1. In short
Lumii only uses cookies and browser storage that are strictly necessary for the app to work: keeping you signed in, protecting the Google connection and remembering a few preferences. The only exception is the Meta pixel, which loads on this website and on two confirmation screens in the app to measure our ads (see sections 5 and 6). We do not use analytics cookies and we never share your financial data or your emails with advertisers.
2. What cookies are
Cookies are small files a website stores in your browser. Browser storage (localStorage and sessionStorage) serves a similar purpose, but its data is not sent to our servers.
3. Cookies used by the app (go.thelumii.app)
- Session (sb-…-auth-token). Keeps you signed in so you don't have to log in every time. Only our server reads it: it cannot be read by the browser. Lasts until you sign out or delete your account; after 30 days without using Lumii, or after one year, you sign in again. Necessary.
- Session protection (lumii-sesion-httponly). Marks that your session is already protected so the browser cannot read it. It contains no data about you and cannot be read by the browser. Necessary.
- Email connection protection (lumii_oauth_state). Created when you connect Gmail or Outlook; it checks that Google's or Microsoft's response matches a request you made, to prevent attacks. Lasts 10 minutes at most and cannot be read by the browser. Necessary.
- Invitation (lumii_invitacion). Only if you open a friend's invitation link: it keeps that code until you connect your email, so the person who invited you gets the extra transactions. Lasts 30 days at most, is deleted when you connect your email and cannot be read by the browser. Necessary for the invitation.
4. Browser storage
- Preferences, such as the categories you highlight on the Dashboard or the help guides you have already seen.
- Email connection status, to quickly show you when the last sync happened.
- Internal control of the current session (for example, not repeating a task already done while the tab is open). Deleted when you close the tab.
This data stays on your device and does not contain your transactions or emails.
5. Third-party services
- Cloudflare Turnstile, on the sign-in screen, checks that you are a person and not an automated program. Cloudflare processes technical signals from your browser for that purpose only, under its own privacy policy.
- Google, when you sign in with Google or connect Gmail, on its own pages, under its privacy policy.
- Microsoft, when you connect Outlook, on its own pages, under its privacy policy.
- Meta (pixel), in the app only on two confirmation screens: right after you create your account and when you activate Lumii Plus. It tells Meta about that step to measure our ads and may store the _fbp cookie (lasts up to 90 days). Meta handles it under its own privacy policy. Its code does not load on any other screen of the app. It is not necessary: you can block it and the app will keep working.
- YouTube (privacy-enhanced mode, youtube-nocookie.com), only if you tap ▶ to watch the Lumii video on this website. Nothing from YouTube loads before that. When you play it, Google may store data in your browser under its own privacy policy.
6. This website (thelumii.app)
Lumii's informational website loads the Meta pixel to measure our ads: it tells Meta when you visit a page and when you tap a button to create your account or upgrade to Lumii Plus, and it may store the _fbp cookie (lasts up to 90 days). It is not necessary: you can block it in your browser settings or with an ad blocker and the website will keep working. We also measure website usage on our own and without cookies (which pages are visited, how far they are read and which buttons are tapped), with a random number per visit that is not stored in your browser. It loads its fonts from Google Fonts, which receives technical data such as your IP address in order to deliver them.
7. How to control them
You can delete or block cookies and storage in your browser settings. If you block session cookies, you will not be able to sign in to the app.
8. Contact
If you have questions, email us at mauricio@thelumii.app. See also our Privacy Policy and Terms of Use.