Privacy Policy

Last updated: August 26, 2026

This Privacy Policy explains how Lumea ("Lumea", "the app", "we", "us"), a mobile photo-editing application by kodmap, handles information when you use it on iOS and Android. We built Lumea to be private by default: you edit your photos on your device, and you can use the app without creating an account.

The short version. Your photos are edited on your device and are not uploaded — with one exception: the moment you tap an AI feature, the image you selected is sent to our backend to be processed and returned to you, and it is not kept afterwards. We do not require a name, email or password, we do not use advertising, and we do not sell your data.

1. Information we process

  • Your photos. Photos you open in Lumea are processed locally on your device for editing. They are not uploaded to us, except as described in "AI features" below.
  • Usage & analytics data — pseudonymous events about which screens and features you use, via Google Firebase Analytics. Used to understand and improve the app.
  • Diagnostics & crash data — device model, OS version, app version, and crash stack traces, via Firebase Crashlytics.
  • Notifications token — if you enable notifications, a push token via Firebase Cloud Messaging, used only to deliver updates and messages.
  • Purchase & subscription status — whether you have an active Lumea Pro subscription, via RevenueCat and the Apple App Store / Google Play. We never see or store your payment card details; billing is handled entirely by the stores.

None of the data above is linked to your identity or used to track you across other apps or websites, and all of it is transmitted over encrypted connections (HTTPS).

2. What we do not collect

We do not ask for your name, email, phone number, precise location or contacts, and Lumea does not require you to sign in for any of its features. We do not use any third-party advertising SDKs, we do not track you for advertising, and we do not sell your data.

3. AI features

Most editing happens entirely on your device. When you actively invoke an AI feature, the single image you selected is sent to our backend — Firebase Cloud Functions in the europe-west1 (Belgium) region — which calls Google's Gemini API to process the image, and then returns the result to your device.

  • The image is sent only to fulfil the AI operation you requested.
  • Images are not stored on our servers beyond the processing needed to generate your result.
  • Your image inputs are not used to train third-party models.

If you never use an AI feature, no photo ever leaves your device.

4. Third-party services

Lumea relies on these processors, each under their own privacy terms:

  • Google Firebase (Analytics, Crashlytics, Cloud Messaging, Cloud Functions) — analytics, diagnostics, notifications, and the backend that powers AI features.
  • Google Gemini — AI image processing.
  • RevenueCat — subscription management.
  • Apple App Store / Google Play — app distribution and billing.

5. Data retention & security

Photos and edits stay on your device until you delete them or uninstall the app. Images sent for an AI feature are processed and returned, and are not retained on our servers afterward. Analytics and diagnostics data are retained by our processors for limited periods per their policies. We use industry-standard measures, including encryption in transit, to protect data, though no method is 100% secure.

6. Your choices & rights

  • Your photos — delete them from your device at any time; they are yours and are not stored by us.
  • Notifications — turn them off anytime in your device settings or in-app.
  • Analytics — you may limit analytics through your device's privacy settings.
  • Depending on your region (e.g. EEA/UK GDPR, California CCPA), you may have rights to access, correct, or delete your information. Because Lumea has no account, see our Data Deletion page for how to make a request. Contact us to exercise any of these rights.

7. Children

Lumea is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect data from them.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

9. Contact

Questions or requests: kodmapdev@gmail.com.