Privacy Policy

Last updated: August 26, 2026 · Effective: August 26, 2026

1. Who We Are

Lumi is operated by Lumi LLC, an Oklahoma limited liability company ("Lumi," "we," "our," or "us"). We are based in Oklahoma and serve users nationwide across the United States.

Lumi is delivered as two separate Android applications that work together:

• Lumi — replaces the home screen with a simple, large-text screen, and provides health reminders, appointments, weather, directions, photos, the SOS emergency feature, and the family supporter connection.
• Lumi Line — the texting and calling app. It can be set as your device's default text messaging app and default phone app, and it provides the scam detection feature.

This Privacy Policy covers both apps. Where a practice applies to only one of them, we say so explicitly. The two apps share a small amount of information with each other so they behave as one product; see the section on how the apps share data.

By downloading, installing, or using Lumi, you consent to the data practices described in this Privacy Policy. Use of the App constitutes your acceptance of this Privacy Policy and our Terms of Service.

Contact: bowman@getlumicare.com

2. Information We Collect

Information You Provide

• Your name — entered during onboarding to personalize the app experience.
• Emergency contacts — phone numbers and names you add for SOS alerts.
• Medication information — medication names, dosages, and schedules you enter into the My Health screen.
• Doctor appointments — appointment details you enter manually.

Information Collected Automatically

• Anonymous account ID — a random identifier created by Firebase when you first open the app. No email or password is required.
• Device location (GPS) — used in two ways: (1) for SOS emergency alerts (your location is sent to emergency contacts when you trigger SOS), and (2) for real-time location sharing with connected family supporters if you enable Location Sharing in Settings.
• Battery level — included in SOS alerts so your family knows your device status.
• FCM push notification token — a device identifier used to deliver push notifications from your connected family members.
• Blocked call log — a local log of calls blocked by the scam screening feature. Stored on your device, not uploaded.
• Incoming SMS content (scam screening only) — when the scam screening feature is enabled and an incoming text message is flagged as potentially suspicious by on-device keyword screening, the message text and sender identifier are sent to Anthropic's Claude AI API for deeper analysis. This happens automatically in the background. The message content is used only to determine whether the message is a scam and is not stored by Lumi after the analysis is complete. Scam Detection is on by default. You can turn it off at any time in Settings → Check texts for scams in the Lumi app, which stops any message content from being sent for analysis. You can also stop it by choosing a different app as your default texting app, or by uninstalling Lumi Line.
• IP address and device network information — your device's Internet Protocol (IP) address and basic network information are automatically collected by Google Firebase, Google Play Services, and our crash reporting tools (Firebase Crashlytics) when you use the app. This information is used to operate the service, diagnose technical issues, prevent fraud, and monitor app performance. It is processed by Google in accordance with Google's Privacy Policy. Lumi does not store your IP address independently.

Device Permissions Used

Each app requests only the permissions it actually needs. The permissions are not shared between the apps.

Lumi (the home screen app)

• Location, including background location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, ACCESS_BACKGROUND_LOCATION, FOREGROUND_SERVICE_LOCATION) — for SOS GPS coordinates and, if you turn it on, so your connected family supporters can see your location for safety. See the note on background location below.
• CALL_PHONE — to place the 911 call during SOS activation.
• READ_CONTACTS — to show your real contacts for calling and emergency contacts.
• RECORD_AUDIO — for the voice assistant. Speech is converted to text and is never recorded or stored.
• CAMERA and photo access — for the photo feature. Photos stay on your device unless you choose to share them.
• ACTIVITY_RECOGNITION — for step counting in the fitness feature.
• POST_NOTIFICATIONS, USE_EXACT_ALARM, SCHEDULE_EXACT_ALARM, RECEIVE_BOOT_COMPLETED — to deliver medication and appointment reminders at the right time, including after the phone restarts.
• INTERNET and network state — to sync with your family supporters and load weather and news.

The Lumi home screen app does not request permission to read, receive, or send text messages, and does not request access to your call log. Those live only in the Lumi Line app.

Lumi Line (the texting and calling app)

• SMS and MMS (READ_SMS, RECEIVE_SMS, SEND_SMS, RECEIVE_MMS, RECEIVE_WAP_PUSH) — to show your conversations and let you read, send, and receive texts and picture messages. Required by Android for a default messaging app.
• Call log and phone (READ_CALL_LOG, CALL_PHONE, READ_PHONE_STATE, ANSWER_PHONE_CALLS, MANAGE_OWN_CALLS) — to show recent calls, place and answer calls, and screen likely scam callers. Required by Android for a default phone app.
• READ_CONTACTS — so messages and calls show a person's name instead of a bare number.
• POST_NOTIFICATIONS — to alert you to new messages and to scam warnings.
• INTERNET and network state — to send flagged messages for scam analysis, as described in the next section.

