Your life. Your data.

This privacy policy explains how Sunbear Studios collects, uses, and shares information when you use Lumalis and lumalisapp.com.

Effective September 6, 2026 · Contact: privacy@lumalisapp.com

What we collect and why

• Account information. Your email address, account identifier, profile name, avatar choices, and sign-in information help us authenticate you and keep your progress connected to your account. If you sign in through Apple or Google, we receive the account information that service shares, such as your email address and identifier.
• The content you add. Tasks, habits, goals, notes, lists, schedules, projects, tags, and preferences are stored to provide your planner and synchronize it with your account. If you use meal, school, or budget features available in your version, this also includes the recipes, pantry items, coursework, budgets, accounts, and transactions you enter.
• Adventure progress. Completions, focus sessions, rewards, inventory, character choices, and world progress let us run the game and save your adventure.
• Technical and usage information. Our systems and service providers process information such as IP addresses, device and operating-system details, app version, request logs, errors, performance traces, navigation events, and diagnostic logs. We use these to deliver the service, investigate failures, prevent abuse, and improve reliability. Diagnostic events may include account identifiers and contextual information about an action.
• Support messages. We receive your email address, message, and any attachments you send us so we can respond and resolve your request.

Sunbear AI and voice input

When you send a message to Sunbear, we send your message, relevant conversation history, and a limited planner snapshot to Anthropic to generate a response. The snapshot can include task and habit titles, schedules, completion states, priorities, streaks, projects, tags, and time-zone information. We store conversations and proposed changes so you can return to them.

When you choose voice input and grant microphone permission, your recording is sent through our backend to OpenAI for transcription. Our transcription service does not save the audio to the application database. The returned text is shown for you to review; if you send it to Sunbear, it becomes part of your conversation. Provider processing and retention are governed by their applicable service terms and policies.

Avoid including information you do not want processed by an AI service. You can use the planner without sending Sunbear messages and type instead of recording audio.

Optional bank connections

If bank linking is available in your version and you choose to connect an account, Plaid connects to your financial institution. We receive connection identifiers and permitted account information, including account names and types, masked account numbers, balances, and transaction details, to support budgeting and synchronization. Lumalis does not receive or store your bank login password. Manual budgeting does not require a bank connection.

Contact privacy@lumalisapp.com to request removal of a connection and its stored data. You can also manage connections through your institution or Plaid where supported. See Plaid's privacy policy.

Who processes information

We use service providers to operate Lumalis. Information is shared as needed for the function you use:

• Supabase — account authentication, databases, storage, and backend functions.
• Anthropic — AI chat and suggestions.
• OpenAI — voice transcription.
• Sentry — error reporting, diagnostic logs, and performance monitoring.
• Expo and Cloudflare — app updates, content delivery, and website hosting infrastructure. This website is published through OpenAI Sites.
• Resend and Google Workspace — account emails, launch notifications if requested, and support correspondence.
• Apple and Google — sign-in when selected; Apple also distributes the iOS app and TestFlight beta.
• Plaid — optional bank connections, where available.

We do not sell your personal information or use it for cross-app targeted advertising. Lumalis does not include an advertising SDK. We may disclose information if required by law or when necessary to protect users, investigate abuse, or safeguard the service.

Storage, security, and retention

Account content and progress are retained while your account remains active so we can provide the service. Support correspondence and diagnostics are retained for support, reliability, security, and applicable legal needs. Our providers may process and store information in countries other than your own, including the United States.

We use authenticated access, access controls, and encrypted network connections to protect information. No storage or transmission method can guarantee complete security.

When you request deletion, we verify ownership and remove the applicable account information and content from active systems, except information we need to retain for legal, security, or fraud-prevention reasons. Backup copies and provider logs may remain until their retention cycles expire. We can explain any applicable exceptions when handling your request.

Your choices and rights

You can edit or remove planner content using the controls available in the app. You can revoke microphone and notification permissions in your device settings, stop using AI features, or request account deletion. Uninstalling Lumalis removes the installed app but does not delete data stored with your account.

To request access to, correction of, export of, or deletion of your information, email privacy@lumalisapp.com, preferably from your account email address. We may ask you to verify ownership before acting. Depending on where you live, you may also have rights to restrict or object to processing, withdraw consent, or complain to your local data protection authority.

This website and the launch list

You can read this website without creating an account. We do not add advertising trackers or analytics cookies. Hosting providers may process IP addresses, request information, and essential security data to deliver and protect the website. Fonts and illustrations are served with the site.

If you join the launch list, we store your email address and signup time to send you a Lumalis launch notification. Joining is optional and does not create an app account. Email privacy@lumalisapp.com to leave the list or request deletion before launch.

Questions and changes

If you have concerns about information provided by a child or another person without permission, contact us so we can investigate and address it.

We will update this page when our practices change and revise the effective date. Where required, we will provide additional notice or ask for consent before using your information for a new purpose.

Sunbear Studios · privacy@lumalisapp.com · Lumalis support