Privacy Policy

1. Introduction

At Lumra ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our secure, group-based media sharing platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, name, password, and profile picture
• Content: Images, videos, GIFs, and other media files you upload
• Group Information: Group names, descriptions, member lists, and group activities
• Communication: Likes, favorites, and other interactions within groups
• Payment Information: Subscription tier, payment method details (processed securely by payment providers)

2.2 Automatically Collected Information

• Device Information: Device type, operating system, browser type, IP address
• Usage Data: Pages visited, features used, time spent on the platform, access times and dates
• Location Data: General location information derived from IP address (not precise GPS location)
• Cookies and Tracking: Authentication tokens, session data, and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your registration and manage your account
• Enable group creation, membership management, and content sharing
• Moderate content using automated systems (AWS Rekognition) to detect inappropriate material
• Process subscription payments and manage billing
• Send you service-related notifications, updates, and support messages
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service
• Analyze usage patterns to improve user experience (aggregated, anonymized data only)

4. Content Moderation and Security

To maintain a safe environment, all uploaded content is automatically analyzed using AWS Rekognition for NSFW (Not Safe For Work) content detection. This process:

• Occurs automatically upon upload
• Does not involve human review unless content is flagged
• Results in content being approved, rejected, or marked as pending
• Does not store detailed analysis results beyond status indicators

We use industry-standard security measures, including encryption in transit and at rest, to protect your data.

5. Data Storage and Security

Your data is stored securely using:

• AWS S3: Media files are stored in secure, encrypted S3 buckets
• PostgreSQL Database: User account data, groups, and metadata stored with encryption at rest
• Encryption: Data encrypted both in transit (HTTPS/TLS) and at rest
• Access Controls: Strict access controls and authentication mechanisms
• Regular Security Audits: Ongoing monitoring and security assessments

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

6.1 Within Your Groups

Content and information you share within a group are visible to all members of that group, as intended by the Service.

6.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating the Service, including:

• AWS (Amazon Web Services) for hosting, storage, and content moderation
• Payment processors for subscription billing
• Email service providers for notifications

These providers are contractually obligated to maintain the confidentiality and security of your information.

6.3 Legal Requirements

We may disclose information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing communications (service-related emails may still be sent)
• Account Settings: Manage privacy preferences through your account settings

To exercise these rights, please contact us at support@lumra.net. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

9. Children's Privacy

Lumra is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@lumra.net