LumiDays 隱私政策

版本：1.0 生效日期：2026-07-10 最後更新：2026-10-08

說明：本政策以英文與繁體中文提供，兩版內容力求一致。於適用法律允許的範圍內，若兩版有出入，以英文版為準（LumiArc LLC 為美國公司，並以華盛頓州法律為準據法）；中文版為便利翻譯。

本隱私政策說明 LumiArc LLC（依美國華盛頓州法律組織之有限責任公司，下稱「LumiDays」、「我們」）如何蒐集、使用、揭露及以其他方式處理與你有關的資訊。本政策適用於你存取或使用 LumiDays 行動應用程式及相關線上產品與服務（合稱「本服務」），以及你以其他方式與我們互動（例如透過客服管道）時，我們所蒐集或處理的個人資料。LumiArc LLC 就本政策所述之處理負責，並於適用情形下作為資料控制者（controller）。

LumiDays 是一款為新手爸媽打造的 AI 育兒陪伴應用程式。本服務面向提供並管理其寶寶資料的成年家長；你須年滿 18 歲（或你所在地的法定成年年齡，以較高者為準），方得持有帳號並使用本服務。

重點：我們絕不販售你的個人資料，也絕不用於廣告或訓練 AI 模型。

我們可能不時更新本政策；若有變更，將於本頁面更新頂端之日期（詳見第 10 節）。如你對本政策或你的個人資料有任何疑問，請透過第 11 節之聯絡方式與我們聯繫。

1. 我們蒐集的資訊

我們力求僅蒐集為提供、保護、維護、個人化及改善本服務所合理必要的資訊，並以類別（而非逐項功能）加以說明。本節說明我們蒐集哪些類別的個人資料，以及這些資料來自何處；我們如何使用這些資料見第 2 節，如何揭露見第 3 節。

1.1 你主動提供給我們的資訊

帳號與識別資料——你的基本帳號資訊，例如姓名 / 顯示名稱與頭像，以及你自報的國家／地區（用於讓內容更貼合在地情境，非 GPS 定位）。若你以 email 與密碼註冊，我們亦會蒐集你的 email 位址與你所設定的密碼，以建立你的帳號。
你與寶寶的基本資訊，以及你提供的背景敘述——關於你寶寶的基本資訊（例如姓名、生日、性別），以及你選填、關於寶寶或你自己的背景敘述。
選填的健康、發展與身心健康資訊——你選擇提供、關於你或你孩子的資訊，例如懷孕、生產、產後、餵養、過敏、敏感、疾病、症狀、用藥、生長、睡眠、發展、行為或情緒健康等資訊。這些可能來自記事、時光軸紀錄、上傳內容，或你與 AI 陪伴的對話，也包括就你所提供內容生成的健康相關摘要或推論。此類資料屬健康個人資料；你可以選擇不提供，亦可透過 app 內提供的控制項，或聯繫我們，來管理、更新或刪除。關於消費者健康資料的額外揭露，見我們的消費者健康資料隱私政策。
家庭與成員資料——與你家庭及其成員相關的資訊，例如家庭名稱、成員與邀請。
你建立的內容與上傳的媒體（User Content）——你在 LumiDays 建立的內容，包括你與 AI 陪伴的對話、你的成長紀錄，以及你上傳的照片與影片。
偏好與訂閱資料——你的 App 使用偏好（例如語言、主題、通知設定），以及你的方案與訂閱狀態。

選擇使用日常紀錄功能時，我們會蒐集你輸入的照護紀錄——例如餵奶、換尿布、睡眠及擠乳紀錄，以及其時間、數量與附註——用於保存、顯示摘要，並依下述方式與你的家庭共享。

你也可以請 AI 陪伴將輸入或語音輸入的照護筆記整理成草稿，供你確認。透過日常紀錄麥克風按鈕的語音輸入在你的裝置上處理，我們不會接收或保存錄音。

1.2 我們自動蒐集的資訊

使用資料——有限的產品互動與診斷資料，透過我們的分析與診斷服務供應商蒐集，用於了解效能、排查問題並改善本服務。我們不販售這些資料，也不將其用於廣告或跨情境追蹤。若你主動提交錯誤或當機回報，你在其中填寫的文字也會一併送出，以協助我們診斷問題。
裝置與推播資料——你的推播通知 token，以便傳送你已啟用的通知。你可隨時於裝置設定關閉推播。

1.3 來自第三方的資訊

第三方登入資料——當你以 Apple 或 Google 登入時，我們會收到該供應商傳回的基本個人資料（例如你的 email、姓名與頭像）。
訂閱交易資料——當你透過 App Store 或 Google Play 訂閱時，我們會收到用以確認你方案所需的交易資訊。我們不蒐集、亦不儲存你的信用卡號——付款由 Apple / Google 處理。

