LumiNote Privacy Policy

Last updated: April 14, 2026

1. What We Collect

LumiNote collects only the data necessary to provide its core functionality:

• Account information: Email address (for login) or Google profile (name, email) when using Google Sign-In.
• User-generated content: Text highlights, notes, AI summaries, screenshots, and moodboard data that you explicitly create.
• Page metadata: URLs and page titles of web pages where you create marks (not your full browsing history).
• Usage counters: Daily AI usage count for quota management.

2. How We Use Your Data

• Cloud sync: Your memories and moodboards are synced across devices via our Cloudflare-hosted backend when you are logged in.
• AI features: Text and image data are sent to third-party AI providers (via our server-side proxy) only when you explicitly trigger AI summarization. We do not send data to AI providers without your action.
• Authentication: Email/password credentials are hashed (PBKDF2) before storage. We never store plaintext passwords.

3. Data Storage

• Local storage: All data is stored locally in your browser via chrome.storage.local.
• Cloud storage: When logged in, data is synced to Cloudflare D1 (database) and R2 (images), hosted in Cloudflare's global network.
• No third-party analytics: We do not use Google Analytics, Facebook Pixel, or any third-party tracking services.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• AI providers: When you trigger AI features, your selected text/image is processed through our server-side proxy. The AI provider does not receive your identity or account information.
• Legal requirements: We may disclose data if required by law.

5. Your Rights

• Export: You can export all your data as JSON or Markdown from Settings.
• Deletion: You can delete individual memories, or sign out to remove all local data. Contact us to request server-side data deletion.
• Access: All your data is visible in the LumiNote notebook interface.

6. Data Retention

Your data is retained as long as your account is active. Deleted items are moved to a local trash (15-day recovery window) and permanently removed from the server after 30 days. If you delete your account, all server-side data is removed.

7. Children's Privacy

LumiNote is not intended for children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

For privacy questions or data deletion requests, contact: chrisluk232425@gmail.com