← Back to Lumm

Lumm Privacy Policy

Last updated: July 24, 2026

Lumm is a two-person app: it lets you and one paired partner send each other a wordless "I'm thinking of you" check-in (a pulse). This policy explains what data that requires and how it's used.

Data we collect

Anonymous account ID. When you open Lumm, Firebase Authentication creates an anonymous account and assigns it a random ID. This ID is not linked to your name, email, phone number, or any other personally identifying information — we never ask for those.

Pairing data. When you create or join a pair, Lumm stores the two anonymous account IDs of you and your partner together, plus the timestamp and count of pulses sent between you. This is what makes the pulse counter and sync feature work.

Push notification token. Lumm registers a Firebase Cloud Messaging (FCM) token for your device so a pulse can reach your partner's phone when their app isn't open. This token is stored against your anonymous account ID.

Online presence. While the app is open, Lumm briefly marks your anonymous account as "online" (via Firebase Realtime Database) so the app knows whether to sync a pulse live or send a push notification instead. This presence flag is not a history or log — it reflects only whether the app is currently open.

What we don't collect

Lumm has no chat, no text messages, no photos, no location data, no contacts access, and no analytics/advertising SDKs. There is nothing to collect beyond the pairing and pulse-timing data described above.

How data is used

All data listed above exists solely to operate the core feature: letting two paired devices exchange a pulse. It is not used for advertising, not sold, and not shared with any third party except our infrastructure provider (Google Firebase, which stores and processes the data on our behalf under Google's own data processing terms).

Data retention and deletion

Your pairing and pulse data persists as long as your pair remains active. To delete your data, uninstall the app and contact us (below) to request removal of your anonymous account's records from our Firebase project — since there's no login, we identify your data by device/account ID that you provide when requesting deletion.

Children's privacy

Lumm is not directed at children and we do not knowingly collect data from anyone under 13.

Changes to this policy

If this policy changes, the "Last updated" date above will change and the new version will be posted at this same URL.

Contact

Questions about this policy or data deletion requests:
appsbyasfer@gmail.com