Legal

Privacy Policy

1. Who we are

Lummi (“Lummi,” “we,” “us,” or “our”) is an iOS app that helps you spend less time in distracting apps and more time reading. This Privacy Policy explains what information the Lummi app and this website (ilummi.app) collect, how we use it, and the choices you have. It applies to the Lummi iOS application and the Lummi website.

2. Information we collect

a. Screen Time & app-usage data (stays on your device)

With your permission, Lummi uses Apple's Screen Time frameworks (Family Controls, Device Activity, and Managed Settings) to block the apps you choose and to measure your usage against your weekly goal. Apple keeps this data on your device and only provides Lummi with opaque, privacy-preserving tokens — we do not receive the list of apps you use, your messages, or your browsing. Usage totals, pickups, and your goal progress are calculated on your device and stored in a private app container. This information is not transmitted to us or any third party.

b. Your settings and reading data (stored locally)

Your weekly goal, blocking schedules, selected apps, book preferences, reading progress, highlights, and notes are stored locally on your device. This data stays on your device and is removed if you delete the app.

c. Book library requests

When you browse or download a book in Lummi's reader, your device contacts our book-catalog service to fetch titles and book files. These requests may include standard technical information such as your IP address, device/OS type, and any search terms you enter. Lummi does not require an account to read, and these requests are not linked to your identity. The books offered are primarily public-domain works (for example, titles from Project Gutenberg).

d. Subscriptions and purchases

Lummi is offered as a paid subscription sold through the Apple App Store. Apple processes all payments under Apple's terms and privacy policy; we never receive or store your credit-card number or full billing details. We receive from Apple the limited information needed to confirm your subscription status (such as a transaction identifier and whether your subscription is active).

e. In-app analytics & approximate (country-level) location

We use Amplitude to understand how people move through the app — for example, which onboarding steps they reach and which features they use — so we can improve it. For this we send Amplitude a random per-install identifier, your app version, and product-interaction events (such as “onboarding step viewed” or “book opened”). This identifier is not tied to your name, your email, or your App Store account. We do not send your screen-time data, the apps you use, your reading content, or any personal contact details through analytics.

As with any internet request, your device's IP address is visible to Amplitude when these events are sent, and Amplitude uses it to derive an approximate, country-level location — what Apple's privacy labels call coarse location. We use this only to understand, in aggregate, which countries Lummi is used in. We do not collect GPS or precise location. This approximate location is keyed to the random per-install identifier above for analytics only — it is never used to track you across other companies' apps or websites, and never for advertising.

f. Diagnostics

If you opt in through iOS Settings, Apple may share aggregate crash and performance diagnostics with us to help fix bugs. Lummi does not embed third-party advertising SDKs or trackers that follow you across other apps.

g. Email & reading-profile names you choose to give us

Lummi works without an account, but in a few optional places you can give us your email address so we can reach you. This is the only personal information we store on our own servers, and only if you submit it:

Why we collect it: solely to email you about the specific thing you asked to be notified about. We do not use these emails for unrelated marketing, and we don't sell or rent them.

Where it's stored and who can see it: these signups are stored in our database (Amazon DynamoDB) hosted on Amazon Web Services. When a new signup arrives, our system sends an internal email notification to the Lummi team through Amazon Simple Notification Service (Amazon SNS) so we know someone is waiting. Only the Lummi team can access this list.

Retention & deletion: we keep these signups until the relevant feature launches and we've contacted you, or until you ask us to remove you — whichever comes first. You can request access to, or deletion of, your email and associated signup at any time by emailing hello@ilummi.app, and we'll delete it promptly.

3. How we use information

4. What we do not do

5. Apple Screen Time & Family Controls

Lummi's blocking features rely on Apple's Family Controls entitlement. Data accessed through these frameworks is governed by Apple and remains on your device. You can revoke Lummi's Screen Time permission at any time in iOS Settings → Screen Time, which disables blocking and usage measurement.

6. Third-party services

We rely on a small number of service providers, strictly to run the app:

We do not share your personal information with these providers for their own marketing.

7. Data retention

Data stored on your device remains until you delete it or uninstall the app. Server logs associated with book-catalog requests are retained only for a limited period for security and operational purposes and are not used to build a profile of you. Waitlist and physical-book-interest signups (your email and any selected reading-profile names) are kept until the relevant feature launches and we've contacted you, or until you ask us to delete them by emailing hello@ilummi.app.

8. Security

We use industry-standard safeguards, including encryption in transit (HTTPS), to protect information. No method of transmission or storage is completely secure, but keeping the most sensitive data on your device significantly reduces risk.

9. Children's privacy

Lummi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Your rights and choices

Because most of your data lives on your device, you control it directly: adjust or clear your settings in the app, manage Screen Time permission in iOS Settings, and delete the app to remove on-device data. Depending on where you live (for example, the EEA/UK under GDPR or California under the CCPA/CPRA), you may have rights to access, correct, or delete personal information we hold, and to object to certain processing. For users in the EEA/UK, we rely on our legitimate interest in understanding and improving the app as the lawful basis for product analytics and the approximate, country-level location derived from your IP address; you can object to this at any time by contacting us. To exercise any of these rights, email us at the address below. We do not sell personal information.

11. International users

Lummi is operated from, and our service providers may process data in, the United States. By using Lummi you understand your information may be processed in the United States and other countries, which may have different data-protection laws than your own.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the “Last updated” date above and, for material changes, provide a more prominent notice. Continued use of Lummi after an update means you accept the revised policy.

13. Contact us

Questions about privacy or this policy, or want us to delete your data? Email hello@ilummi.app.