1.4 位置與照片 metadata

LumiDays 不追蹤你的即時位置，亦不使用 GPS 定位。你於帳號中自報的國家／地區僅供概略在地化之用（見第 1.1 節之帳號與識別資料）。
一般時間軸顯示的照片與影片：LumiDays 不會使用照片或影片的 metadata 追蹤你的位置。就一般上傳，我們會在內容顯示前移除或限制嵌入的 metadata（例如位置，EXIF）。
原始畫質保留（選填功能，僅特定方案提供）：若開啟「保留照片原始畫質」，原始檔可能保留你裝置產生的 metadata（例如拍攝時間、裝置資訊或地點）。原始檔仍屬你家庭的私有空間，受你家庭的權限及下述保留與刪除規範拘束；不公開、不用於分析或廣告，也不會販售。

2. 我們如何使用你的資訊

我們基於下列目的，使用第 1 節所述之個人資料：

建立、驗證與管理你的帳號，並提供本服務。
提供並個人化你的體驗——包括每日信件、育兒參考資訊、AI 陪伴、你家庭私有的寶寶成長時間軸，以及日常紀錄。
提供家庭共享功能，並管理你家庭內成員的權限。
管理你的偏好、方案與訂閱。
傳送你已啟用的通知（例如家庭成員加入時）。
傳送與你帳號及安全相關的服務性（交易性）電子郵件，例如帳號驗證信與密碼重設信。
了解 App 整體使用情形並改善我們的產品。
維護使用者安全——自動化系統可能識別出顯有重大危害風險的內容；我們可能於對話中提供相應的求助資源（見《服務條款》第 6.6 條），並於有限情形下，由授權人員審視為評估安全、調查濫用或維護本服務安全所合理必要的最小資訊。
維護服務安全、防止濫用，並遵循我們的法律義務。

我們不會使用你的個人資料建立廣告用畫像、對你的行為進行剖析或將你歸入廣告分群，也不會用其訓練 AI 模型。我們對敏感資訊（包括選填的健康資訊）之使用，僅限於上述目的。於適用法律要求時，我們會在蒐集、使用或分享該等資訊前取得你的明確同意。

3. 我們如何揭露你的資訊

我們不販售你的個人資料，也不會為第三方自身的行銷目的或其自身用途而揭露。你與 AI 的對話、寶寶的紀錄與照片，絕不會被販售給廣告商，或用於行銷 / 廣告目的。

我們僅在服務需要時，向下列類別的接收方揭露個人資料：

供應商與服務供應商（sub-processors）——僅為我們提供服務而處理資料之第三方，並負有對個人資料提供與本政策所述相同或同等保護之義務（名單見下方）。
你的家庭成員與照顧幫手——家庭中的內容依管理員設定的權限於成員間共享；成員可能包括家人，以及管理員邀請、協助照顧寶寶的照顧幫手（例如保母）。你與 AI 的對話預設與你授權的管理員家庭成員共享；你也可以開啟僅自己可見的私密對話。邀請成員前，請確認對方是你信任的人。
Apple 與 Google——提供第三方登入，以及 App Store / Google Play 的訂閱付款。
法律、安全與權利保護——當我們善意相信揭露係為遵循法律義務或合法請求所必需，或為保護我們使用者、公眾或 LumiArc LLC 之權利、財產或安全所合理必要時。
企業交易——於合併、收購、融資或資產出售等情形，個人資料可能一併移轉，並仍受本政策拘束。任何接手方將被要求依適用法律及我們的《消費者健康資料隱私政策》處理消費者健康資料。
經你同意或依你指示——當你要求我們分享資訊，或另行同意時。

照護紀錄：照護紀錄（包括親餵等餵養紀錄）會與你家庭中經授權的人員共享；管理員與獲授予編輯權限的成員，可以新增、編輯及移除照護紀錄。管理員可隨時變更或撤銷成員的存取權限。

我們亦可能揭露無法合理識別你個人身分的彙總或去識別化資訊。

3.1 我們的服務供應商

為提供服務，我們委由下列類別的服務供應商（sub-processors），其主要位於美國：

基礎設施、代管與儲存供應商——提供後端代管與檔案儲存。
AI 服務供應商——提供 AI 對話功能，以及日常紀錄中的 AI 紀錄整理。
平台、付款與營運支援供應商——包括 App 商店計費、第三方登入，以及推播通知與電子郵件之傳遞。

