Privacy Policy

Last updated: 22.07.2026

1. Introduction

Luumer ("we", "us", or "our") operates the website www.luumer.com and related services (the "Service").

The Service is operated by:

LUUMER LTD

Company number: 17339251

Registered office: c/o Morris Palmer, 1 Barttelot House, Barttelot Road, Horsham, West Sussex, United Kingdom, RH12 1DQ

Email: support@luumer.com

This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

We may collect the following types of information:

a) Information you provide

  • Email address (e.g. via waitlist or account registration)

  • Name (optional)

  • Onboarding information, including your stated goals, context question responses, and preferences you select (such as availability, scheduling, notifications, and task size)

  • Content you submit (e.g. prompts, inputs, or messages)

  • User-generated plans, responses, and structured data created through the Service

Providing certain information, such as your email address, is necessary to create an account and use the Service — if you do not provide it, you will not be able to register. Other information (such as your name, or optional preferences) is not required, and not providing it will not prevent you from using the Service, though it may limit how personalised your experience is.

b) Automatically collected information

  • IP address

  • Browser type and device information

  • Pages visited and interactions on the website

  • Country (derived from IP address)

  • Login activity (such as registration date, last login date, and session information)

This data is collected for security, service functionality, and abuse prevention purposes.

c) Usage and activity data

We collect information about how you use the Service, including:

  • Plans created and modified — we store the current version of your plan; manual edits made directly to a plan are not individually retained

  • Chat messages and AI interactions, including requests to reduce, add, or regenerate tasks

  • Task progress and completion status

  • Action history (such as edits, updates, and interactions within the Service, used to support undo functionality)

3. How We Use Your Information

We use your information to:

  • Provide and improve the Service

  • Communicate with you, including service-related emails such as a welcome email when you register, and notification emails based on preferences you select during onboarding (e.g. reminders and schedule updates) — you can manage or unsubscribe from optional notifications at any time

  • Understand how users interact with the website

  • Develop new features and functionality

We also use your information to:

  • Generate AI-powered plans and responses

  • Personalise your experience within the Service

  • Maintain account security and prevent unauthorised access

  • Detect, prevent, and investigate abuse, misuse, or unlawful activity, including through our AI moderation system

  • Enforce usage limits and system safeguards

4. Legal Basis for Processing (UK & EU Users)

If you are located in the UK or European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract – to provide the Service to you, including generating plans and sending essential service emails

  • Consent – for optional notification preferences you choose during onboarding, which you may withdraw at any time

  • Legitimate interests – to improve, secure, and maintain the Service, and to detect and prevent misuse

  • Legal obligations – where we are required to comply with applicable laws

5. AI Processing & Moderation

Luumer uses third-party AI providers to generate responses and content.

When you submit inputs (such as prompts or text), this data may be processed by external AI services, including providers such as OpenAI and Anthropic (used for content moderation and safety purposes). We do not use your inputs to train our own AI models.

Our Service includes an AI-based moderation system that automatically reviews chat messages and other inputs and outputs to detect content relating to illegal, violent, or otherwise harmful activity. Where such content is detected, we may block or restrict content, and accounts are suspended automatically, without a person reviewing the decision beforehand. If your account is blocked or suspended, you may request a human review of that decision by contacting support@luumer.com.

Where we identify a genuine and credible risk to the safety of any person, we reserve the right to report the relevant account and content to the police or other appropriate authority, to the best of our ability to identify the correct agency.

6. Automated Decision-Making

Account suspensions arising from our moderation system are carried out automatically, without a human reviewing the decision before it takes effect. This may constitute automated decision-making with legal or similarly significant effects under UK GDPR.

If you are affected by an automated decision of this kind, you have the right to request human review, express your point of view, and contest the decision. To do so, contact us at support@luumer.com.

7. Sensitive Data

The Service is not designed to intentionally collect sensitive personal data (such as health information, mental health data, or other special category data). Onboarding and plan-related questions focus on your goals, schedule, and productivity preferences.

If you choose to share sensitive information voluntarily, for example within a free-text chat message, we process it under the same safeguards as your other content, but we do not request, encourage, or rely on this type of information. By choosing to share it, you provide your explicit consent to our processing of that specific information for the purpose of operating the Service, and for no other purpose. You should avoid submitting sensitive personal information unless necessary.

8. Data Storage

We currently store user-generated content, including plans, prompts, responses, chat history, and activity data, to provide core functionality of the Service.

We store the current version of your plan. Where you update a plan through chat (e.g. asking us to reduce, add, or regenerate tasks), those chat messages are stored as part of your chat history. Where you make manual edits directly to a plan, we do not retain a record of every individual edit — only the current version is stored.

