Effective: at launch · Allegra System SRL · Contact: mihai.ghita@allegras.app
Lumiye is a private journal of the first years with your child, written by you. Our privacy policy is short because our data practices are simple:
We collect nothing.
What that means, concretely
No account. Lumiye has no sign-up, no login, no user profiles.
No servers. Lumiye makes no network connections. Your photos, videos, voice notes, transcripts and words are stored only on your device.
No analytics, no ads, no trackers. Lumiye contains no third-party SDKs.
Voice stays local. Voice notes are transcribed using Apple's on-device speech recognition (on-device-only mode). If your device or language does not support on-device transcription, Lumiye keeps the audio and lets you type — it never sends audio anywhere.
Encryption. Your journal is encrypted on your device (AES-GCM). It is excluded from iCloud and iTunes device backups; the only copy outside your phone is the backup file you export yourself. Media files use iOS complete file protection.
App lock (optional). You can lock Lumiye with Face ID, Touch ID or your phone's passcode. iOS does the check on your device; Lumiye never sees your face, your fingerprint or your passcode. The lock is a door on the app, not extra encryption: what you keep is encrypted on your device either way.
What leaves your phone — only what you choose
Sharing a page: when you mark a moment as shareable and tap Share, Lumiye shows you an exact preview. Only that rendered image leaves your phone, through the iOS share sheet, to the destination you pick.
Backups: you can export an encrypted backup file protected by a password you choose. Where you store it (Files, AirDrop, your own cloud drive) is your decision. We cannot read it and cannot recover the password.
Deletion
Deleting a moment removes it and its media from your device. "Delete everything" erases the entire journal. Uninstalling the app removes all app data. Because we hold nothing, there is nothing for us to delete on any server.
Children
Lumiye is used by parents, not by children. Photos, videos and words about your child are stored only on your own device and are never uploaded, processed or seen by us. Lumiye is not directed at children under 13.
Changes
If a future version ever changes these practices (for example, an optional end-to-end-encrypted sync service), the change will be opt-in, clearly explained in the app, and this policy will be updated before it ships.
The short version: your story is yours. We built Lumiye so that we couldn't read it even if we wanted to.