關於 AI 服務供應商的補充說明：LumiDays 委由第三方人工智慧服務供應商——目前為 Anthropic, PBC（位於美國）——提供 AI 對話功能。當你使用這些功能時，我們會將生成回覆所需的內容與相關脈絡傳送給該供應商；依你提交的內容而定，其中可能包含個人或健康相關資訊。我們不會刻意在 AI 請求中放入你的帳號密碼、email 或內部帳號識別碼——但你選擇提交的內容本身可能含有可識別資訊。該供應商依其商業與資料處理條款代我們處理這些內容；該等條款要求其僅得依我們的指示處理、對內容保密並維護其安全，且禁止將這些內容用於訓練其 AI 模型；我們亦不允許任何此類訓練用途。依該等條款，該供應商須對個人資料提供與本政策所述相同或同等之保護。 保留期間可能依所使用的模型與 API 功能而異；我們會在合理可行的範圍內，將服務設定為盡量縮短保留。若我們新增或更換 AI 服務供應商，將於變更生效前更新本政策與 App 內的揭露。

日常紀錄整理：當你使用整理照護筆記時，我們會將筆記文字及解讀所需的日期與時間脈絡，依相同條款傳送給上述 AI 服務供應商，僅用於產生供你確認的紀錄草稿。

當我們的服務供應商有所變動時，我們可能會更新此清單。於法律要求時，我們會在重大變更生效前提供通知或取得你的同意（詳見第 10 節「本政策的變更」）。

4. 資料保留

在你使用服務期間：帳號存續期間，我們會保留你的帳號、寶寶檔案、照護紀錄、時間軸內容、媒體與對話，以持續提供服務；當你刪除帳號或個別內容時，即依本節所述刪除。
帳號刪除：你可於 App 內「設定 → 刪除帳號」自助發起刪除。刪除自 30 天寬限期開始，期間你可自行復原；寬限期屆滿後，我們即開始永久刪除你的帳號及相關資料（包含屬於個人空間的對話與你個人儲存的內容），惟受有限的備份、安全、防詐欺、財務紀錄與法定保存要求之限制。家庭共享內容詳見下一點。在寬限期內，你也可以選擇立即永久刪除帳號；此操作即刻展開且無法復原，惟受上述有限的備份、安全、防詐欺、財務紀錄與法定保存例外之限制。請注意：刪除帳號不會自動取消你透過 Apple App Store / Google Play 訂閱的付費方案；如有訂閱，請另行於 App Store / Google Play 的訂閱設定中取消。
家庭共享內容：你在共享家庭中貢獻的內容（例如寶寶照護紀錄、時光軸紀錄、共享對話），在你離開或被移出該家庭後，可能仍留存於該家庭；在你刪除帳號後，可能仍供其他獲授權成員使用，並以不具名方式顯示。若家庭已無任何有效管理員，該家庭將解散，其內容於適用的復原期後刪除（見下一點）。就健康資料，經驗證的刪除請求仍將依我們的《消費者健康資料隱私政策》辦理。
照護紀錄：從紀錄頁移除照護紀錄會將其隱藏，但不一定永久清除。如需永久刪除，請依第 7 節所述方式聯繫我們。
解散家庭：家庭解散後，其資料最長可供復原一年，屆期我們即永久刪除；備份中的殘留副本則於上述進一步期間內移除。
安全相關紀錄：觸發我們安全機制的內容，我們僅保留最小必要的相關紀錄供安全審視，僅保留至該目的所需為止，存取權限僅限授權人員。
刪除請求紀錄：為符合法遵要求，我們會保留有限的刪除請求紀錄至多 24 個月，並採資料最小化。

於前述期間屆滿後，為防止詐欺與濫用、維護服務安全、遵循我們所受之法律義務，或保存必要之財務紀錄，我們仍得於必要之範圍與期間內保留相關資料。

5. 安全與國際傳輸

國際傳輸：你的資料儲存並處理於位在美國的雲端基礎設施。若你自美國以外地區使用 LumiDays，即表示你了解並同意你的資料將傳輸至美國，並依本政策處理。

安全措施：我們以合理的技術與組織措施保護你的個人資料，包括限制對個人資料的存取、於傳輸中加密（並於適當情形下於儲存時加密），並就稽核與防濫用資料採行資料最小化原則。你的寶寶照片、影片與時間軸內容屬你家庭私有，不會公開。惟網路傳輸與資料儲存本質上無法保證絕對安全；儘管我們持續努力，仍無法保證你的資料或通訊之安全。