9. Third-Party Services

We use trusted third-party services to operate the platform, including:

  • OpenAI (AI processing)

  • Anthropic (content moderation and safety)

  • Clerk (authentication and user management)

  • Replit (backend infrastructure)

  • Neon (PostgreSQL database infrastructure)

  • Framer (website hosting and analytics)

  • Google Search Console (website performance and search analytics)

These services may process data in accordance with their own privacy policies. Where these providers process data outside the UK, we rely on the safeguards described in Section 12 (International Data Transfers).

10. Cookies

We use a small number of strictly necessary cookies to enable core functionality of the Service, including authentication and session security (via Clerk).

For website analytics, we use Framer's built-in analytics. This tool does not use cookies or persistent identifiers — it calculates anonymised visitor counts by hashing IP address and browser/device information with a daily rotating key that is deleted every day, and it cannot identify individual visitors. Because it is cookie-free, no cookie consent banner is currently required for this analytics tool.

We do not currently use advertising or cross-site tracking cookies. If this changes in the future, we will update this Policy and present a cookie consent banner where required by law.

11. Data Retention

We retain personal data only as long as necessary to provide the Service or comply with legal obligations.

User data is retained while your account is active. When you delete your account, your data is removed from our active production systems. Limited residual copies may remain for a short period as follows:

  • Database backups (hosted via Neon) are retained for up to 28 days as part of routine backup rotation, after which they are automatically overwritten. Backup data is not used for any operational purpose and is not restored to active systems.

  • For account troubleshooting purposes, limited account records may be retained in our internal admin systems for up to 7 days after deletion, to allow us to investigate reported issues. This is done selectively, on a case-by-case basis, and not for every account.

12. International Data Transfers

The Service is available worldwide. Your data may be processed outside the United Kingdom, including in the United States, where our AI providers OpenAI and Anthropic are based. Our other service providers (including Clerk, Replit, and Neon) may also process or store data outside the UK; we are confirming the specific locations for each provider and will update this section accordingly.

Where data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or, where applicable, the UK extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), adopted by our service providers.

13. Your Rights (UK & EU)

If you are located in the UK or EU, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict processing

  • Request data portability

  • Withdraw consent at any time, where processing is based on consent (e.g. optional notification emails)

To exercise these rights, contact us at: support@luumer.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or with your local data protection authority if you are located outside the UK.

14. Data Security

We take reasonable measures to protect your data. However, no system is completely secure.

We do not guarantee that the Service will be free from unauthorised access, data breaches, or cyber threats.

15. Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will take steps to delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.

17. Contact

For any questions about this Privacy Policy, contact: support@luumer.com


Privacy Policy

Last updated: 22.07.2026

1. Introduction

Luumer ("we", "us", or "our") operates the website www.luumer.com and related services (the "Service").

The Service is operated by:

LUUMER LTD

Company number: 17339251

Registered office: c/o Morris Palmer, 1 Barttelot House, Barttelot Road, Horsham, West Sussex, United Kingdom, RH12 1DQ

Email: support@luumer.com

This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

We may collect the following types of information:

a) Information you provide

  • Email address (e.g. via waitlist or account registration)

  • Name (optional)

  • Onboarding information, including your stated goals, context question responses, and preferences you select (such as availability, scheduling, notifications, and task size)

  • Content you submit (e.g. prompts, inputs, or messages)

  • User-generated plans, responses, and structured data created through the Service

Providing certain information, such as your email address, is necessary to create an account and use the Service — if you do not provide it, you will not be able to register. Other information (such as your name, or optional preferences) is not required, and not providing it will not prevent you from using the Service, though it may limit how personalised your experience is.

b) Automatically collected information

  • IP address

  • Browser type and device information

  • Pages visited and interactions on the website

  • Country (derived from IP address)

  • Login activity (such as registration date, last login date, and session information)

This data is collected for security, service functionality, and abuse prevention purposes.

c) Usage and activity data

We collect information about how you use the Service, including:

  • Plans created and modified — we store the current version of your plan; manual edits made directly to a plan are not individually retained

  • Chat messages and AI interactions, including requests to reduce, add, or regenerate tasks

  • Task progress and completion status

  • Action history (such as edits, updates, and interactions within the Service, used to support undo functionality)

3. How We Use Your Information

We use your information to:

  • Provide and improve the Service

  • Communicate with you, including service-related emails such as a welcome email when you register, and notification emails based on preferences you select during onboarding (e.g. reminders and schedule updates) — you can manage or unsubscribe from optional notifications at any time

  • Understand how users interact with the website

  • Develop new features and functionality

We also use your information to:

  • Generate AI-powered plans and responses

  • Personalise your experience within the Service

  • Maintain account security and prevent unauthorised access

  • Detect, prevent, and investigate abuse, misuse, or unlawful activity, including through our AI moderation system

  • Enforce usage limits and system safeguards

4. Legal Basis for Processing (UK & EU Users)

If you are located in the UK or European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract – to provide the Service to you, including generating plans and sending essential service emails

  • Consent – for optional notification preferences you choose during onboarding, which you may withdraw at any time

  • Legitimate interests – to improve, secure, and maintain the Service, and to detect and prevent misuse

  • Legal obligations – where we are required to comply with applicable laws

5. AI Processing & Moderation

Luumer uses third-party AI providers to generate responses and content.