Background location (Lumi home screen app)

With your permission, Lumi collects your location in the background, meaning while the app is closed or not in use, so the family supporters you have connected can see your location for safety and so SOS can report where you are. Android asks for this separately, with an "Allow all the time" prompt, and you must grant it deliberately. You can turn location sharing off at any time in Settings, or revoke the permission entirely in your Android settings. Your location is shared only with the family supporters you connect, and is never sold and never used for advertising.

3. Text Messages and Call Log (Lumi Line app only)

The Lumi Line app can be set as your device's default text messaging app and default phone (dialer) app. Android grants those roles only to apps the user chooses, and it requires them in order to show and send messages and calls. When you set Lumi Line as your default, it accesses:

• The content of your SMS and MMS text messages — sender, recipient, message text, any attached picture, and timestamps — so it can display your conversations in a large, simple format and let you read, send, and reply to texts.
• Your call log — numbers dialed and received, call times, and call duration — so it can show your recent calls, let you call people back with one tap, and identify likely scam or spam callers.
• Your contacts — names and phone numbers already stored on your device — so messages and calls show the person's name instead of a bare phone number.

What happens to that information

• Showing and sending your messages and calls. This is done on your device. Your message content and call history are not uploaded to Lumi's servers, are not shared with your family supporters, and are never sold, rented, or used for advertising.
• Scam detection. Incoming messages are first screened on your device. Messages from people already in your contacts that show no warning signs are never sent anywhere. If that on-device screening flags a message as possibly suspicious, the text of that message and the sender's number are sent to Anthropic (the maker of Claude AI) to determine whether it is a scam. Only the flagged message is sent — not your whole inbox, not your conversation history, and not your contacts. Lumi does not store the message content after the analysis is complete. Anthropic's handling of that data is governed by Anthropic's own terms.
• Scam call screening. When a call comes in, the caller's number is checked against on-device rules to warn you about likely scam callers. A record of blocked calls is kept on your device.

Your control over this

• Scam Detection is on by default, because it is the reason this app exists. You can turn it off at any time in the Lumi app at Settings → Check texts for scams. With it off, no message content is sent anywhere for analysis. You can also choose a different default texting app, or uninstall Lumi Line.
• You can stop all of this access entirely by choosing a different default texting or phone app in your Android settings, or by uninstalling Lumi Line. The main Lumi app will continue to work without it.

How the two apps share information

So that the two apps behave as one product, they share a limited amount of information with each other: which senior account is in use, your app settings (such as large text and whether scam detection is on), and scam warnings so your family supporters can be told that a scam was blocked. The text of your messages and your call history are not shared between the apps, are not sent to our servers, and are not shown to your family supporters.

4. How We Use Your Information

• To operate the Lumi app and provide safety features (SOS, medication reminders, call screening).
• To send emergency SMS messages to your contacts when you activate SOS.
• To share your real-time location and health updates with connected family supporters you choose to link via a pairing code.
• To deliver push notifications from connected supporters (medication check-ins, settings updates).
• To personalize the home screen greeting and voice assistant responses.
• To find and fix bugs through automatic crash reports, which are collected by Firebase Crashlytics.

We do not use your information for advertising, sell it to third parties, or share it with anyone except the family supporters you explicitly connect to your account.

5. Family Supporter Access

Lumi includes a family connection feature. When you share your 6-digit pairing code with a family member, they can connect to your Lumi account through the Lumi caregiver dashboard. Connected supporters can see:

• Your name and profile information
• Your medication adherence status (whether you've taken your medications)
• Your real-time GPS location (only if Location Sharing is enabled in Settings)
• SOS event history
• Blocked scam call alerts

You control this connection. You can view your pairing code in Settings → Caregiver settings. Only people you personally share this code with can connect to your account.