安全事件通知：若發生可能影響你個人資料之安全事件，我們將依適用法律通知你。

6. 你的選擇

你可透過下列方式控制你的資料：

選填的健康資訊：你可以選擇不提供，亦可於設定中刪除（或聯繫我們處理）。不提供並不會讓你無法使用 LumiDays，但部分個人化、記憶或健康相關功能可能因此受限。
照護資料控制項：你可以隨時於 App 設定中撤回健康與照護資料同意。撤回後將停止後續蒐集，但不會刪除已保存的紀錄，已與家庭共享的紀錄也可能仍供家中其他有存取權限的成員使用；刪除請求是另一項選擇（見第 4 節及《消費者健康資料隱私政策》）。
私密對話：你與 AI 的對話預設與你授權的管理員家庭成員共享；你也可以開啟僅自己可見的私密對話（見第 3 節）。
推播通知：你可隨時於裝置設定開啟或關閉。
刪除帳號：你可於 App 內「設定 → 刪除帳號」自助刪除你的帳號與相關資料（見第 4 節）。
行銷與廣告：我們不進行行為廣告，也不進行跨情境追蹤，因此你無需另行設定廣告選擇退出（opt-out）。

7. 你的權利

視你所在地區的法律而定，你就你的個人資料可能享有下列權利：

存取：取得我們所持有、關於你的個人資料。
更正：更正不正確或不完整的資料（App 內多數資料可自行編輯）。
刪除：透過「設定 → 刪除帳號」自助刪除帳號與相關資料（見第 4 節）。
反對 / 限制處理：於適用情形下，反對或限制特定處理。
撤回同意：就以你同意為依據的處理（選填的健康資訊、日常紀錄中的 AI 紀錄整理、推播通知），你可隨時透過 App 內適用的隱私或通知控制項，或聯繫我們來撤回。撤回同意與請求刪除是不同的選擇。
向監管機關申訴：於適用情形下，你有權向主管之個人資料保護監管機關提出申訴。

行使上述任何權利，請透過第 11 節之信箱與我們聯繫；為保護你的帳號，我們可能需要驗證你的身分。就你所在地區之特別權利，另見第 9 節。

8. 兒童（寶寶）資料

LumiDays 面向成年家長，本 App 的直接使用者為成年的家長帳號；持有帳號須符合本政策開頭所述之年齡資格。

寶寶沒有帳號、無法登入，亦非本 App 的使用者。所有寶寶資料（姓名、生日、性別、照片、影片、AI 記憶、照護紀錄）皆由成年家長輸入並掌控——或由家長邀請加入家庭的其他成年人，在家長設定的權限內輸入。
用途上鎖：關於你寶寶的一切資訊，僅會在透過 LumiDays 提供服務的情境中使用。我們不會將寶寶資料用於行銷，不會販售，也不會提供給廣告商。
你身為家長 / 監護人，可存取、更正或刪除你寶寶的資料——透過 App 內可用的編輯功能，或透過刪除帳號 / 解散家庭一併移除。
寶寶資料僅該家庭的成員（依其權限）得以存取。

針對美國使用者（COPPA）：LumiDays 為面向成人設計與導向之服務，並非導向兒童。兒童不會建立帳號，亦不會直接使用本服務；關於兒童的資訊——例如兒童的姓名、生日、照片、影片、健康與發展資訊——皆由成年家長或法定監護人，或經其授權之其他成年人提供並管理。我們不會在知情的情況下允許未滿 13 歲之兒童建立帳號，或直接透過本服務提交個人資料。若你認為有兒童在無適當成人參與的情況下建立了帳號或直接提交了個人資料，請透過第 11 節之信箱聯繫我們——我們將刪除該資料並關閉相關帳號。

針對歐洲經濟區 / 英國使用者（GDPR-K）：就寶寶之個人資料，其處理係基於你身為家長 / 監護人所提供並管理之依據。

9. 特定地區之補充揭露

於 GDPR / UK GDPR 適用於我們對你個人資料之處理的情形及範圍內，我們依下列法律依據處理：

履行契約——為提供你所要求的 LumiDays 服務，包括你的帳號、你與寶寶的基本資訊、家庭與成員資料、你的 User Content（例如 AI 對話、時間軸與你上傳的媒體）、你的偏好與訂閱，以及傳送你已啟用的通知。
你的同意——就選填的健康相關資訊（以你的明確同意為依據），以及於你所在地區適用時，就使用分析。你可隨時撤回同意，且不影響撤回前之合法處理。
我們的正當利益——為了解 App 使用情形並改善產品、傳送通知，以及維護服務安全與防止濫用，於各該情形均與你的權利及利益權衡後為之。
法律義務——當處理係為遵循我們所受之法律義務所必要時。

