Legal

Privacy Policy

Last updated: August 8, 2026

This Privacy Policy explains what information LUMORA AI ("we", "us") collects when you use our website and app, and how we use it.

Information we collect

Account information — name, email address, and password when you register.
Content you create — prompts, uploads, and generated images, video, audio, and text.
Usage data — pages visited, features used, and device/browser information.
Billing information — handled by our payment processor; we do not store full card numbers.
A device identifier — a random, non-personally-identifying value we place in a cookie on your first visit, used solely to enforce a one-time welcome bonus per device and prevent abuse of that bonus. It does not track you across other websites.
Bank account details — if you request a withdrawal, we collect and verify a bank account number and bank name through our payment processor to send you the funds.
Boost proof screenshots — if you complete a Boost task, the screenshot you submit as proof is stored and reviewed by an automated system to verify task completion.

How we use it

To provide, operate, and improve the LUMORA AI platform.
To route your prompts to the appropriate AI models and return results.
To communicate with you about your account, updates, and (if you opt in) product news.
To detect abuse, enforce our Terms of Service, and keep the platform safe — including enforcing the one-welcome-bonus-per-device rule and verifying Boost task submissions.
To process withdrawal requests and send funds to your verified bank account.

Data storage & security

We use industry-standard practices to protect your data, including encryption in transit and access controls on our infrastructure. No system is perfectly secure, and we'll notify affected users in the event of a breach as required by law.

Cookies

We use a small number of first-party cookies: one to keep you signed in, and one long-lived device identifier used only to enforce the one-time welcome bonus per device described above. We don't use third-party advertising or tracking cookies. You can control cookies through your browser settings, though blocking the device-identifier cookie may affect eligibility for the welcome bonus.

Third-party services

We rely on third-party infrastructure to operate LUMORA AI, and each only receives the data necessary to perform its function:

Anthropic (Claude) — powers Story Studio's text generation.
ElevenLabs — powers Voice Studio's speech generation, cloning, and dubbing.
Google (Gemini & Veo) — powers Image, Video, and Music Studio generation.
Paystack — processes credit purchases and sends withdrawal payouts to your verified bank account; we never receive your full card number.
Resend — delivers account emails (email verification, password reset).

Whatever you type into a prompt or upload for a generation is sent to the relevant provider above to produce your result — that's the only way the generation can happen. We don't send it anywhere beyond what's needed for that.

Your rights

You can correct your profile information or delete your account entirely at any time from Settings. A self-serve export of your account data isn't built yet — email us and we'll put it together manually in the meantime. Depending on where you live, you may have additional rights under laws like GDPR or CCPA.

Changes to this policy

We'll update this page if our practices change, and update the date above accordingly.

Contact us

Questions about this policy? Email privacy@lumoraai.com or use our contact page.

Note: LUMORA AI is currently in early development. This policy describes our intended practices and has not yet been reviewed by legal counsel — it should be finalized (including naming the operating legal entity and a registered contact address, both still placeholders here) before real user data is collected in production.