Information we collect.
Account information. When you sign up with email, we store your email address and a hashed password. When you sign in with Apple or Google, we store the OAuth provider ID associated with your account. We do not see your password for those providers.
Reading activity. To power the “For You” personalized feed, we record events when you tap, save, like, or finish reading articles (“reading events”). Each event includes the article ID, source ID, event type, and a timestamp.
Subscription state. If you purchase Lumio Pro, we store your current subscription status and renewal date so we can unlock paid features inside the app.
Device and diagnostic data. We rely on Apple App Store / Google Play crash and analytics defaults. We do not currently run a separate analytics SDK.
How we use it.
- Provide and operate the app — authentication, syncing tabs, fetching feeds.
- Personalize the “For You” tab using your reading events.
- Validate purchases and unlock subscription features.
- Diagnose bugs and improve stability.
We do not sell your personal information.
Third-party processors.
Lumio relies on the following services to operate. Each has its own privacy policy.
- Supabase — database and authentication hosting.
- Railway — backend hosting.
- RevenueCat — subscription management and receipt validation.
- Apple Sign-In / Google Sign-In — federated login (only when you choose to use them).
- FeedScope — semantic feed search and discovery.
- OpenAI — AI summaries (“Key Points”): only the text of articles you choose to summarize, and only after you opt in. See the next section. OpenAI privacy policy.
AI summaries (“Key Points”).
Lumio can generate a short bullet-point summary of an article when you ask it to. This feature is optional and stays off until you accept the in-app consent prompt.
- Who processes the text. Summaries are produced by OpenAI (OpenAI, L.L.C.) through its API. OpenAI acts as our processor for this purpose.
- What we send. The article’s title, the publisher’s name, and the article text (up to about 6,000 characters). We do not send your name, email address, account identifier, device identifier, reading history or location.
- When we send it. Only when you tap “Generate Key Points” on an article, and only after you have accepted the consent prompt. Summaries are never generated in the background.
- Retention. We store the generated summary alongside the article so it does not have to be regenerated for other readers; it contains no personal data. OpenAI states that API inputs and outputs are not used to train its models and are retained for up to 30 days for abuse monitoring, then deleted (see OpenAI’s API data usage policy).
- Your controls. You can withdraw consent at any time in Settings → AI Key Points. After that, no further article text is sent. Each summary is labelled as AI-generated and has a “Report” action; reports are stored with the summary so we can review and correct it.
- Usage limits. We record when you generate a summary (time, article, model, token counts) to enforce daily limits and monitor cost. This record is linked to your account and deleted with it.
- Publishers. We honour machine-readable opt-outs (robots.txt, TDMRep,
noai) and do not summarize articles from publishers who have opted out.
Retention.
- Account records and reading events are kept while your account is active.
- Articles older than 30 days, or beyond a per-source cap, are pruned from our cache. Articles you have saved are retained.
- When you delete your account from inside the app, we remove your account record and associated reading events.
Your choices.
- Delete your account from Settings → Danger Zone → Delete Account. This is irreversible.
- Turn off personalization by not using the For You tab. Reading events are still recorded for the saved/read state but are not surfaced.
- Manage subscription through Apple App Store or Google Play.
Children.
Lumio is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect data from children.
Changes to this policy.
We may update this policy. Material changes will be reflected in the “Last updated” date and, where required, surfaced inside the app.
Contact.
Questions: kushil@meridexlabs.com