This policy explains what data Lumii ("the app", available at thelumii.app and go.thelumii.app) collects, what it uses it for, who it shares it with and what rights you have. We wrote it in plain language: if anything is unclear, email us at mauricio@thelumii.app. The Spanish version of this policy is equally valid.
1. Who is responsible for your data
The controller of your personal data is C-Link International LLC (Tax ID 851132139), 1908 N 40th Ave, Hollywood, FL 33021, United States. You can contact us at mauricio@thelumii.app.
2. What Lumii is and why it reads emails
Lumii is a personal finance app. It lets you record your expenses and income, set budgets and savings goals, track your net worth and see statistics.
In most Latin American countries there is still no open-banking system that lets a personal finance app connect to your bank. Banks do, however, email you every time you pay, receive or transfer money. Lumii uses those emails: if you authorize it, it searches your Gmail or Outlook only for notifications from the bank sender addresses you add and, with the help of artificial intelligence, turns them into organized transactions that you review and confirm. Connecting your email is optional: you can also record transactions manually.
3. What data we collect
Account data. If you sign in with Google, we receive your name, email address and profile picture. If you sign in with a one-time code sent to your email, we only receive your email address. We also store the country, currency and time zone you choose.
Data you enter. Categories, budgets, monthly income, transactions (merchant, amount, date, notes), savings goals, accounts and net-worth items. For your accounts and cards we only store a name, the bank, the type and, optionally, the last 4 digits. We will never ask for full card numbers, bank passwords or PINs.
Gmail data (only if you connect your account). With your authorization, the app:
- Searches only for emails sent by the bank sender addresses you add in Settings (for example, notifications from your bank or digital wallet). You can add words to exclude certain emails from those senders. It does not read the rest of your inbox.
- From each matching email it extracts the merchant, amount, currency, date, account and whether it is an expense or income. We store that result together with the email's subject, date and message ID, so you can review it and so it is never processed twice. We do not store the full text of the email.
- Checks those senders automatically once a day, and whenever you tap "Sync now", for as long as Gmail stays connected.
- Has read-only access: it does not send, delete or modify emails, and it does not change your Gmail settings.
Google describes this permission as "View your email messages and settings" because Gmail does not offer a narrower permission that allows reading an email's content. Lumii applies the restriction to your bank senders on every search.
Outlook data (only if you connect a personal Microsoft account: Outlook.com, Hotmail or Live). Instead of Gmail you can connect Outlook; each Lumii account connects one mailbox at a time. Lumii does exactly the same as with Gmail: it searches only for emails from the bank senders you add (excluding Deleted Items and Junk Email), extracts and stores the same data from each notification (with a fingerprint of the email's identifier, so it is never processed twice), does not store the full text of the email and has read-only access: it does not send, delete, move or modify emails. Microsoft asks you for three permissions: read your mail, maintain that access (for the daily check) and read your basic profile (to know which address you connected).
WhatsApp data (only if you connect your WhatsApp). You can send Lumii a WhatsApp text, photo or screenshot (of a receipt, a Yape payment or a transfer), a PDF or a voice note with an expense or income your bank doesn't notify you about, such as cash spending. To connect your number you send Lumii a one-time code from your WhatsApp. When you connect your WhatsApp or write to Lumii we store your phone number encrypted (so we can reply to you and message you on WhatsApp, for example to help you use Lumii or tell you what's new; if you ask us not to, we won't), an encrypted fingerprint of it (to recognize your messages), its last 4 digits (to show it to you in Settings) and your WhatsApp profile name. We also store the text of the messages you write to us and of our replies, so the Lumii team can read the conversation and reply to you personally when needed (for example, if you ask us a question); those messages are deleted automatically after 180 days, or earlier if you delete your account. Photos, PDFs and audio are not stored: they are read to create the transactions and then discarded (we only note that you sent a photo, a PDF or an audio, with any text that came with it). We also keep each message's identifier for 7 days, so it isn't processed twice. The transactions created go to your "to review" list for you to confirm. The replies Lumii sends you on WhatsApp only state the amount and date of each transaction: they never include anything from your emails. You can disconnect your WhatsApp at any time in Settings.
Payment data (only if you subscribe to Lumii Plus). Payments are processed by Stripe: your card details are received and stored by Stripe directly, and Lumii never sees them. We only store what we need to know which plan you have: the customer and subscription identifiers Stripe gives us, the subscription status (trial, active, canceled), whether it is monthly or yearly, the trial and paid-period dates, and whether you already used the free trial.
