept 6 years per HMRC).
  8. UK GDPR rights: access, correction, deletion, export, objection — email mylumen.ltd@gmail.com, 30-day response.
  9. Industry-standard security measures.
  10. Essential cookies only; no tracking, no ads.
  11. Policy updates dated at the top.
  12. Contact: mylumen.ltd@gmail.com or via Vitals → Report a problem in the app.