When you submit inputs (such as prompts or text), this data may be processed by external AI services, including providers such as OpenAI and Anthropic (used for content moderation and safety purposes). We do not use your inputs to train our own AI models.

Our Service includes an AI-based moderation system that automatically reviews chat messages and other inputs and outputs to detect content relating to illegal, violent, or otherwise harmful activity. Where such content is detected, we may block or restrict content, and accounts are suspended automatically, without a person reviewing the decision beforehand. If your account is blocked or suspended, you may request a human review of that decision by contacting support@luumer.com.

Where we identify a genuine and credible risk to the safety of any person, we reserve the right to report the relevant account and content to the police or other appropriate authority, to the best of our ability to identify the correct agency.

6. Automated Decision-Making

Account suspensions arising from our moderation system are carried out automatically, without a human reviewing the decision before it takes effect. This may constitute automated decision-making with legal or similarly significant effects under UK GDPR.

If you are affected by an automated decision of this kind, you have the right to request human review, express your point of view, and contest the decision. To do so, contact us at support@luumer.com.

7. Sensitive Data

The Service is not designed to intentionally collect sensitive personal data (such as health information, mental health data, or other special category data). Onboarding and plan-related questions focus on your goals, schedule, and productivity preferences.

If you choose to share sensitive information voluntarily, for example within a free-text chat message, we process it under the same safeguards as your other content, but we do not request, encourage, or rely on this type of information. By choosing to share it, you provide your explicit consent to our processing of that specific information for the purpose of operating the Service, and for no other purpose. You should avoid submitting sensitive personal information unless necessary.

8. Data Storage

We currently store user-generated content, including plans, prompts, responses, chat history, and activity data, to provide core functionality of the Service.

We store the current version of your plan. Where you update a plan through chat (e.g. asking us to reduce, add, or regenerate tasks), those chat messages are stored as part of your chat history. Where you make manual edits directly to a plan, we do not retain a record of every individual edit — only the current version is stored.

9. Third-Party Services

We use trusted third-party services to operate the platform, including:

  • OpenAI (AI processing)

  • Anthropic (content moderation and safety)

  • Clerk (authentication and user management)

  • Replit (backend infrastructure)

  • Neon (PostgreSQL database infrastructure)

  • Framer (website hosting and analytics)

  • Google Search Console (website performance and search analytics)

These services may process data in accordance with their own privacy policies. Where these providers process data outside the UK, we rely on the safeguards described in Section 12 (International Data Transfers).

10. Cookies

We use a small number of strictly necessary cookies to enable core functionality of the Service, including authentication and session security (via Clerk).

For website analytics, we use Framer's built-in analytics. This tool does not use cookies or persistent identifiers — it calculates anonymised visitor counts by hashing IP address and browser/device information with a daily rotating key that is deleted every day, and it cannot identify individual visitors. Because it is cookie-free, no cookie consent banner is currently required for this analytics tool.

We do not currently use advertising or cross-site tracking cookies. If this changes in the future, we will update this Policy and present a cookie consent banner where required by law.

11. Data Retention

We retain personal data only as long as necessary to provide the Service or comply with legal obligations.

User data is retained while your account is active. When you delete your account, your data is removed from our active production systems. Limited residual copies may remain for a short period as follows:

  • Database backups (hosted via Neon) are retained for up to 28 days as part of routine backup rotation, after which they are automatically overwritten. Backup data is not used for any operational purpose and is not restored to active systems.

  • For account troubleshooting purposes, limited account records may be retained in our internal admin systems for up to 7 days after deletion, to allow us to investigate reported issues. This is done selectively, on a case-by-case basis, and not for every account.

12. International Data Transfers

The Service is available worldwide. Your data may be processed outside the United Kingdom, including in the United States, where our AI providers OpenAI and Anthropic are based. Our other service providers (including Clerk, Replit, and Neon) may also process or store data outside the UK; we are confirming the specific locations for each provider and will update this section accordingly.

Where data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or, where applicable, the UK extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), adopted by our service providers.

13. Your Rights (UK & EU)

If you are located in the UK or EU, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict processing

  • Request data portability

  • Withdraw consent at any time, where processing is based on consent (e.g. optional notification emails)

To exercise these rights, contact us at: support@luumer.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or with your local data protection authority if you are located outside the UK.

14. Data Security

We take reasonable measures to protect your data. However, no system is completely secure.

We do not guarantee that the Service will be free from unauthorised access, data breaches, or cyber threats.

15. Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will take steps to delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.

17. Contact

For any questions about this Privacy Policy, contact: support@luumer.com