Lumorie uses end-to-end encryption (e2ee). Everything you upload is encrypted on your device with keys we never receive or hold. We do not collect, store, or process your content for analytics, advertising, or commercial purposes — and architecturally, we cannot.
To protect accounts from abuse, the app uses Apple's App Attest to confirm requests come from a genuine, unmodified app. This produces a device assertion only — it does not identify you or read your content.
We retain encrypted data only as long as your account is active. When you delete your account through the app, we permanently remove from our systems:
Events have a fixed lifetime and their content is deleted after the event's retention window ends.
We do not delete encrypted content you shared with other event participants. That content was decrypted on their devices using event keys we never held; the resulting local copies on their devices remain under their control. This is an inherent property of end-to-end encryption — see Section 15.
Event purchases are delivered immediately and are non-refundable through Lumorie; refunds are handled by the Apple App Store (see Section 10 of our Terms of Service). If Apple grants a refund, we treat it as immediate forced reclamation: we revoke access and permanently delete that event's data from our systems at once, with no grace period and no export window.
You control the content you upload. You may delete content at any time, and we will remove it from our systems. Because content is end-to-end encrypted, copies that other event participants have already decrypted on their own devices stay under their control after you delete them from our systems.
You can export the content you have uploaded at any time from within the app. Because your content is end-to-end encrypted, export happens on your device using keys only you hold.
Purchases are processed by Apple (App Store) or Google (Play). Lumorie does not receive or store your card details. We receive only the transaction confirmation needed to enable your purchase.
We do not share personal data with third parties for marketing or analytics. We rely on third-party cloud storage and authentication providers to operate the service. All user content stored through these providers remains encrypted and inaccessible to them. These providers may have their own terms and privacy policies that apply when using their services.
Lumorie’s role under the GDPR differs based on the type of data:
Under the GDPR you have the right to:
For content uploaded to an event, deletion or access requests should be directed to the event’s owner. They are the controller for that event’s content. Mosbek ApS, as the encrypted hosting provider, has no technical means to identify, decrypt, or selectively remove a participant’s contributions from within an event.
Where the right to erasure (Article 17) conflicts with other event participants’ right to retain their own copies of content shared with them (Article 17(3)(a) — freedom of expression and information), the latter prevails for content that has already been shared.
Lumorie does not use cookies, tracking technologies, or third-party analytics.
We may update this Privacy Policy as needed. Updates take effect once published in the app.
This Privacy Policy is governed by the laws of Denmark. Any disputes shall be resolved by the courts of Denmark.
Lumorie is architected around end-to-end encryption. Some consequences flow from that architecture rather than from policy: