Effective date: August 28, 2026
1. Who we are
This Privacy Policy explains how LUMA (“LUMA”, “we”, “us”) collects, uses, and shares information when you use the LUMA application and related services (the “Service”). By using LUMA, you acknowledge this Policy. For privacy questions, contact hello@luma.app.
2. Information we collect
We may collect: • Account and device data: app version, language, device type, and diagnostic logs. • Content you provide: song titles, lyrics, prompts, style and mood choices, uploaded or recorded audio, voice samples, photos, and looks. • Purchase data: subscription status, coin balance, and store transaction identifiers (we do not receive your full card number from Apple or Google). • Usage data: screens visited, generation attempts, error events, and settings. • Communications: messages you send to support. In Safe Mode or local preview, some of this information stays only on your device and is not sent to our servers.
3. How we use information
We use information to: provide and operate the Service; generate lyrics, music, voice, and video that you request; maintain your library and settings; process payments and restore purchases; prevent fraud and abuse; debug and improve performance; communicate about the Service; and comply with law. We do not sell your personal information and we do not use your voice or photos to train public advertising models without a separate consent.
4. Voice and audio
If you record or upload a voice, that audio is used to create or preview an AI voice profile for your account. You must have the right to use that voice. Voice samples may be sent to a processing provider solely to complete the clone or synthesis you requested. You can delete a saved voice from My Voice. Deletion on-device may not immediately erase copies already processed by a provider; we will request deletion where the provider allows it.
5. Photos and likeness
Photos you upload for Music Video or Photo Singer are used to prepare or generate a visual look for your song. We process images only for that purpose. Do not upload photos of children or of other people without permission.
6. Legal bases (EEA/UK)
Where GDPR or UK GDPR applies, we process data on these bases: performance of a contract (providing the Service you request); legitimate interests (security, product improvement, fraud prevention); consent (optional marketing or certain voice/photo processing); and legal obligation.
7. Sharing
We share information with: • Infrastructure and AI processors that generate music, clone voices, store files, or create video, acting on our instructions. • App stores and payment processors to complete and restore purchases. • Professional advisers and authorities when required by law or to protect rights and safety. We require processors to protect data and use it only for LUMA-related processing. We do not sell personal information.
8. Retention
Library songs, lyrics, looks, and voice profiles stored on your device remain until you delete them or uninstall the app. Server-side jobs, logs, and backups, if any, are kept only as long as needed to provide the Service, resolve disputes, and meet legal requirements, then deleted or anonymized.
9. Your rights
Depending on your country, you may have the right to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent. You may also lodge a complaint with a data protection authority. You can delete songs in Library, remove a voice in My Voice, and clear looks. To request deletion of account-side data, email hello@luma.app from the address associated with your use of LUMA.
10. Children
LUMA is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age. If you believe a child provided data, contact us and we will delete it.
11. Security
We use reasonable administrative, technical, and organizational measures to protect information, including restricting secrets to the server, not placing API keys in the app bundle, and limiting access to production credentials. No method of transmission or storage is 100% secure.
12. International transfers
Your information may be processed in the United States or other countries where we or our processors operate. Where required, we use appropriate safeguards such as standard contractual clauses.
13. Do Not Track and cookies
The mobile app does not respond to browser Do Not Track signals. If you use a LUMA website, we may use strictly necessary cookies and similar storage to keep you signed in and remember preferences.
14. Changes
We may update this Privacy Policy. The effective date below will change when we do. Continued use of LUMA after an update means you acknowledge the revised Policy.
15. Contact
LUMA Privacy Email: hello@luma.app