The short version: what you write in Lumila Rise is encrypted on your device before it's stored anywhere. We built the app so that we — and anyone else without your passphrase, recovery code, or username and password — cannot read it. We don't sell data, show ads, or share your entries with anyone.
The rest of this page explains that in full, including what limited information we do handle and why.
1. What this policy covers
This policy describes how Lumila Rise ("the app," "we," "us") handles information when you use the app. It applies to the app itself and to Cloud Backup, an optional feature you can turn on or off in Settings.
2. Information you create in the app
Everything you enter — Timeline entries, expenses, documents, calendar events, contacts, notes, and any photos, videos, or scans you attach — is stored on your device, encrypted, before it's written to disk. If you turn on Cloud Backup, that same encrypted data is uploaded to our cloud storage provider exactly as encrypted — we never see it in readable form, on your device or on our servers.
The encryption key is derived from your passphrase, your recovery code, or your username and password (whichever you use to unlock the app). We do not store your passphrase, recovery code, username, or password themselves — only irreversible, one-way derivations of them that let the app confirm you have the right one and locate your own backup. This means:
- We cannot read your entries, attachments, or notes.
- We cannot reset your passphrase for you — if you lose your passphrase, recovery code, and any username/password login, that data cannot be recovered by us or anyone else.
- If we ever receive a legal request for your data, we can only provide what we actually have: encrypted data we do not have the technical ability to decrypt.
If a photo or video you attach contains location or other metadata from your device's camera, that metadata is included in the file as part of the encrypted attachment. We don't read, extract, or use it — but it's worth knowing it travels with the file if you ever export or share an attachment outside the app.
3. Information about your device and account
Beyond what you enter, the app keeps a small amount of local, non-sensitive technical information on your device — for example, whether Cloud Backup is turned on, when your last backup ran, and app settings like tab order and hidden categories. This stays on your device and isn't something we can see.
4. Cloud storage
If Cloud Backup is on, your encrypted data is stored with our cloud storage provider (Google Firebase). They store the encrypted bytes on our behalf under a standard data processing agreement; they don't have your encryption key and can't read your data either. We don't use any other third-party analytics, advertising, or tracking services in the app.
5. What we don't do
- We don't sell or rent your information to anyone.
- We don't show ads or use advertising trackers.
- We don't share your entries with third parties, except our cloud storage provider as described above, and only as encrypted data they cannot read.
- We don't use your data to train any AI models.
6. Your choices and rights
Turning Cloud Backup off
You can turn Cloud Backup off at any time in Settings. This stops future backups; it does not automatically delete data already uploaded.
Deleting individual entries
You can delete any entry directly in the app at any time.
Deleting your account and cloud data
To request full deletion of your backed-up data, email us at lumilariseapp@gmail.com. Because we can't read your data or match it to your identity beyond the technical sync location it's stored under, we'll ask you to confirm your recovery code or username so we can locate and delete the right backup.
7. Data retention
Data stored only on your device stays there until you delete it or delete the app. Cloud-backed-up data stays with our storage provider until you request deletion (see above) or until it's replaced by a newer backup from one of your devices.
8. Security
In addition to encryption, the app supports Face ID/Touch ID and passphrase protection to unlock the app itself, and a Quick Exit feature to leave the app immediately. No method of storage or transmission is 100% secure, but the app is designed so that even in the event of a breach of our cloud storage, your entries remain encrypted and unreadable without your key.
9. Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.
10. Contact us
Questions about this policy or your data can be sent to lumilariseapp@gmail.com.