How we handle your data.
Written in plain language, because you’re tired and this shouldn’t be work.
1. What we collect
Luma is designed to be privacy-first. Here’s what the app collects:
- Feeding logs — session start/end times, side (left/right breast), bottle amounts, and pump data. Stored locally on your device.
- Apple Sign In (optional) — if you choose to sign in, we receive a unique user ID and optionally your name and email address from Apple. This is used solely to associate your data with your account for backup/restore.
- Purchase data — managed by RevenueCat and Apple. We receive confirmation of your subscription status but never see your payment details.
- Crash and diagnostic data — if you opt in through iOS, Apple may share anonymised crash reports with us to help fix bugs.
2. What we don’t collect
- We do not collect health data or share it with third parties.
- We do not track your location.
- We do not use advertising SDKs or sell your data to advertisers.
- We do not share your feeding logs with anyone.
3. How your data is stored
All feeding logs are stored locally on your device using iOS secure storage. They are not uploaded to any server unless you enable iCloud Sync (if available) in your device settings.
If you use Apple Sign In, your user ID is stored in Supabase (our optional backend) solely to enable account management features like deleting your account. No feeding data is sent to Supabase.
4. Apple Watch sync
If you use the Luma Apple Watch app, data syncs directly between your iPhone and Watch using Apple’s WatchConnectivity framework. This is a local, device-to-device connection — no data passes through any server.
5. Third-party services
- RevenueCat — manages subscription status and purchase validation. RevenueCat Privacy Policy
- Supabase — optional backend used only for Apple Sign In account management. Supabase Privacy Policy
- Apple StoreKit — handles all payment processing. Apple’s privacy policy governs payment data.
6. Children’s privacy
Luma is intended for parents and caregivers aged 17 and over. We do not knowingly collect data from children under 13.
7. Data deletion
You can delete all your data at any time:
- Feeding logs — tap Settings → Delete All Data in the app.
- Your account — tap Settings → Delete Account. This permanently removes your account from our servers.
- To request manual deletion — email us at empire@tan.wiki.
8. Changes to this policy
If we make material changes, we’ll notify you through the app or via email (if you’ve signed in). Continued use of Luma after changes constitutes acceptance of the updated policy.
9. Contact
Questions about privacy? We’re happy to help.