就兒童（寶寶）之個人資料，其處理另以你身為家長 / 監護人所提供並管理之同意為依據（見第 8 節）。你亦享有第 7 節所列之權利，包括向主管監管機關申訴之權利。

9.2 美國加州（CCPA / CPRA）

若 CCPA / CPRA 適用於我們對你個人資料之處理，加州居民有權知悉、存取與刪除我們所蒐集之個人資料，並有權不因行使該等權利而遭受歧視性待遇。我們不「販售」（“sell”）個人資料、不「分享」（“share”）個人資料以進行跨情境行為廣告，亦不為「目標式廣告」（“targeted advertising”）之目的處理個人資料（以上引號內為加州法之法定用語）。

就我們所蒐集的個人資料類別，詳見第 1 節。我們對敏感個人資料（例如選填的健康資訊）之使用，僅限於第 2 節所述之目的，不用於加州法第 1798.121 條所列之敏感推斷用途。

10. 本政策的變更

我們可能會不時更新本政策。若有重大變更，我們會於 App 內或透過本頁面告知，並更新頁首之「最後更新」日期。若某項重大變更實質擴大了我們處理你（或你寶寶）個人資料的方式，於法律要求時，我們會於 App 內尋求你的明確同意（affirmative consent），而非僅以繼續使用作為依據。其餘變更，則於你在變更後繼續使用 LumiDays 時，視為你已知悉更新後之政策。

11. 聯絡我們

如你對本隱私政策、你的個人資料，或行使你的權利有任何疑問或請求：

LumiArc LLC（Seattle, Washington）
隱私與法務聯絡信箱：privacy@lumidays.ai
一般支援信箱：support@lumidays.ai
網站：https://lumidays.ai

LumiDays Privacy Policy

Version: 1.0 Effective date: 2026-07-10 Last updated: 2026-10-08

Note: This policy is available in English and Traditional Chinese, and the two versions are intended to be consistent. To the extent permitted by applicable law, if there is a conflict between the versions, the English version will control (LumiArc LLC is a U.S. company governed by the laws of Washington State); the Chinese version is provided as a convenience translation.

This Privacy Policy describes how LumiArc LLC, a Washington limited liability company (“LumiDays,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes information about you. It applies to the personal data we collect or process when you access or use the LumiDays mobile application and related online products and services (collectively, the “Services”), and when you otherwise interact with us, such as through our customer-support channels. LumiArc LLC is responsible for the processing described in this policy and, where applicable, acts as the data controller.

LumiDays is an AI parenting-companion app for new parents. The Services are intended for adult parents who provide and manage their baby’s information; you must be at least 18 years old (or the age of majority where you live, whichever is greater) to hold an account and use the Services.

In short: we DO NOT sell your personal data, and we DO NOT use it for advertising or to train AI models.

We may update this policy from time to time; if we do, we will revise the date at the top of this page (see Section 10). If you have any questions about this policy or your personal data, please contact us using the details in Section 11.

1. Information We Collect

We seek to limit collection to information reasonably necessary to provide, secure, maintain, personalize, and improve the Services, and we describe it by category (rather than feature by feature). This section states what categories of personal data we collect and where they come from; how we use it is described in Section 2, and how we disclose it in Section 3.

1.1 Information You Provide to Us

Account and identity data — your basic account information, such as your name / display name and avatar, and the country/region you self-report (used to make content more locally relevant; this is not GPS location). If you register with an email and password, we also collect your email address and the password you set to create your account.
Your and your baby’s basic information, and the background notes you provide — basic information about your baby (such as name, birthday, and gender), together with any background notes you optionally provide about your baby or about yourself.
Optional health, development, and wellbeing information — information about you or your child that you choose to provide, such as pregnancy, childbirth, postpartum, feeding, allergy, sensitivity, illness, symptom, medication, growth, sleep, developmental, behavioral, or emotional-wellbeing information. This may come from notes, timeline records, uploads, or your conversations with the AI companion, as well as health-related summaries or inferences generated from what you provide. This is health personal data; you are free not to provide it, and you can manage, update, or delete it through the controls available in the app, or by contacting us. Additional disclosures for consumer health data are in our Consumer Health Data Privacy Policy.
Family and member data — information relating to your family and its members, such as the family name, members, and invitations.
The content you create and the media you upload (User Content) — the content you create in LumiDays, including your conversations with the AI companion, your growth records, and the photos and videos you upload.
Preferences and subscription data — your app preferences (such as language, theme, and notification settings) and your plan and subscription status.

If you use the optional care log, we collect the care records you enter — such as feeding, diaper, sleep, and pumping records, with their times, amounts, and notes — to store them, show summaries, and share them with your family as described below.

