Privacy Policy — Luma + Sol
Effective date: July 14, 2026 Last updated: July 14, 2026
Luma + Sol ("the app," "we," "us," or "our") is a private app for two partners to tend a shared "sky" that grows with your interactions. This policy explains what we collect, why, how it is protected, and the choices you have. The app is published by its individual maker(s), not a registered company.
If you have any questions, contact us at lumasolapp@gmail.com.
The short version
Your sky is private to the two of you. We collect the minimum needed to run your account, pair you with your partner, sync your shared content between your two devices, and send the notifications you enable. We do not sell your data, we do not show ads, and we do not use your relationship content for advertising or profiling. Only you and your paired partner can see your stars, notes, moods, and photos.
Who is responsible for your data
Luma + Sol is operated by its individual developer(s). For any privacy request — access, correction, deletion, or questions — email lumasolapp@gmail.com and we will respond within a reasonable time.
We use Google Firebase (Authentication, Cloud Firestore, Cloud Functions, and Cloud Messaging) as our backend service provider ("processor") to store data and deliver features. Firebase processes data on our behalf under Google's terms; see Google's privacy documentation for how their infrastructure handles data.
Information we collect
We only collect what the app needs to function.
Account information. When you sign up we collect your email address and a password (the password is handled and stored by Firebase Authentication; we never see or store it in plain text). You may also choose a display name. If you use guest / anonymous sign-in, no email is collected, but the account is tied to an anonymous identifier on your device.
Pairing information. To connect you with your partner we generate short invite codes and store which two accounts belong to a couple.
Your shared content. Content you create in the app is stored so it can sync to your partner's device, including: stars and star points, notes and messages, mood entries, answers to questions and games, "Tonight's Star" and This-or-That selections, doodles, photos you add to the Telescope, character/profile choices, and other in-app activity that makes up your shared sky.
Device notification tokens. If you enable notifications, we store your device's push token (Firebase Cloud Messaging) so we can deliver pulses and reminders to you and your partner. You can turn notifications off at any time.
Purchase information. If you buy Stardust or a Supernova subscription, the purchase is processed by Apple's App Store (and, in the future, Google Play). We receive a transaction receipt which our server verifies with Apple to grant your purchase. We do not receive or store your full payment card number — the app store handles payment. We store a record that a transaction was applied (to prevent double-granting) and your premium status.
Basic technical data. Like most apps, our backend may process limited technical information necessary for security and reliability (for example, timestamps and identifiers associated with your requests).
We do not knowingly collect precise location, contacts, biometric data, or health data, and we do not use third-party advertising or analytics trackers.
How we use your information
We use the information above only to:
- create and secure your account and sign you in;
- pair you with your partner and sync your shared sky between your two devices;
- deliver notifications you have enabled (pulses, reminders);
- process and validate in-app purchases and subscriptions;
- operate, maintain, debug, and protect the app against abuse; and
- respond to your support requests.
We do not use your relationship content to build advertising profiles, and we do not sell or rent your personal information to anyone.
How your information is shared
With your partner. The whole point of the app is to share your sky with the one person you pair with. Content you create is visible to your paired partner.
With our service providers. We share data with Google Firebase solely to host and operate the app, and with Apple (and later Google) to process purchases. These providers act on our instructions.
For legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users or the app.
We do not share your data with advertisers, data brokers, or unrelated third parties.
How your data is protected
Access to a couple's data is restricted by server-side security rules so that only the two paired members can read or write it; everything else is denied by default. Passwords are managed by Firebase Authentication and never stored by us in plain text. Purchases are verified server-side so a tampered client cannot grant itself premium or currency. Data in transit is encrypted (HTTPS/TLS), and Firebase encrypts data at rest. No system is perfectly secure, but we design the app to keep your intimate content private to the two of you.
Data retention
We keep your account and shared content for as long as your account exists so the app can function. When you delete your account (Settings → Delete account), we delete your account and associated couple content through a server function. Some records may persist briefly in backups or as required to comply with law, prevent fraud, or resolve disputes, and are removed on a rolling basis.
Your choices and rights
- Access and correction: You can view and edit most of your content directly in the app; email us for anything else.
- Deletion: Use Settings → Delete account to permanently delete your account, answers, notes, and photos. You may also email us to request deletion.
- Notifications: Turn push notifications on or off in Settings or your device settings.
- Purchases and subscriptions: Manage or cancel subscriptions in your App Store / device account settings.
Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA), you may have additional rights such as access, portability, correction, deletion, and the right to object to certain processing. We honor these requests — contact lumasolapp@gmail.com. We do not sell personal information as defined by these laws.
Children's privacy
Luma + Sol is intended for adults in relationships and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
International users
The app is operated using Google Firebase infrastructure, which may process and store data in data centers located in the United States and other countries. By using the app, you understand your information may be processed in countries that may have different data-protection laws than your own.
Changes to this policy
We may update this policy as the app evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.
Contact us
Questions, requests, or concerns about privacy: lumasolapp@gmail.com