Privacy Policy - Lumical

Privacy Policy

Last Updated: November 18, 2025

Your Privacy Matters

Lumical is designed with privacy at its core. Your meeting history stays on your device. When you scan a capture, the image is securely processed in the cloud using AI to extract meeting details, then immediately deleted. We collect minimal information and never sell your data.

At a Glance

What We Collect:

  • Meeting details you scan (stored locally on your device)
  • Images you scan (processed via third-party AI, then immediately deleted)
  • Purchase history (for subscription management, not linked to you)

What We DON'T Do:

  • We don't collect your email address or personal identifiers
  • We don't track you across apps or websites
  • We don't link any data to your identity
  • We don't sell your data to anyone
  • We don't require account creation

1. Information We Collect

Data You Create

When you use Lumical to scan meeting invites, posters, or flyers:

  • Meeting Details: Title, location, date, time, notes, and any other information you scan or manually enter
  • Photos: Images you scan are sent to our secure backend and a third-party AI provider (Google Gemini) to extract meeting details. Images are immediately deleted after processing and are not stored or used to train AI models.

Your extracted meeting data is stored locally on your device using SwiftData. We do not have access to this stored information. Images are only transmitted during processing and are not retained.

Subscription Data

If you purchase Lumical Pro through Apple's In-App Purchase system:

  • RevenueCat receives an anonymous user ID to manage your subscription status
  • This ID is not linked to your name, email, or any personal information
  • Apple processes all payment information — we never see your credit card details

2. How We Use Your Information

We use the limited information we collect only for these purposes:

  • To provide the service: Processing images through our OCR backend to extract meeting information
  • To manage subscriptions: Verifying your Pro subscription status through RevenueCat

We will never:

  • Sell your data to third parties
  • Use your data for advertising
  • Share your data with third parties (except as noted below)
  • Track you across apps or websites

3. Where Your Data Is Stored

On Your Device

All your meeting data is stored locally on your iPhone using SwiftData:

  • We cannot access this data — it's entirely yours
  • Your data is protected by iOS encryption and your device passcode
  • If you delete the app, all local data is removed

In Your Apple Calendar & Reminders

When you sync meetings to Apple Calendar or Reminders:

  • Meeting details are stored in your iCloud account (subject to Apple's privacy policy)
  • We do not have access to your calendar or reminders
  • You control what gets synced and can delete it anytime

What We Store (Very Little)

The only data we store on our servers is:

  • Subscription status (anonymous user ID only, via RevenueCat)

4. Image Processing & OCR

When you scan a meeting invite using the camera:

  1. 1. You take a photo of a meeting invite using your camera
  2. 2. The photo is sent securely (via HTTPS) to our backend server, along with contextual information (your timezone, locale, current date) to help with extraction
  3. 3. Our backend forwards the image to Google Gemini, a third-party AI service, which extracts text and meeting details (date, time, location, title, etc.)
  4. 4. The extracted meeting details are sent back to your device and stored locally
  5. 5. The original image is immediately deleted from both our servers and Google's systems — it is not stored or used to train AI models

Important:

Before any image processing occurs, you must provide explicit consent within the app. Images are processed in real-time and immediately deleted. We do not store your photos or use them for any purpose other than extracting meeting details. Google does not use your images to train their general AI models.

5. Third-Party Services

Lumical uses the following third-party services:

Google Gemini (AI Processing)

When you scan a meeting invite, we use Google's Gemini AI to extract meeting details from images.

  • Your scanned images and context (locale, timezone, date) are sent to Google Gemini for AI-powered OCR and information extraction
  • Images are processed in real-time and immediately deleted — Google does not store your images or use them to train their general AI models
  • This processing only happens after you provide explicit consent in the app
  • Learn more: Google Gemini API Terms

RevenueCat

We use RevenueCat to manage in-app subscriptions.

  • RevenueCat receives an anonymous user ID to verify your subscription status
  • Your purchase history is stored by Apple, not by us
  • Learn more: RevenueCat Privacy Policy

Apple Calendar & Reminders

When you sync meetings to your calendar or reminders:

  • Meeting data is stored in your iCloud account (subject to Apple's terms)
  • We only access your calendar/reminders with explicit permission
  • Learn more: Apple Privacy Policy

Apple In-App Purchase

All payments are processed through Apple's In-App Purchase system:

  • We never see your payment information
  • All billing is managed by Apple through your Apple ID

6. Data Security

We take reasonable measures to protect your information:

  • All data stored on your device is protected by iOS encryption
  • Communication with our OCR backend uses industry-standard HTTPS encryption
  • Images sent to our OCR service are immediately deleted after processing
  • We use secure, privacy-focused analytics and subscription services

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Delete Your Data

Since all meeting data is stored locally on your device:

  • You can delete individual meetings within the app
  • Deleting the app will remove all local data permanently

Control Calendar Access

You have full control over calendar and reminder permissions:

  • Manage permissions in iOS Settings → Lumical
  • Lumical will continue to work without calendar access — you just won't be able to sync meetings

Cancel Subscription

You can cancel your Lumical Pro subscription anytime:

  • Go to iOS Settings → [Your Name] → Subscriptions
  • Select Lumical and tap "Cancel Subscription"

8. Children's Privacy

Lumical is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at developer@arunavoray.dev.

9. International Data Transfers

Since almost all data stays on your device, international data transfers are minimal. The limited data we collect (anonymous analytics and subscription status) may be processed on servers located in different countries. By using Lumical, you consent to this limited data transfer.

10. Data Retention

Meeting data: Stored locally on your device until you delete it

Scanned images: Immediately deleted after OCR processing (not retained)

Subscription data: Retained by RevenueCat as long as your subscription is active, plus reasonable retention period for financial records

11. California Privacy Rights (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the personal information we collect
  • Right to Delete: You can request deletion of your personal information
  • Right to Opt-Out: We do not sell personal information, so there is nothing to opt out of

To exercise these rights, contact us at developer@arunavoray.dev. Note: Because we collect minimal personal information (mostly anonymous data), there may be little information to provide or delete.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Right of Access: You can request a copy of your personal data
  • Right to Rectification: You can correct inaccurate data
  • Right to Erasure: You can request deletion of your data
  • Right to Object: You can object to our processing of your data
  • Right to Data Portability: You can request your data in a machine-readable format

To exercise these rights, contact us at developer@arunavoray.dev.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

  • We will update the "Last Updated" date at the top
  • For significant changes, we will notify you through the app or via email (if we have it)
  • Your continued use of Lumical after changes means you accept the updated policy

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

We typically respond to inquiries within 48 hours.

Privacy Summary

Your privacy is our priority. Your meeting history stays on your device. When you scan an invite, we process the image using third-party AI (Google Gemini) to extract details, then immediately delete it. We collect minimal data only for subscription management. No tracking. No selling data. No ads. Questions? Email us at developer@arunavoray.dev.

Last Updated: November 18, 2025