You may also ask the AI companion to organize a typed or dictated care note into draft records for your review. Voice input through the care log’s microphone button is processed on your device; we do not receive or keep audio recordings.

1.2 Information We Collect Automatically

Usage data — limited product-interaction and diagnostic data, collected through our analytics and diagnostics service providers, to understand performance, troubleshoot issues, and improve the Services. We do not sell this data or use it for advertising or cross-context tracking. If you choose to submit an error or crash report, any text you write in it is sent along with it to help us diagnose the problem.
Device and push data — your push notification token, so that we can deliver notifications you have enabled. You can turn push notifications off in your device settings at any time.

1.3 Information We Collect from Third Parties

Third-party sign-in data — when you sign in with Apple or Google, we receive basic profile information from that provider (such as your email, name, and avatar).
Subscription transaction data — when you subscribe through the App Store or Google Play, we receive the transaction information needed to confirm your plan. We do not collect or store your credit card number — payment is handled by Apple / Google.

1.4 Location and Photo Metadata

LumiDays does not track your real-time location and does not use GPS. The country/region you self-report in your account is used only for coarse localization (see the account and identity data in Section 1.1).
Photos and videos shown on the ordinary timeline: LumiDays does not use photo or video metadata to track your location. For standard uploads, we remove or limit embedded metadata (such as location, EXIF) before content is displayed.
Original-quality retention (optional feature, available on certain plans): If you turn on “keep original photo quality,” the original file may retain the metadata created by your device, such as capture time, device information, or location. Original files remain within your family’s private space, subject to your family’s permissions and the retention and deletion practices described below; they are never made public, never used for analytics or advertising, and never sold.

2. How We Use Your Information

We use the personal data described in Section 1 for the following purposes:

To create, authenticate, and manage your account, and to provide the Services.
To provide and personalize your experience — including the daily letters, parenting reference information, the AI companion, your family’s private baby growth timeline, and the care log.
To enable family sharing and manage the permissions of members within your family.
To manage your preferences, plan, and subscription.
To send notifications you have enabled (such as when a family member joins).
To send account- and security-related service (transactional) emails, such as account-verification and password-reset messages.
To understand overall app usage and improve our product.
To keep users safe — automated systems may identify content presenting an apparent risk of serious harm; we may surface relevant help resources within a conversation (see Section 6.6 of the Terms), and, in limited circumstances, authorized personnel may review the minimum information reasonably necessary to assess safety, investigate abuse, or maintain the security of the Services.
To maintain the security of the service, prevent abuse, and comply with our legal obligations.

We do not use your personal data to build advertising profiles, to profile your behavior, or to place you into advertising segments, and we do not use it to train AI models. Our use of sensitive information, including optional health information, is limited to the purposes described above. Where required by applicable law, we obtain your explicit consent before collecting, using, or sharing that information.

3. How We Disclose Your Information

We do not sell your personal data, and we do not disclose it to third parties for their own marketing purposes or for their own independent use. Your conversations with the AI and your baby’s records and photos are never sold to advertisers or used for marketing / advertising purposes.

We disclose personal data only to the following categories of recipients, and only as needed to provide the service:

Vendors and service providers (sub-processors) — third parties that process data strictly to provide the service to us, under obligations to provide the same or equal protection for personal data as described in this policy (see the list below).
Your family members and caregivers — content in a family is shared among its members according to the permissions set by the family’s administrators. Members may include relatives, as well as caregivers the administrators invite to help care for the baby (such as a nanny). Your conversations with the AI are shared by default with the admin family members you have authorized; you can also start a private conversation visible only to you. Before inviting a member, make sure they are someone you trust.
Apple and Google — for third-party sign-in and for App Store / Google Play subscription payment.
Legal, safety, and rights protection — where we believe in good faith that disclosure is required to comply with a legal obligation or lawful request, or is reasonably necessary to protect the rights, property, or safety of our users, the public, or LumiArc LLC.
Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, your personal data may be transferred along with it, and will remain subject to this policy. Any successor will be required to handle consumer health data consistently with applicable law and our Consumer Health Data Privacy Policy.
With your consent or at your direction — where you have asked us to share information, or otherwise consented.

Care records: Care records — including feeding records such as breastfeeding — are shared with authorized people in your family; administrators, and members given editing access, can add, edit, and remove them. Administrators can change or remove a member’s access at any time.

We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you.

3.1 Our Service Providers

To provide the service, we engage the following categories of service providers (sub-processors), located primarily in the United States:

Infrastructure, hosting, and storage providers — for backend hosting and file storage.
AI provider — for powering the AI conversation features and AI note organization in the care log.
Platform, payment, and operational-support providers — including app-store billing, third-party sign-in, and push notification and email delivery.

