Privacy Policy

LumiNota is committed to protecting your privacy. This policy explains what information we collect when you use our website and app, why we collect it, who helps us process it, and the choices you have. By using LumiNota, you agree to the practices described here.

• ✦Account information: your email address, used to sign in via magic link or email and password
• ✦Optional names: a display name and, if you choose, your birth name
• ✦Birth details: your birth date, and optionally your birth time and birthplace
• ✦Journal content: journal entries, tags, and photos you upload
• ✦Ask Your Chart questions: the questions you ask. We keep a count of questions used each month; the question and answer text are not saved to your account
• ✦Tarot and reflections: your card pulls and any reflections you write
• ✦Manifestation content: manifest cards, images, and messages in the manifestation chat
• ✦Future letters: letters you write to your future self
• ✦Community content: Echoes (such as angel-number posts and photos), hearts, and blog comments, only when you choose to post them. Echoes and their photos are visible to other visitors
• ✦Email sign-up: an email address you give us to sign up for communications from LumiNota

• ✦Location from your birthplace: map coordinates and the birth time zone, worked out from the birthplace you enter
• ✦Chart information: your natal chart, calculated from your birth details
• ✦Device time zone: used so readings match your local day
• ✦Usage and activity: pages viewed and actions taken in the app, such as which features you open and where you started
• ✦Account identifier: an internal account ID assigned to you by LumiNota
• ✦Subscription status: your plan and billing status as reported by our payment processor
• ✦Technical information: ordinary technical and network information (such as IP address, browser and device type) collected by the service providers that run and measure the service

• ✦To create and manage your account
• ✦To calculate your chart and generate personalized content you request
• ✦To store your journal, letters, tarot pulls and other content so you can return to it
• ✦To send service emails (such as sign-in links and daily readings you opt into)
• ✦To process subscriptions and manage access to paid features
• ✦To understand how LumiNota is used and improve the product
• ✦To display community content only when you explicitly choose to share it

Some LumiNota features use third-party AI model providers to generate personalized content. When you use one of these features, the information needed for that feature may be sent to the provider for processing, including:

• ✦calculated chart placements and current sky information
• ✦your Ask Your Chart question and relevant earlier messages in that conversation
• ✦manifestation chat messages and content needed to generate the requested response or image
• ✦the tarot cards you drew and their orientation
• ✦limited future-letter context (such as dates, delivery type, sign and streak count) for generated delivery notes

Under the current implementation, your journal entries and journal photos are not sent to AI providers, and the text of your Future Letters is not sent to AI providers.

We rely on the following providers to run LumiNota. They receive information only to provide their service to us:

• ✦Lovable / Lovable Cloud: hosting, database, sign-in and file storage (built on Supabase)
• ✦AI model providers through Lovable (including OpenAI and Google models): personalized readings, Ask Your Chart, manifestation features and read-aloud audio
• ✦Anthropic: tarot readings and future-letter delivery notes
• ✦Stripe: payment processing and subscription management
• ✦Google Analytics: measuring app usage and product performance
• ✦Resend: sending emails
• ✦OpenStreetMap (Nominatim): looking up coordinates for the birthplace you enter
• ✦Google Fonts: delivering the fonts used on our pages, which means your browser connects to Google

We use analytics to understand how LumiNota is used and how the product is performing. For signed-in users, analytics events are linked to your internal LumiNota account ID and plan status, and are sent to Google Analytics and stored in our own database. We do not include your birth details, chart placements, journal content, Ask questions or other personal writing in analytics events.

If you upgrade, payment is handled by Stripe. You enter card details directly with Stripe; LumiNota does not receive or store your complete card details. We receive your subscription status and related identifiers so we can manage access.

LumiNota does not sell your personal information and does not use your personal information for third-party advertising.

Data sent between your device and LumiNota is encrypted in transit using HTTPS. We strip location metadata (EXIF data) from uploaded photos before storage and use reasonable technical safeguards. No internet service can guarantee complete security. If you have concerns, contact us.

You own the content you create on LumiNota. From your Profile page you can export certain LumiNota data, currently your profile, journal entries, Echoes, tarot pulls and streaks. If you are located in the European Union or California, you may have additional rights regarding your personal data. Contact us to exercise them.

You can permanently delete your account yourself from your Profile page or at luminota.io/delete-account. Deletion happens immediately once you confirm.

This removes your account and profile, birth details and chart, readings, journal entries, tarot pulls, letters, uploaded images, community posts, hearts and comments, and usage records linked to your account. Any active subscription is canceled immediately.

Payment processors such as Stripe may retain transaction and billing records where required for legitimate financial, tax, fraud-prevention, chargeback or legal purposes. Community reports you submitted may be kept for moderation with your identity removed.

If you can't access your account, email support@luminota.io from your account email. We verify account ownership before processing manual requests. Verified manual deletion requests are processed within 7 days.

For privacy questions or data requests, contact us at: hello@luminota.io