Invitations (only if you use an invitation link). If you join Lumii through a friend's link, we store which account invited you, the date you created your account and the date you connected Gmail, so that person gets the extra transactions for inviting you. So that the same Gmail address never counts twice, we only store an encrypted fingerprint of your address (a code that cannot be turned back into it), never the address itself. The person who invited you sees your profile name (or your email with most of it hidden), the date you signed up and whether you have connected Gmail; never your transactions, your emails or your Gmail address. Everything is deleted when you delete your account.
Help messages and surveys. If you contact us through the in-app help button, we store your message, the page you were on and your browser type, so we can reply. If you answer the short in-app surveys (for example, the three questions shown before connecting Gmail: how clear Lumii is, whether you had already added your bank senders and whether you know how to continue past Google's warning), we store your answers and any comment you choose to leave, to improve the app. They are optional: you can skip them.
Technical data. Basic server logs (date, requested page, errors) to operate the app and detect abuse. On the sign-in screen we use a bot check (Cloudflare Turnstile) that analyzes technical signals from your browser. The cookies and browser storage we use are explained in our Cookie Policy. To improve the app, we internally measure how long each usage session lasts: while you have Lumii open, the app signals once a minute that you are still there, and we only store when each session starts and ends, without recording which pages you view or any financial data. On the website (thelumii.app) we also measure, on our own and without cookies, which pages are visited, how far they are read, whether the video is played and which buttons are tapped, to learn which pages and ads work best: each visit carries a random number that is not stored in your browser, together with the device type (phone or computer), the time zone, the site you came from and the campaign tags of the link. We do not store your IP address or anything that identifies you; these records are kept in a Google spreadsheet (Google Workspace) that only our team can access. Apart from the Meta pixel on the website and on two confirmation screens in the app (see section 6), we do not use advertising cookies or third-party tracking or analytics tools.
4. How we use your data
- To show you your finances: transactions, budgets, goals, net worth and statistics.
- To suggest transactions based on your bank notifications. Every imported transaction stays pending until you confirm or correct it.
- To generate, when you ask for it, a monthly report with recommendations.
- To answer, when you use Lumii IA, the questions you ask about your finances.
- To send you emails about your account and about getting the most out of Lumii, for example a welcome email showing what you can do in the app, or Lumii's news. To personalize them we only check which features you already use (not your amounts or transactions). You can stop receiving them with the link included in every email.
- To enforce your plan's limits (for example, how many automatic transactions or reports you have left this month) and, if you subscribe to Lumii Plus, to manage your subscription and its charges.
- To keep the app secure and respond to your support requests.
We do not sell your data or build profiles for third parties. Your financial data and your emails are never used for advertising. The only things we share for advertising purposes are your visits to the website and the signal that you created your account or activated Lumii Plus, to measure our ads (see Meta, in section 6).
5. Use of Google user data
Lumii's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Gmail data only to provide the feature you see and use: turning your bank notifications into transactions.
- We only transfer it to third parties when necessary to provide that feature (the AI provider, see section 6), to comply with the law, or as part of a merger or acquisition, with prior notice to you.
- We do not use it for advertising or credit assessment, and we do not sell it.
- No human reads your emails, unless you give us explicit permission for a specific support case, it is necessary for security purposes (for example, investigating abuse), or it is required by law.
- We do not use it to train or improve artificial intelligence models, whether our own or third parties'.
Data Lumii receives from Outlook (Microsoft) gets the same treatment: it is used only to turn your bank notifications into transactions, it is not used for advertising or to train artificial intelligence models, it is not sold, and no person reads your emails, except in the cases above.
6. Who we share your data with
Only with the providers we need to run the app (and with Meta, to measure our ads), and only what is necessary:
- Anthropic (provider of the Claude AI model). To extract a transaction we send it the sender, subject, date and text of the email, together with your name (to recognize transfers between your own accounts) and the names of your categories and accounts. If you import transactions from your account statement (PDF or CSV) or from screenshots of your bank, we send it those files together with the name of the account you chose and the names of your categories; the files are not stored anywhere: they are read and discarded. For the monthly report we send a summary of your totals by category and your top merchants. When you ask a question in Lumii IA, we send your question, the last messages of that conversation and the data needed to answer it (for example, your totals by month or category, your transactions at a merchant, your budgets, goals or net worth); conversations are not stored: we only count how many questions you asked in the month to apply your plan's limit. Anthropic processes this information only to answer our request and, under its commercial terms, does not use it to train its models. If you connect your WhatsApp, we also send it the texts, photos, PDFs and transcribed voice notes you send Lumii, together with your category and account names, to create the transactions; and if you write us a question, we send it your question, your profile name and the latest messages of that conversation, together with general information about Lumii, to answer it (never your transactions or anything from your emails).
