Luméa AI Privacy Policy

We may process account and profile information, your email address, workspace data, subscription and credit records, generation history, prompts, media you upload, your Creators and their reference images, and the technical data needed to operate the service.

Payments are handled by third-party payment providers. Luméa never stores full card numbers or CVC codes. Certain transaction references and metadata returned by the payment provider — such as an order reference, status and amount — may be retained for accounting and support purposes.

This data is used to provide the service, produce the content you request, manage your account, subscription and credits, prevent fraud, and maintain the reliability of the product.

We rely on external providers to run the service. Only the data necessary for the requested operation is shared with each provider — for example, a generation request is sent only to the AI provider handling that generation, and payment details only to the payment provider.

• Supabase — database, authentication and file storage.
• fal.ai — the AI models that produce your generations (receives the prompt, references and media needed for the specific generation you request).
• GeniusPay — payment processing for subscriptions, prepaid plan access and credit purchases (card and, where offered, Mobile Money).
• Hostinger — application hosting.

Some of these providers may process data outside your own country. Where that happens, we choose providers that apply appropriate contractual and technical safeguards for that transfer.

Media you upload may be transmitted to the AI providers necessary to carry out a generation you requested.

Data may be kept for as long as necessary to operate the service, keep it secure, and meet applicable legal obligations. When you delete your account, your profile and workspace records are removed; some payment and transaction records may be kept longer where required for accounting or legal obligations.

Luméa applies reasonable technical measures to protect your data. No system can guarantee absolute security.

Luméa does not currently use analytics or advertising tracking (such as Google Analytics or ad pixels). The service uses only the essential cookies required for authentication and to keep you signed in. If that changes, this page will be updated and, where required, we will ask for your consent. See our Cookie Policy for detail.

We process your data to perform our contract with you (providing the account, generations, credits and billing you request), to comply with legal obligations (such as accounting and tax records), and, in limited cases, on the basis of our legitimate interest in keeping the service secure and reliable.

Depending on where you live, you may have the right to access the data we hold about you, correct it, request its deletion, receive a copy in a portable format, restrict or object to certain processing, and lodge a complaint with your local data protection authority. Your account settings already let you delete your account and its associated data directly (Settings → Security → Delete account). For any other request — including access or a data export — use our contact page (category: Privacy / my data). We aim to respond within one month, or as required by applicable law.

Luméa is not directed at, and may not be used by, anyone under 18. We do not knowingly collect data from a minor; if we become aware that we have, we will delete it.

See also our Terms of Service, AI Usage Policy and Acceptable Use Policy.

This policy may be updated over time. The applicable version is shown at the top of this page.