Legal

Privacy Policy

Last updated: March 2026  ·  LumaScor LLC

LumaScor LLC ("LumaScor," "we," "us," or "our") operates lumascor.com, lumiecho.app, sculpty.fit, and custom AI applications built for clients (collectively, the "Services"). This Privacy Policy explains how we collect, use, and protect your information when you use our Services or engage with us through our website.

Information We Collect

We collect information you provide directly to us, including:

• Account information such as name and email address when you register for a product
• Inquiry information such as name, email address, project description, and timeline when you submit the contact form on lumascor.com/buildmyapp
• Content you submit including voice recordings, text check-ins, and chat messages within our products
• Usage data including how you interact with our products
• Device and technical information including browser type and IP address
• Payment information processed securely through third-party providers

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Respond to project inquiries submitted through our website
• Personalize your experience — for example, generating insights and reflections based on your check-ins
• Send you product updates, reminders, and notifications you have opted into
• Process transactions and manage your account
• Respond to your comments and questions
• Monitor and analyze usage patterns to improve product quality

Artificial Intelligence Processing

Our products use artificial intelligence to process your inputs and generate personalized responses. Your check-ins, voice transcriptions, and messages are processed by third-party AI providers to deliver core product functionality.

Your data is never used to train or improve third-party AI models. Under Anthropic's commercial API terms, API inputs and outputs are not used for model training, and API logs are automatically deleted. OpenAI's Whisper API processes voice recordings for transcription only and does not retain audio data or use it for training.

Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade security including encryption at rest (AES-256), encryption in transit (TLS 1.2+), row-level security policies, and SOC 2 Type II compliance. All web traffic is served over HTTPS with automatic SSL certificates.

Voice recordings are transcribed and not stored in their original audio form beyond the transcription process. We retain your data for as long as your account is active or as needed to provide the Services.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing, advertising, or any commercial purpose. Your data is never shared with advertisers.

We may share your information with the following service providers solely to operate our Services:

• Anthropic — AI processing for product features
• OpenAI — voice transcription via Whisper API
• Supabase — database hosting and authentication
• Vercel — application hosting and deployment
• RevenueCat — subscription management
• FormSubmit — contact form delivery (lumascor.com/buildmyapp inquiries are delivered to us via email and are not stored in a database by FormSubmit)

We may also share information with law enforcement or government authorities when required by law, or with successor entities in the event of a merger or acquisition.

Custom Client Builds

For custom applications built for individual clients, the same privacy protections apply. Client data is isolated per project, never shared across clients, and never used to train AI models. For clients with specific compliance requirements, we offer dedicated infrastructure and custom hosting arrangements. Data handling terms for custom builds are established during the project scope.

Your Rights

You have the right to:

• Access all data we hold about you
• Correct any inaccurate information
• Request complete deletion of your data at any time
• Export your data
• Cancel your account at any time with no contracts or commitments

To exercise any of these rights, contact us at christina@lumascoraiapp.com.

Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or any third-party tracking scripts. We do not serve advertisements.

Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page. Your continued use of our Services after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy, please contact us at christina@lumascoraiapp.com.

LumaScor LLC  ·  Massachusetts, United States