PRIVACY
POLICY

What is Lumeniro

Lumeniro ("we", "us", "our") is a productivity software application that helps individuals capture thoughts, track tasks and goals, and compound their thinking over time through persistent AI memory and active challenge — a new category called Compounding Intelligence. Lumeniro is categorised as a personal productivity tool in the same category as AI assistants, task managers, and knowledge tools.

Lumeniro is a product of PrioritAi Labs Inc., a company incorporated in Ontario, Canada. PrioritAi Labs Inc. is subject to Canadian federal privacy law (PIPEDA — the Personal Information Protection and Electronic Documents Act) and applicable provincial privacy legislation.

Information We Collect

Information you provide directly

• Account registration data: your name (optional) and email address
• Conversation content: text messages you send to Lumeniro
• Voice recordings: audio you record using the voice input feature (transcribed immediately and not stored as raw audio)
• Goals and tasks you set within the app

Information generated automatically

• Session data: timestamps, session counts, last-seen dates
• Pattern signals: recurring themes detected across your sessions, used solely to personalise your experience — never shared or sold
• Task and goal progress: tracked across sessions to power accountability features

Information we do NOT collect

• We do not use advertising tracking, third-party analytics pixels, or marketing cookies
• We do not collect health or medical information
• We do not store raw voice audio beyond transcription

How We Use Your Information

Your data is used exclusively to:

• Operate and deliver the Lumeniro service to you
• Provide AI-powered responses personalised to your conversation history
• Generate your weekly digest, task list, and goal tracking
• Send you onboarding and product emails (unsubscribe at any time)
• Authenticate your account and keep your data secure
• Improve the service in aggregate, anonymised form only — never your individual data

We will never use your conversation content to train AI models without your explicit, separate consent. We will never sell your data. Ever.

Third-Party Services

OpenAI (openai.com)

Your messages are sent to OpenAI's API to generate AI responses. As of the date of this policy, OpenAI does not use API data to train models by default. Review their privacy policy at openai.com/policies/privacy-policy.

Supabase (supabase.com)

Your account data, conversation memories, goals, and tasks are stored in a Supabase-hosted Postgres database. Supabase is SOC 2 Type II certified. Data is stored on servers in the United States.

Render (render.com)

Lumeniro's server application is hosted on Render. Render processes requests but does not store your personal data.

Resend (resend.com)

We use Resend to deliver transactional and onboarding emails. Your email address is shared with Resend solely for delivery purposes.

Data Retention

We retain your personal information for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing us. We will action deletion requests within 30 days.

Your Rights Under PIPEDA

As a user, you have the right to:

• Access — request a copy of all personal information we hold about you
• Correction — request that inaccurate information be corrected
• Deletion — request that your account and all data be permanently deleted
• Withdrawal of consent — withdraw consent at any time, resulting in account closure
• Challenge compliance — file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

Data Security

• Row Level Security (RLS) at the database level — your data is isolated from all other users
• HTTPS encryption for all data in transit
• Supabase authentication with secure httpOnly cookies
• No raw passwords stored — authentication handled by Supabase Auth

Children's Privacy

Lumeniro is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us immediately.

Cross-Border Data Transfers

Your data is stored and processed in the United States (Supabase, OpenAI, Render, Resend). By using Lumeniro, you consent to this transfer.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before changes take effect. Continued use after the effective date constitutes acceptance.