6. Third-Party Services

Lumi uses the following third-party services. Each has its own privacy policy:

• Google Firebase (Firestore, Authentication, Cloud Messaging, Crashlytics) — stores your profile, contacts, medications, and location data. Firebase Privacy Policy
• Google Maps — used for the Directions feature and SOS location links. Google Privacy Policy
• OpenWeatherMap — provides weather for where you are. To do this, Lumi sends your device's approximate GPS coordinates (latitude and longitude) to OpenWeatherMap with each weather request. No name, account identifier, or contact information is sent with it, and OpenWeatherMap is not told who you are. OpenWeatherMap Privacy Policy
• GNews — provides the news headlines shown in the News screen. Lumi sends only a topic and language; no personal information, account identifier, or location is sent. GNews Privacy Policy
• Kit (formerly ConvertKit) — runs the beta signup form on our website. If you choose to enter your email address there, it is stored by Kit so we can tell you when Lumi is available and how to join the test. We use it for nothing else, we do not sell or share it, and every email we send includes an unsubscribe link. Not entering your address is always an option; the website works without it. Kit Privacy Policy
• Cloudflare Web Analytics — used on our website, getlumicare.com, to count page views and see which pages people read. It sets no cookies, does not follow you across other websites, and does not identify individual visitors. It is not used inside the Lumi or Lumi Line apps at all. About Cloudflare Web Analytics
• Google Play Billing — handles subscription payments. Lumi never sees your payment card details. Google Privacy Policy
• Anthropic (Claude AI) — used by the Scam Detection feature to analyze suspicious incoming text messages. When a message is flagged by on-device screening, the message text and sender identifier are sent to Anthropic's API for analysis. Anthropic's handling and retention of that data is governed by Anthropic's own privacy policy and API terms, not by Lumi. Anthropic Privacy Policy

7. Data Storage and Security

Your data is stored in Google Firebase's Firestore database, hosted on Google Cloud infrastructure in the United States. Google applies enterprise-grade security to this data.

Sensitive data stored on your device — including your security PIN, caregiver PIN, and health metrics (heart rate, blood pressure, sleep data) — is encrypted using Android's EncryptedSharedPreferences with AES-256-GCM encryption. It is never uploaded to our servers.

Your API keys and sensitive configuration are stored in local.properties and are never included in the app source code or shared publicly.

8. Your Rights and Choices

• Access: You can view all data Lumi holds about you in the app's Settings and My Health screens.
• Deletion: You can delete your account and everything stored with it from inside the app, at Settings → About Lumi → Delete my account. Full details of what is removed are on our Delete Your Account page. If you would rather we do it for you, email bowman@getlumicare.com with the subject line "Delete My Lumi Account" and we will confirm deletion within 30 days.
• Permissions: You can revoke any device permission at any time in your Android Settings. Revoking a permission will disable the associated feature (e.g., revoking location access disables SOS GPS and location sharing).
• Location sharing: You can turn off real-time location sharing at any time in Settings → Share location with family.

9. SOS Emergency Feature — Limitation of Liability

The SOS emergency button is a best-effort safety feature and is not a guaranteed emergency response system. By using the SOS feature, you acknowledge and agree to the following:

• The SOS button requires an active internet or cellular connection to send alerts to family supporters. If your device has no signal, the alert may not be delivered.
• SMS delivery to emergency contacts depends on your carrier and the recipients' devices. Lumi has no control over SMS delivery success or timing.
• GPS location accuracy depends on your device hardware, operating system, and environmental conditions. Location data sent during an SOS event may be approximate or unavailable.
• The SOS feature is not monitored by any emergency dispatch center, law enforcement, or medical personnel. It is a notification tool only.
• Lumi is not responsible for any failure of the SOS feature to function as expected, including but not limited to: failed SMS delivery, inaccurate GPS location, app crashes, device power-off, or network outages.

In any life-threatening emergency, always call 911 directly. Do not rely solely on Lumi's SOS feature as your emergency response. Lumi is a supplemental safety tool, not a substitute for emergency services.

By enabling and using the SOS feature, you accept these limitations and agree that Lumi bears no liability for outcomes resulting from SOS feature failure or non-delivery.

10. Health Data and HIPAA

Lumi is not a medical device and does not provide medical advice. Medication names, dosages, and schedules you enter into Lumi are used only to set reminders and share adherence status with your chosen family supporters. This information is not reviewed by any medical professional. Always follow the guidance of your doctor or pharmacist.

Why Lumi is not subject to HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) applies to covered entities — hospitals, doctors' offices, health insurance plans, and healthcare clearinghouses — and to their business associates. Lumi is none of these. Lumi is a direct-to-consumer application. We were not hired by, contracted by, or paid by any healthcare provider or health plan to handle your health information. All health data stored in Lumi is entered voluntarily by you, the user, for your own personal use. No covered entity directs us to create, receive, maintain, or transmit your health information on their behalf.

All health data is user-generated

Every piece of health information in Lumi — medications, dosages, schedules, appointments, and health metrics — is entered by you directly. Lumi does not receive data from any hospital, doctor's office, pharmacy, insurance company, or electronic health record (EHR) system. Because the data originates with you and is managed by you, Lumi operates as a personal organization tool, not as a healthcare data processor for any covered entity.

