Privacy Policy
Last updated: August 31, 2026 · Version 1.0
Lumora360 is a symbolic intelligence platform for reflection and insight. We are committed to protecting your privacy and complying with the GDPR (EU), CCPA (California), and other global data protection regulations. All interpretations are philosophical — not financial, medical, or predictive advice.
Data Protection Officer: Admin@aensured.com
Data We Collect
- •Account information: name and email address, collected when you register or sign in with Google.
- •Birth details: date, time, and location of birth — used solely to generate your personalized astrological profile and readings.
- •Reflection data: journal entries, mood logs, tarot readings, and saved interpretations you create.
- •Usage data: anonymous analytics events (e.g., feature usage) to improve the platform. We do not sell your data.
How We Use Your Data
- •To generate personalized symbolic insights, natal charts, forecasts, and tarot interpretations.
- •To provide daily reflections, phase-transition alerts, and horoscope reports you request.
- •To manage your subscription, family plan, and referral rewards.
- •We process data based on your consent and our legitimate interest in providing the service you requested.
Data Storage & Transit
- •All data is stored in encrypted databases hosted on secure cloud infrastructure.
- •Data in transit is protected using TLS/HTTPS encryption between your device and our servers.
- •Birth details and reflections are stored only for as long as your account is active, or until you request deletion.
- •Third-party AI providers (OpenAI) receive anonymized prompts to generate interpretations and do not retain your data beyond processing.
Your Rights (GDPR & Global Privacy)
- •Right to be informed: this policy explains what we collect and why.
- •Right of access: you can export all your data as a downloadable JSON file from your Profile.
- •Right to rectification: edit your birth details and display name anytime in Profile settings.
- •Right to erasure: delete your account and all associated data permanently from Profile → Delete Account.
- •Right to data portability: export your data in machine-readable JSON format.
- •Right to object: withdraw consent anytime from Profile → Privacy & Consent settings.
- •Right to restrict processing: disable notifications and email features in Profile settings.
Data Retention
- •Active account data is retained while your account is active.
- •Subscription and billing records are kept for the duration required by tax and financial regulations.
- •Cached astrological data (natal charts, forecasts) is retained to improve performance but is not shared with third parties.
- •Upon account deletion, all personal data is permanently erased within 30 days, except where legal obligations require retention.
Contact & Complaints
- •For data access requests, corrections, or deletion assistance, contact us through the Contact page.
- •You have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data infringes your rights.
- •Data Protection Officer (DPO): Admin@aensured.com — contact for all privacy, data access, and consent matters.
- •For data access requests, corrections, or deletion assistance, contact our DPO or use the Contact page.
- •You have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data infringes your rights.
- •We respond to verified data requests within 30 days.
Children's Privacy (COPPA)
- •Lumora is not directed at children under 13. We do not knowingly collect personal information from children under 13.
- •If you believe a child under 13 has provided us with personal data, contact our DPO at Admin@aensured.com and we will promptly delete it.
- •Users aged 13–15 must confirm parental or guardian consent during onboarding before an account is created.
CCPA & "Do Not Sell My Info"
- •Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, request deletion, and opt out of the "sale" of their personal information.
- •Lumora does not sell your personal information to any third party. We do not share your data for advertising or cross-context behavioral advertising purposes.
- •To exercise your CCPA rights — know, delete, correct, or opt-out — contact our DPO at Admin@aensured.com with "CCPA Request" in the subject line. We verify your identity before processing any request.
Cross-Border Data Transfers
- •Your data may be processed by our infrastructure and AI providers (e.g., OpenAI) located outside your country of residence, including in the United States.
- •For transfers from the European Economic Area (EEA) to third countries, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring a comparable level of data protection.
- •Our AI providers are bound by data processing agreements that prohibit using your data for training their models and require deletion after processing.
Data Breach Notification
- •In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.
- •If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay, describing the nature of the breach and the steps you can take to protect yourself.
- •Our DPO (Admin@aensured.com) maintains an internal breach response procedure and registers all incidents.
Record of Processing Activities
- •We maintain an internal record of processing activities (GDPR Article 30) documenting: the purposes of processing, categories of data subjects and personal data, recipient categories, third-country transfers, retention periods, and security measures.
- •Processing purposes include: account management, astrological profile generation, journal/reflection storage, subscription/billing, family plan management, email notifications, and anonymous analytics.
- •Categories of personal data: identity (name, email), birth details (date, time, location), user-generated content (journals, reflections, tarot readings), and billing records.
- •This record is available to supervisory authorities upon request.
Cookies & Tracking
- •We use essential cookies to maintain your session and keep you logged in. These are strictly necessary and cannot be disabled.
- •We use anonymous analytics events to understand feature usage and improve the platform. These do not identify you personally and are not shared with advertisers.
- •We do not use advertising cookies, cross-site tracking pixels, or third-party advertising SDKs.
- •You can accept or decline analytics tracking from the cookie consent banner shown on first visit. Your preference is stored locally and can be changed anytime.
You can exercise your data rights anytime from your Profile — export your data, manage consent, or delete your account.