Additional detail about our AI provider: LumiDays engages a third-party artificial intelligence provider — currently Anthropic, PBC (United States) — to power the AI conversation features. When you use these features, we send the provider the content and relevant context needed to generate a response; depending on what you submit, this may include personal or health-related information. We do not intentionally include your account credentials, email address, or internal account identifier in AI requests — though content you choose to submit may itself contain identifying information. The provider processes this content on our behalf under its commercial and data-processing terms, which require it to process the content only on our instructions, to keep it confidential and secure, and which prohibit using it to train its AI models; we do not permit any such training use. Under those terms, the provider is required to provide the same or equal protection for personal data as described in this policy. Retention may vary depending on the models and API features used; we configure our use of the service to minimize retention where reasonably available. If we add or change AI providers, we will update this policy and the in-app disclosure before the change takes effect.

Care log note organization: When you use care note organization, we send the note text and the date and time context needed to interpret it to the AI provider described above, under the same terms, solely to prepare draft records for your review.

We may update this list as our service providers change. Where required by law, we will provide notice or obtain your consent before a material change takes effect (see Section 10, “Changes to This Policy”).

4. Data Retention

While you use the service: We retain your account, baby profile, care records, timeline content, media, and conversations for as long as your account remains active, in order to continue providing the service; when you delete your account or individual content, it is deleted as described in this section.
Account deletion: You can initiate deletion yourself in the app under “Settings → Delete Account.” Deletion begins with a 30-day grace period, during which you can restore your account yourself; after the grace period, we begin permanently deleting your account and related data (including your personal-space conversations and the content you stored personally), subject to limited backup, security, fraud-prevention, financial-record, and legal-retention requirements. Shared family content is addressed in the next point below. During the grace period, you may also choose to permanently delete your account immediately; this begins right away and cannot be undone, subject to the limited backup, security, fraud-prevention, financial-record, and legal-retention exceptions noted above. Please note: deleting your account does not automatically cancel any paid subscription billed through Apple App Store / Google Play; if you have one, please cancel it separately in your App Store / Google Play subscription settings.
Shared family content: Content you contributed to a shared family (such as baby care records, timeline entries, and shared conversations) may remain with the family if you leave or are removed from it, and may remain available to the other authorized members after you delete your account, shown without your name. If no active administrator remains, the family is disbanded and its content is deleted after the applicable restoration period (see the next point). For health data, a verified deletion request under our Consumer Health Data Privacy Policy will still be honored.
Care records: Removing a care entry hides it from view but may not permanently erase it. To request permanent deletion, contact us as described in Section 7.
Family disbandment: After a family is disbanded, its data remains restorable for up to one year, after which we permanently delete it; residual copies in routine backups are removed within the further period described above.
Safety-related records: Where content triggers our safety mechanisms, we retain only the minimum necessary related records for safety review, kept only for as long as needed for that purpose, with access limited to authorized personnel.
Deletion-request records: To meet compliance requirements, we retain limited records of deletion requests for up to 24 months, applying data minimization.

After the periods described above have elapsed, we may still retain data to the extent and for the period necessary to prevent fraud and abuse, maintain the security of the service, comply with the legal obligations to which we are subject, or keep required financial records.

5. Security and International Transfers

International transfers: Your data is stored and processed on cloud infrastructure located in the United States. If you use LumiDays from outside the United States, you understand and agree that your data will be transferred to the United States and handled as described in this policy.

Security measures: We protect your personal data with reasonable technical and organizational measures, including restricting access to personal data, encrypting data in transit and, where appropriate, at rest, and applying data minimization to our audit and anti-abuse data. Your baby’s photos, videos, and timeline content are private to your family and are not made public. However, no transmission over the Internet and no method of data storage is ever fully secure; despite our ongoing efforts, we cannot guarantee the security of your data or communications.

Security-incident notification: If a security incident that may affect your personal data occurs, we will notify you as required by applicable law.

6. Your Choices

You can control your data in the following ways:

Optional health information: You may choose not to provide it, and you can delete it in settings (or by contacting us). Declining to provide it will not prevent you from using LumiDays, although certain personalization, memory, or health-related features may be limited.
Care-data controls: You can withdraw your health and care data consent at any time in the app’s settings. Withdrawal stops further collection but does not delete records already saved, and records already shared with your family may remain available to its other members who have access to them; deletion is a separate request (see Section 4 and our Consumer Health Data Privacy Policy).
Private conversations: Your conversations with the AI are shared by default with the admin family members you have authorized; you can also start a private conversation visible only to you (see Section 3).
Push notifications: You can turn them on or off at any time in your device settings.
Account deletion: You can delete your account and related data yourself in the app under “Settings → Delete Account” (see Section 4).
Marketing and advertising: We do not engage in behavioral advertising or cross-context tracking, so there is no advertising opt-out for you to set.

