Privacy Policy

Luma is a product developed and operated by Vinod Priya Sasanka Liyanage, an individual developer (hereafter "the Developer," "we," "us," or "our"). We value your privacy and are committed to being transparent about the data we collect and how we use it. This Privacy Policy outlines what information we collect, how it's used, and your rights regarding your data.

1. Information We Collect

We only collect what is necessary to provide our service:

• Email Address – Collected via Google Sign-In for authentication and user identification.
• Subscription Details – Includes user ID, email, and plan status to manage access to premium features.

We do not collect, view, or store your folders, bookmarks, or tab history on our servers.

2. Where Your Data Is Stored

• Bookmarks & Folders – Stored locally in your browser or in your own Google Drive if sync is enabled.
• Server-Side Storage – Only your email and subscription status are stored securely on our servers.

All data you create stays with you — either in your browser or your personal Google Drive account.

3. Google Drive Integration

Luma requests optional access to your Google Drive using the drive.file scope. If granted, this access is only used to create and manage a dedicated file to store your bookmarks. We do not access any other files or folders. Without this permission, the sync feature is unavailable.

4. Chrome Extension

Our Chrome Extension is fully offline and does not communicate with our servers.

These are used to:

• Extract metadata (title, URL, favicon, Open Graph image & description, created/updated time) from the currently opened webpage
• Send this data directly to the Luma web app for saving bookmarks

No Browse history, sensitive content, or personal tab data is collected or stored. All processing happens locally in your browser.

5. Third-Party Services

If you purchase a subscription, your payment is processed by a secure third-party provider Paddle. We do not store any payment details.

Luma uses Google Sign-In and Google Drive. Please refer to Google’s Privacy Policy for more information.

6. Children’s Privacy

Luma is not intended for children under 13. We do not knowingly collect or store information from users under this age. If you believe a child has registered, please contact us and we’ll promptly delete their data.

7. Data Use and Security

We use your data only to operate Luma.

We do not sell, share, or monetize your email or subscription data in any way.

We follow industry-standard security practices to protect all stored data.

8. Your Rights

You can request deletion of your account at any time by contacting us. This will remove your email and subscription data from our servers permanently.

9. Changes to This Policy

We may update this Privacy Policy occasionally. Any changes will be posted here with the updated date.