Privacy

The short version

• There is no account. You never sign up, sign in, or give us a name or an email to use Lumis.
• Your financial records never leave your phone. We cannot see them, because they are not sent anywhere.
• We do not sell or share your data. There is no advertising in Lumis and no advertising SDK in it.
• One thing is sent: crash reports, with every number stripped out. That is described in full below.
• This website collects basic, anonymous traffic statistics. That is separate from the app, and also described below.

What the app stores, and where

Everything you enter — transactions, wallets, categories, budgets, notes and dates — is written to a database inside the app on your device.

That database is encrypted at rest using SQLCipher. You can also put a biometric or device lock in front of the app, so it cannot be opened without your fingerprint, face or PIN.

Android’s automatic cloud backup is switched OFF for Lumis. Your database is never copied to Google Drive. This is deliberate: the encryption key lives in your phone’s hardware keystore and does not travel, so a copy of the database on another device could not be opened anyway.

Lumis also writes automatic backups to a folder belonging to the app on your own device, keeping the most recent few. Those files stay on the phone. Nothing uploads them.

When you use Export, Lumis writes a file that you choose the destination for. From that moment the file is yours and it is outside the app’s control — if you put it in a cloud drive or send it to someone, it goes where you send it.

The one thing that is sent: crash reports

If Lumis crashes, it sends a crash report so the fault can be found and fixed. This uses Firebase Crashlytics, a Google service. It is the only network connection the app makes.

Because this is a money app, crash reports are stripped before they are sent:

• Every digit in an error message is replaced with a # character. An error mentioning "1,234.56" arrives as "#,###.##". This is deliberately blunt — a cleverer filter that tried to tell an amount from a list position would sometimes get it wrong, and one leaked balance is worse than a less readable report.
• The type of the error and the stack trace are kept. A stack trace records which line of code failed, not what your data was.
• Flutter’s error "context" field, which can quote what was on screen, is dropped entirely.
• Lumis attaches no breadcrumbs, no custom keys, and no identifier for you. We never call Crashlytics’ user-identifier API.

Alongside the report, Crashlytics itself records the usual technical details of a crash: when it happened, your device model, your Android version, the app version, and an installation identifier generated by Firebase. Google processes this on our behalf; its handling is covered by Google’s own privacy policy.

No transaction, wallet name, category, note or balance is included in a crash report.

Permissions, and why each one exists

• Internet and network state — used only to send the crash reports described above. Lumis makes no other network requests.
• Biometric and fingerprint — the optional app lock. Your fingerprint or face is checked by Android and never reaches Lumis.
• Notifications, background service, wake lock, and run-at-startup — these run the scheduled local backup so it can complete even when the app is closed. They do not send anything anywhere.

Lumis does not ask for your location, contacts, camera, microphone, SMS or call log, and cannot read them.

This website

https://lumis.money uses Google Analytics to count visits and to see which pages people read, and to count clicks on the app-store buttons so we know how many people are waiting for the app. Google Analytics sets cookies in your browser and records a shortened version of your IP address, your approximate region, and details about your browser and device.

That is all it is used for. There is no advertising on this site, no remarketing, and no data is sold or passed to anyone else.

If you would rather not be counted, blocking analytics in your browser, using an ad or tracker blocker, or Google’s own opt-out add-on will all stop it. Nothing on this site stops working if you do.

The website and the app are separate. Visiting this page tells us nothing about what is in your app, and using the app tells us nothing about this page.

Who this policy is from

Lumis is published by Lumis.money, the developer name shown on our Google Play listing, operating from Azerbaijan.

This policy covers the Lumis app and this website. Questions about it, or about your data, go to support@lumis.money.

Children

Lumis is intended for adults managing their own money. It is not directed at children, and we do not knowingly collect anything from them.

Your data, your control

Because your records are only on your phone, you do not have to ask us for them and there is nothing for us to delete on your behalf.

• To take your data out, use Export in the app.
• To delete everything, uninstall Lumis, or clear its data from Android’s app settings. Both remove the database and any backups the app has written to its own folder. This cannot be undone.

Crash reports cannot be traced back to an individual person by us, so we are not able to find and remove one on request.

Changes to this policy

If Lumis ever gains something that changes this — an account, syncing between devices, sharing with someone else, or a backup that leaves your phone — this page will be updated in the same release, and the date at the top will change. We will not quietly widen what is collected while leaving this text as it is.

Contact

Questions about this policy, or about your data: support@lumis.money