7. Your Rights

Depending on the laws of your location, you may have the following rights regarding your personal data:

Access: Obtain the personal data we hold about you.
Correction: Correct inaccurate or incomplete data (most data can be edited by you directly in the app).
Deletion: Delete your account and related data yourself via “Settings → Delete Account” (see Section 4).
Objection / restriction of processing: Object to, or restrict, certain processing where applicable.
Withdrawal of consent: Where we rely on your consent — optional health information, AI note organization in the care log, and push notifications — you can withdraw it at any time using the applicable in-app privacy or notification controls, or by contacting us. Withdrawing consent and requesting deletion are separate choices.
Lodging a complaint: Where applicable, you have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise any of the above rights, please contact us at the email in Section 11; to protect your account, we may need to verify your identity. For rights specific to your region, see Section 9.

8. Children’s (Baby) Data

LumiDays is intended for adult parents, and the direct users of the app are adult parent accounts; holding an account requires meeting the age eligibility stated at the top of this policy.

A baby has no account, does not sign in, and is not a user of the app. All baby data (name, birthday, gender, photos, videos, AI memories, care records) is entered and controlled by the adult parent — or entered by other adults the parent invites into the family, within the permissions the parent sets.
Purpose lock: All information about your baby is used only in the context of providing the LumiDays service. We do not use baby data for marketing, do not sell it, and do not give it to advertisers.
As the parent / guardian, you can access, correct, or delete your baby’s data — through in-app editing where available, or by deleting your account or disbanding your family to remove it.
Baby data is accessible only to members of that family, and only in accordance with their permissions.

For U.S. users (COPPA): LumiDays is designed for and directed to adults, not children. Children do not create accounts or directly use the Services; information about a child — such as a child’s name, birthday, photos, videos, and health or developmental information — is submitted and managed by an adult parent or legal guardian, or by other adults they authorize. We do not knowingly permit children under 13 to create accounts or directly submit personal information through the Services. If you believe a child has created an account or directly submitted personal information without appropriate adult involvement, please contact us at the email in Section 11 — we will delete that data and close any such account.

For EEA / UK users (GDPR-K): A baby’s personal data is processed on the basis that you provide and manage as the parent / guardian.

9. Additional Disclosures for Certain Regions

If and to the extent the GDPR / UK GDPR applies to our processing of your personal data, we rely on the following legal bases:

Performance of a contract — to provide the LumiDays service you have requested, including your account, your and your baby’s basic information, family and member data, your User Content (such as AI conversations, the timeline, and the media you upload), your preferences and subscription, and the delivery of notifications you have enabled.
Your consent — for optional health-related information (which rests on your explicit consent), and, where applicable in your region, for usage analytics. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Our legitimate interests — to understand app usage and improve the product, to deliver notifications, and to keep the service secure and prevent abuse, in each case balanced against your rights and interests.
Legal obligation — where processing is necessary to comply with a legal obligation to which we are subject.

For a child’s (baby’s) personal data, processing additionally rests on the consent you provide and manage as the parent / guardian (see Section 8). You also have the rights listed in Section 7, including the right to lodge a complaint with a competent supervisory authority.

9.2 California, USA (CCPA / CPRA)

If the CCPA / CPRA applies to our processing of your personal information, California residents have the right to know about, access, and delete the personal data we collect, and the right not to be discriminated against for exercising these rights. We do not “sell” personal information, we do not “share” personal information for cross-context behavioral advertising, and we do not process personal information for “targeted advertising” purposes (the quoted terms are as defined under California law).

For the categories of personal information we collect, see Section 1. We use sensitive personal information (such as optional health information) only for the purposes described in Section 2, and not for the sensitive-inference purposes listed in California Civil Code § 1798.121.

10. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you within the app or through this page, and update the “Last updated” date at the top. Where a material change substantially expands how we process your (or your baby’s) personal data, we will seek your affirmative in-app consent where required by applicable law, rather than relying on continued use alone. For other changes, your continued use of LumiDays after the change takes effect indicates your awareness of the updated policy.

11. Contact Us

If you have any questions or requests regarding this privacy policy, your personal data, or the exercise of your rights:

LumiArc LLC (Seattle, Washington)
Privacy and legal contact: privacy@lumidays.ai
General support: support@lumidays.ai
Website: https://lumidays.ai

← 回首頁