Not for clinical use

Lumi is designed for personal, non-clinical use only. It is not intended to be used by healthcare providers as a clinical tool, and it should not be used to make medical decisions. If you are a healthcare professional, Lumi's health data features are not a substitute for clinically validated software.

Important note for institutional use

If Lumi is ever deployed in a context where a healthcare facility or covered entity contracts with Lumi to manage health data for their patients or residents on their behalf, that arrangement would be governed by a separate Business Associate Agreement and would be outside the scope of this Privacy Policy. In that case, HIPAA protections would apply to that specific arrangement.

How we protect your health data anyway

Even though HIPAA does not apply to Lumi, we treat your health information with the same seriousness. Sensitive health data stored on your device is encrypted using AES-256-GCM encryption. Your medication and appointment data stored in Firebase is protected under Google's enterprise-grade security infrastructure. We do not sell, license, or share your health information with advertisers, data brokers, or any third party not listed in this policy.

11. Text Message and Email Communications (TCPA & CAN-SPAM)

SOS Emergency Text Messages

When you activate Lumi's SOS feature, the app sends automated SMS text messages to the emergency contacts you have designated in your account. These messages are emergency alerts sent by your device on your behalf — they are not marketing or promotional messages sent by Lumi as a company. Under the Telephone Consumer Protection Act (TCPA), emergency communications are exempt from standard prior written consent requirements. Lumi's SOS SMS feature falls within this exemption because the sole purpose of these messages is to notify your family in a life-threatening or urgent situation.

Emergency Contact Consent

By adding a person as an emergency contact in Lumi, you represent that you have informed them that they may receive automated SMS alerts from your device in the event of an emergency. Lumi is not responsible for obtaining consent from your emergency contacts on your behalf. It is your responsibility to ensure the people you add are aware they may receive these alerts.

No Marketing Texts

Lumi does not send unsolicited promotional or marketing text messages to users or their contacts. If Lumi ever introduces SMS-based communications beyond emergency alerts — such as account or subscription notifications — we will obtain your prior express written consent before doing so, and every such message will include a clear opt-out option.

Email Communications (CAN-SPAM)

Lumi may send transactional emails such as account deletion confirmations or responses to support requests. These are not marketing emails and are sent only in response to your direct actions. If Lumi ever sends promotional emails, we will comply fully with the CAN-SPAM Act, including providing a clear unsubscribe option in every message and honoring opt-out requests promptly. We do not sell or share your email address with third parties for marketing purposes.

12. Children's Privacy

Lumi is designed for adults, specifically seniors aged 60 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

13. Data Retention

We retain your personal data only for as long as necessary to provide the Lumi service and fulfill the purposes described in this Privacy Policy. The following retention periods apply:

• Account and profile data (name, emergency contacts, medication information) — retained for the life of your account. Deleted within 30 days of a verified account deletion request.
• SOS event history and GPS location data — retained for 90 days, then automatically deleted.
• Crash and diagnostic data — retained for 90 days by Firebase Crashlytics, then automatically purged per Google's data retention policies.
• IP address and network data — retained for up to 30 days by Google Firebase for fraud prevention and service diagnostics, then deleted per Google's policies.
• Blocked call logs — stored locally on your device only. Lumi does not retain this data on our servers.
• Scam detection SMS content — not stored by Lumi at any point. Sent to Anthropic's Claude AI API for real-time analysis only and immediately discarded.

You may request deletion of your data at any time by emailing bowman@getlumicare.com. We will confirm and complete deletion within 30 days.

Data stored on your device — app preferences, your caregiver PIN, medication alarms, your messages, and your call history — is deleted automatically when you uninstall the app. Uninstalling does not by itself delete data held on our servers; use the deletion request described above for that.

14. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, to the extent we are able to identify and contact them. We will describe the nature of the breach, the data affected, and steps we are taking to address it.

15. Governing Law

This Privacy Policy is governed by the laws of the State of Oklahoma, United States, without regard to its conflict of law provisions. Any disputes arising from this policy will be resolved in the courts of Oklahoma County, Oklahoma.

16. Changes to This Policy

We may update this Privacy Policy as Lumi grows. When we make significant changes, we will update the "Last updated" date at the top of this page and notify you through the app. Your continued use of Lumi after any update constitutes acceptance of the revised policy.

17. Contact Us

If you have any questions about this Privacy Policy or how Lumi handles your data, please contact:

Lumi
Edmond, Oklahoma, USA
bowman@getlumicare.com

Deleting your account

You can delete your account and everything stored with it at any time, from Settings → About Lumi → Delete my account. See Delete Your Account for exactly what is removed and what we keep.