Privacy Policy

Lumi Journal · Last updated 13 August 2026

The short version. Lumi Journal has no accounts and collects no personal information. Your journal lives on your device. Nothing you write is sent anywhere unless you personally ask for a reflection or ask your journal a question — and even then, the entries are read once to write the answer and are never stored on our servers. We don't show ads or sell data. Ever.

Who we are

Lumi Journal ("the app", "we", "us") is published by Firefly Software. Questions? Email fireflysoftware1@gmail.com.

No account, no sign-up

You don't create an account or give us your name, email, or phone number to use Lumi Journal. There is nothing to log into.

What stays on your device

Everything you write stays on your phone, in the app's local storage:

Your daily entries — the mood you pick, the single line you write, any tags you add, and the date.
Any reflections you've generated, and the answers to any questions you have asked your journal.
Your settings (reminder on/off and time, language, app lock, colours).

We cannot see this data. It never leaves your device except in the two cases described next, both of which you start yourself.

Reflections (optional)

Lumi Journal can write you a short reflection on a week, a month or a year, using AI. This feature is optional and off until you ask for it. The first time you use it, we show a consent screen and ask you to agree.

When you tap to generate a reflection:

The entries for that period only (dates, moods, and lines) are sent over an encrypted (HTTPS) connection to our reflection service, which forwards them to our AI provider, Anthropic, to write the reflection text. A weekly reflection sends that week; a yearly one sends that year.
Up to three reflections Lumi has already written you about earlier periods are sent with them, so the new one can tell what is continuing rather than starting from nothing each time. These are the app's own earlier output, not additional entries from your journal.
The reflection is returned to your device and saved there.
What is sent is processed only to write that one reflection. It is not stored on our servers or by us. Our service keeps only a small counter (tied to a random ID, see below) so it can rate-limit requests, and that counter expires automatically.

Asking your journal a question (optional)

You can ask Lumi a free-form question about your own days — for example "what did my best weeks have in common?". This is the one feature that reads across more than a single period, because a question like that cannot be answered from one week.

When you ask a question, your question and up to your last 366 logged days (dates, moods, and lines) are sent over an encrypted connection to the same service, and on to Anthropic, to write the answer.
The answer comes back to your device and is saved there, with the question, so you can read it again. You can delete any question and its answer from the app at any time.
As with reflections, what is sent is used once to write the answer and is not stored on our servers.
The same consent screen covers this, and the app says next to the question field how far back an answer reads.

Anthropic processes these requests to generate the text and does not use them to train its models. See Anthropic's privacy policy at anthropic.com/legal/privacy. Our reflection service is hosted on Cloudflare.

Random install ID

To stop abuse of the reflection service, the app generates a random identifier (a UUID) the first time it runs and stores it on your device. It is sent only with reflection and question requests, purely so the service can count how many requests come from one install. It is not your name, email, or account — there is no account — and it is not linked to your identity or your entries.

Usage analytics

Two separate things, and neither of them ever includes what you write.

Only if you agree: the app uses Google Firebase Analytics to record which screens you open and how long a session lasts. We ask you once, inside the app, and it stays off unless you say yes. You can change your mind at any time in Settings — turning it off also clears the analytics identifier Firebase generated, not just future events. See firebase.google.com/support/privacy.
Always, and anonymous: the app sends plain daily counts of a few events (for example, "a reflection was generated"). These carry no identifier and no device information — just a running tally, so we can tell whether a feature is used at all.

Your entries, moods, tags, reflections and answers are never part of either.

Face ID, Touch ID and the app lock

You can lock the app behind your device's own biometrics or passcode. That check is performed by your phone; the app is only told whether it succeeded. We never see or store your face, fingerprint or passcode.

Purchases

Some features are a paid subscription. Payments are handled entirely by the Apple App Store or Google Play and managed through our subscriptions provider, RevenueCat. We never see or receive your credit card or payment details. See revenuecat.com/privacy.

What we do NOT do

No advertising and no ad networks.
No analytics that includes anything you wrote.
No selling or sharing of your data — there is nothing to sell.
No location, contacts, photos, or health data access.

Keeping and deleting your data

Because your journal is stored locally, you are in control. From Settings you can export everything as CSV files — one for your days, one for the reflections Lumi wrote you — and import them back on another phone. Inside the app you can delete an individual day, or an individual question and its answer. Deleting the app removes all local data from your device. Reflection and question requests leave nothing behind on our side beyond the temporary rate-limit counter, which expires on its own.

Children

Lumi Journal is not directed to children under 13 (or under 16 where applicable), and we do not knowingly collect information from them.

Your rights

Depending on where you live (for example under GDPR or CCPA), you may have rights to access or delete personal data a company holds about you. Because we do not hold personal data that identifies you on our servers, there is generally nothing for us to retrieve or erase — your data is on your device and under your control. If you have questions, contact us at the email above.

Changes to this policy

If we change this policy, we'll update the date at the top and, for meaningful changes, note it in the app or its store listing.