RELUMA Privacy Policy

RELUMA (we, us, our) respects your privacy. This policy explains what we collect, how we use it, and your rights.

What we collect

• Account information including your email address and authentication details.
• Reflections you log, meaning the moments and details you write into the app.
• Subscription and billing information, processed by Stripe, we do not store your card details.
• Basic usage data such as app opens and feature interactions.

How we use it

• To generate your reflections, patterns, and flags using AI processing via the Lovable AI gateway (Google Gemini models).
• To manage your account and subscription.
• To improve the app's core functionality.

We do not sell your data. We do not use your reflections to train AI models beyond generating your own results.

Who we share data with

• Stripe, for payment processing.
• Lovable AI gateway (with Google as the underlying model provider) for AI-generated reflections — your reflection text is sent for processing to generate your response, and is not used to train third-party models.
• Supabase, our backend infrastructure provider, which stores your account and reflection data securely.
• Apple and Google, for App Store or Play Store billing when you subscribe on a native mobile build.
• RevenueCat, for verifying in-app subscription entitlements on native mobile builds.

Your rights

You can permanently delete your account and all associated data in-app from the Profile screen. This hard-deletes your reflections, patterns, saved cards, ratings, feedback notes, analytics rows tied to you, subscription record, and profile. Deletion cannot be undone and takes effect immediately.

You can also request access to or correction of your data by contacting relumaapp@gmail.com. Deleting your RELUMA account does not automatically cancel a paid subscription — cancel through Stripe (web) or your app store on native builds.

EU, UK, and international users

If you are in the EU, UK, or another jurisdiction with data protection laws (including GDPR and UK GDPR), you have the right to access, correct, delete, and export your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. Our lawful basis for processing your reflections and account data is the performance of our contract with you (providing the RELUMA service) and, where relevant, your consent. Data may be processed in the United States and other countries where our infrastructure and AI processing providers operate; where required, we rely on Standard Contractual Clauses and equivalent safeguards. To exercise any of these rights, email relumaapp@gmail.com.

Data retention

We retain your account and reflection data for as long as your account is active. When you delete your account in-app, we remove your reflections, patterns, saved cards, ratings, and profile immediately from our operational systems. Residual copies in encrypted infrastructure backups are purged on the standard 30-day backup rotation.

Two things are kept on purpose. If an email to you hard-bounces or you mark our email as spam, we keep a minimal suppression record (your email address and the reason) so we never contact that address again — it survives account deletion because it exists to protect you from further email. And our payment providers (Stripe, Apple) retain billing records for as long as financial compliance requires.

Not a health service, not a crisis line

RELUMA is a self-reflection tool built by a psychotherapist. The product itself is not a health service, medical advice, or a crisis line. If you are in immediate danger, call your local emergency number, or in the US call or text 988 (Suicide & Crisis Lifeline) or 1-800-799-7233 (National Domestic Violence Hotline). Outside the US, visit findahelpline.com.

Children's privacy

RELUMA is not intended for users under 18.

Changes to this policy

We'll update this page if our practices change and note the date above.