- Google, for sign-in and, if you authorize it, Gmail access.
- Microsoft, if you connect Outlook, for read-only access to your mail.
- Supabase (database and authentication) and Vercel (app hosting), where your data is stored and processed securely.
- Resend, to email you your sign-in code and emails about your account.
- Stripe, to process Lumii Plus payments if you subscribe. It receives your email address, your card details (which you enter directly on Stripe's page) and, if you provide it, your billing address. Stripe handles that data under its own privacy policy and also uses it to prevent fraud, as its activity requires.
- Cloudflare, for the bot check on the sign-in screen.
- Meta (Facebook and Instagram), to know whether our ads work. On the website (thelumii.app), a Meta code (the “pixel”) tells Meta when you visit a page and when you tap a button to create your account or upgrade to Lumii Plus. In the app, only on two confirmation screens in the app (right after you create your account and when you activate Lumii Plus), the pixel tells Meta that this step happened. Meta receives technical data from your browser, such as your IP address, browser type and the page visited, and may link it to your Facebook or Instagram account, under its own privacy policy. We do not send Meta your name, your email, your transactions or anything from Gmail, and in the app its code does not load on any other screen. You can block it in your browser settings or with an ad blocker and the app will keep working.
- Meta (WhatsApp), if you connect your WhatsApp. The messages you send Lumii and its replies go through Meta's WhatsApp Business platform, which handles them under its own terms. On WhatsApp we only reply with the amount and date of each transaction; we never send Meta anything from your emails.
- OpenAI, only if you send us a voice note on WhatsApp: we send it the audio to turn it into text, and Anthropic then reads that text like any other message. The audio is not stored in Lumii, and under its business terms OpenAI does not use it to train its models.
- Sentry, to alert us when something fails in the app. It only receives technical information about the error (what failed, on which screen and from which browser), without your name, email, IP address or financial data: we remove them before sending. It does not record your screen.
- Authorities, only when required by law or court order.
To display a merchant's logo, our server requests the image using the merchant's public domain (for example, rappi.com), without sending any of your data.
C-Link International LLC and most of these providers are located in the United States, so your data is transferred to and stored outside your country. We only make such transfers to providers that offer an adequate level of protection, and we apply the same safeguards described in this policy.
7. How long we keep your data
We keep your data while you have an account. You can delete your account at any time from Settings: we then revoke access to your Gmail (or delete the Outlook access) and delete your data immediately; technical backups are deleted within 30 days at most, except for anything the law requires us to keep. Server logs are deleted automatically within 90 days at most.
You can disconnect Gmail at any time from Settings or from your Google Account permissions. When you disconnect it from Lumii, we revoke the permission with Google, delete the stored access and stop reading your emails. Transactions already imported are kept until you delete them. If you connected Outlook, disconnecting it deletes the stored access and stops reading your emails; Microsoft does not let an app withdraw its own permission, so you can also remove it at account.live.com/consent/Manage.
8. How we protect your data
We use encrypted connections (HTTPS) and store your Gmail or Outlook access token encrypted. Each user can only see their own data. We limit internal access to what is strictly necessary: no one on our team reviews your transactions or emails, except in the cases described in section 5. No system is infallible: if a security incident affecting your data occurs, we will notify you and report it to the authorities when applicable.
9. Your rights
Wherever you are, you can ask us at any time for:
- Access: to know what data we hold about you. You can also download it yourself from Settings ("Export my data").
- Rectification: to correct inaccurate data.
- Deletion: to delete your data or your account.
- Objection: to object to a specific use of your data.
You also have these rights under the data protection law of your country — for example, Law No. 29733 in Peru, the Federal Law on the Protection of Personal Data Held by Private Parties in Mexico, Law 1581 of 2012 in Colombia, Law 25,326 in Argentina, Law 19,628 in Chile or the LGPD in Brazil.
Email us at mauricio@thelumii.app. We will reply within the time limits set by the law that applies to you. If you are not satisfied with our answer, you can contact the data protection authority in your country.
10. Cookies
We use cookies and browser storage that are strictly necessary to keep you signed in, protect the Google connection and remember a few preferences, plus the Meta pixel on the website and on two confirmation screens in the app. See our Cookie Policy for details.
11. Minors
The app is only for people aged 18 or over. We do not knowingly collect data from minors.
12. Changes to this policy
If we change this policy we will notify you in the app and update the date above. If the change is significant — for example, if we started using your data for something new — we will ask for your consent.
13. Contact
For any privacy question, email us at mauricio@thelumii.app. See also our Terms of Use and Cookie Policy.