1. Overview
Lumiary is a private iOS app for saving selected life moments with photos, short text, dates, optional tags, and optional places. It is not a social network, does not require a Lumiary account, and does not operate a Lumiary-owned server for storing your moment content.
This policy explains what data the app handles, where it is stored, how optional iCloud sync works, and what happens when you export, delete, or uninstall the app.
2. Data Lumiary Handles
Depending on how you use the app, Lumiary may store the following data on your device:
- Photos you add by taking a photo, choosing from the photo library, or sharing from another app.
- Thumbnails generated for timeline and preview display.
- Short text you write for a photo moment or text-only moment.
- Moment date and time, including photo capture time when available and selected.
- Tags, custom tags, optional location text, and optional current-location derived place information when you request it.
- App preferences, such as App Lock settings, reminder settings, iCloud sync state, and backup or restore state.
Lumiary does not need your contacts, does not read your full photo library for social discovery, and does not store likes, comments, follower lists, or public profile data because those features do not exist in the app.
Lumiary may also store a random anonymous analytics identifier and a local queue of anonymous usage events when Anonymous Analytics is enabled. These events use counts, buckets, booleans, screen names, setting states, and error categories, including aggregate moment and media counts. They do not include your photos, note text, tags, place names, file paths, moment IDs, media IDs, account identifiers, or iCloud identifiers.
3. Local Storage
By default, your moment database, copied photos, and thumbnails are stored locally in Lumiary's app storage on your iPhone. Items shared into Lumiary through the iOS Share Sheet are also saved locally so they can appear in Lumiary later.
Deleting a moment removes Lumiary's copy of that moment and its associated media from Lumiary storage. It does not delete the original photo from your Apple Photos library.
If you have not enabled iCloud sync and have not exported a complete backup, deleting or uninstalling Lumiary may delete local app data from that device.
4. Optional iCloud Sync
iCloud sync is optional. If you turn it on, Lumiary syncs your moment content through your Apple iCloud account. This lets supported devices signed in with the same Apple ID restore or sync Lumiary data after sync completes.
Lumiary does not create a Lumiary account for this sync and does not upload your moment content to a Lumiary-owned content server. Apple may process and store synced data as part of iCloud. Apple's terms and privacy policies apply to iCloud.
You can turn iCloud sync off in Lumiary settings. Turning sync off stops Lumiary from starting new sync operations, but data already stored in iCloud may remain in your iCloud account unless removed through app behavior or Apple/iCloud controls.
5. Permissions
Photos
Lumiary uses photo access only when you choose photos or share photos into Lumiary. The app copies selected photos into its own storage so your moments remain available inside Lumiary.
Camera
Camera access is requested only when you choose to take a photo for a moment.
Location
Location access is requested only when you choose to use the current location. You can also type a place manually. Lumiary does not silently keep full photo EXIF location data as its product source.
Notifications
If you enable memory reminders, Lumiary uses local notifications to remind you to revisit moments. Reminder scheduling stays on the device.
System authentication
App Lock uses Apple's system authentication, such as Face ID, Touch ID, or device passcode. Lumiary does not receive or store your biometric data.
6. Sharing From Other Apps
When you choose Lumiary from the iOS Share Sheet, Lumiary receives the photos or text you selected for that share action. You can preview, add a short note, choose tags or a date, and save the result as a Lumiary moment. This does not create a public post and does not upload the shared content to a Lumiary-owned server.
7. Backups, Export, and Import
Lumiary can export a complete backup ZIP that may include structured moment data, photos, thumbnails, readable Markdown, tags, dates, and places. The export is created locally. Once you save, send, or store that backup somewhere else, that destination's privacy and security practices apply.
Import reads a Lumiary complete backup ZIP that you select. Import merges supported moment data into local storage and skips duplicate moments where applicable.
8. Analytics, Ads, and Third Parties
Lumiary includes optional anonymous usage analytics to understand feature usage and reliability. You can turn it off in Settings > About > Help Improve Lumiary. When it is off, Lumiary stops upload and clears pending analytics events.
Anonymous analytics may include events such as app start, screen views, feature toggles, moment creation success or failure, backup or restore success or failure, aggregate moment and media counts, buckets, booleans, and sanitized error categories. Lumiary does not collect photo content, note text, tag names, place names, precise GPS coordinates, iCloud account identifiers, contacts, full photo library lists, moment IDs, or media IDs for analytics.
Lumiary does not include advertising SDKs, public social features, or a Lumiary account system.
Apple services such as iCloud, App Store, system authentication, local notifications, camera, photo picker, and location permission prompts may process data under Apple's policies.
Feedback you choose to submit
When you tap Submit on the feedback page, Lumiary sends your text, up to three selected compressed JPEG images, and basic information (app identifier, app version, build number, platform, OS version, hardware model, and app language) over HTTPS to the developer's feedback service. This information is used to investigate problems and improve the product. Images are resized and re-encoded to remove original metadata, including EXIF and GPS; their visible content may still contain personal information.
Feedback is stored separately from anonymous analytics using Tencent Cloud database and private object storage. Only the service and authorized administrators may access it; attachments are not publicly accessible. No account, installation identifier, device name, or moment library content is added. The anonymous analytics setting does not affect feedback you actively submit. Feedback text, images, and associated submission information are retained for 180 days and then deleted. You can contact support to request earlier deletion and provide the submission time and information needed to locate it.
The email option opens an email composer or your chosen email app. You decide whether to send, and your email provider's practices apply. The feedback API does not send email or provide in-app replies. Unsubmitted drafts stay on the feedback page and their temporary images are removed when you discard the draft or confirm successful submission.
9. Data Retention and Deletion
Moment data remains in Lumiary local storage until you delete it, import changes, uninstall the app, or system storage behavior removes app data. Synced data may also exist in your iCloud account if iCloud sync is enabled. Backup files remain wherever you save them until you delete those files.
Deleting a moment in Lumiary is intended to sync deletion state when iCloud sync is enabled and functioning. If a device is offline or sync fails, deletion may finish locally before syncing later.
10. Children
Lumiary is not designed as a service directed to children. It does not include social discovery or public sharing features.
11. Changes to This Policy
If Lumiary changes how data is collected, stored, synced, or shared, this policy will be updated to describe those changes.
12. Contact
If you have privacy questions, contact Lumiary support at feedback@xingchenyue.com.