Privacy Policy

This Privacy Policy explains how Lummie (lummie.app, "we", "us") collects and uses personal data when you call or chat with our AI characters. We process data in line with the EU General Data Protection Regulation (GDPR).

• Account data: your email address, name and profile picture when you sign up with email, Google or GitHub.
• Voice calls: your voice is streamed in real time to our AI provider to understand you and generate replies. Lummie does not record or store the audio of your calls, and live captions are not saved. We store call details: start and end time, duration, the character, mode, language and topic you chose, and usage needed for billing.
• Text chats: the messages you send and the replies you receive are saved so you can continue the conversation later.
• Billing data: your plan, minute balance and its history. Card details are handled by Stripe; we only keep Stripe customer and subscription identifiers.
• Technical data: IP address, browser and device type. Analytics cookies are used only if you allow them.

• To provide calls, chats and your account — performance of a contract (Art. 6(1)(b) GDPR).
• To bill minutes and subscriptions — contract and legal obligations under tax and accounting law (Art. 6(1)(b) and (c)).
• To keep the service secure and prevent abuse — legitimate interests (Art. 6(1)(f)).
• Analytics — your consent (Art. 6(1)(a)), which you can withdraw at any time in the cookie settings.

Replies in calls and chats are generated by OpenAI models. Your voice and messages are sent to OpenAI only to produce those replies. Under OpenAI's API terms, this data is not used to train their models and may be kept by OpenAI for up to 30 days for abuse monitoring.

We do not use your conversations to train AI models. Mia, Leo, Ava and Sam are fictional AI characters, not real people.

• OpenAI — voice and text AI.
• Clerk — sign-in and account management.
• Stripe — payments and subscriptions.
• Vercel — hosting.
• Neon — database, hosted in the EU (Frankfurt).
• Google Analytics — usage statistics, only with your consent.

Some providers process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

• Account data and text chats — until you delete your account.
• Call details and billing records — as long as tax and accounting law requires.
• Call audio and live captions — not stored by Lummie.

You can access, correct, export or delete your data, object to or restrict its processing, and withdraw consent at any time. Write to legal@lummie.app. You can also complain to the Polish data protection authority (UODO) or the authority in your country.

Lummie is for people aged 18 and over. We do not knowingly collect data from children.

Privacy questions: legal@lummie.app. Help with your account: support@lummie.app.