Privacy Policy

This Privacy Policy explains how LumaNest handles information when you use the LumaNest iOS app, optional Cloud Sync, optional improvement program participation, AI-assisted features, subscriptions, this website, and related support channels.

Controller and service provider: H S, an individual sole proprietor operating LumaNest in Washington State, United States.

Public contact: hexacanvaslabs+support@gmail.com. Use the subject Privacy Request for privacy matters or Security Report for security matters. LumaNest does not publish a telephone number or detailed street address in this Policy.

1. Who this Policy covers

LumaNest is designed for adult parents, guardians, and caregivers. A child does not create or control a LumaNest account. Baby profiles and care records are entered and managed by adults responsible for the child.

Core logging, history, export, and personalized on-device sleep prediction can be used locally without creating an account. Cloud Sync is optional. Signing in, subscribing, or restoring a purchase does not by itself upload existing local care records.

Features not present in this release. The improvement program (Section 5), the AI Assistant (Section 6), and the website advertising and cross-site technologies (Section 7) are not part of the current LumaNest release. Sections 5, 6, and the advertising portion of Section 7 describe how LumaNest would handle information if those features are introduced later. They are published in advance so the boundaries are stated before any such processing begins. No improvement data is created, no information is sent to an external AI provider, and no advertising or cross-site technology is active today. If a feature is introduced, LumaNest will present the required notice and obtain the required consent at that time, and will update this Policy.

LumaNest is not a HIPAA covered entity or business associate. It is a direct-to-consumer app and is not a health plan, a health care clearinghouse, or a health care provider, and it does not operate on behalf of one. Information you enter is not protected health information under HIPAA. It is still handled under this Policy and applicable consumer privacy and health-data laws.

2. Information you choose to enter and keep locally

Depending on the features you use, you may enter or create:

• Caregiver profile information, such as a display name, relationship, and avatar symbol
• Baby profile information, such as a name or nickname, birth date, expected due date, and premature or corrected-age status when corrected age is used
• Sleep, nursing, bottle, solids, and diaper information; timers; edits; and deletions
• Custom food entries, notes, preferences, notification settings, and device-specific configuration
• Files you import, export, save, or share
• Personalized prediction inputs, model state, and prediction outputs created on the device

Without Cloud Sync, this information normally remains on that device and is not sent to LumaNest unless you choose to share it, include it in a support request, or use another feature that clearly sends it. Local data remains until you delete it, clear app data, or uninstall the app. An exported or shared file is controlled by the destination you select.

3. Account, device, and technical information

When you create or use an account, LumaNest and its authentication providers may process:

• Your email address and profile information made available by the sign-in provider
• Firebase Authentication, Sign in with Apple, or Google Sign-In identifiers
• Session information, security tokens, and an internal LumaNest account identifier
• Authentication and network security metadata, such as IP address, user-agent information, and IP-derived approximate country or region used to protect sign-up and sign-in, prevent abuse, operate network services, and produce service-level statistics

When account-backed features, notifications, purchases, the improvement program, AI-assisted features, or network services are used, LumaNest and its service providers may also process limited technical information such as an installation identifier, app version, push-notification token, request path or other network-backed feature interaction, request timing, status, error category, consent version, and synchronization metadata. First-party operational and diagnostic records may associate coarse location, interaction, and other network diagnostic data with an account or installation identifier so LumaNest can measure feature use, investigate account-specific problems, improve reliability, prevent abuse, and maintain the service. Network logs do not provide visibility into purely local screen views or taps that make no network request.

The initial app release does not include an advertising SDK or a general-purpose third-party app analytics or crash-reporting SDK, and LumaNest does not link Apple-provided crash or performance reports to a LumaNest account or installation identifier. Apple may independently provide operating-system diagnostics from users who choose to share them, subject to Apple's terms and controls. Authentication, purchase, operating-system, network, AI, analysis, and hosting providers may also generate technical records needed to operate and secure their services.

4. Cloud Sync and personalized prediction

When you separately and explicitly enable Cloud Sync, uploaded information may include:

• Caregiver and account profile fields
• Baby profiles and related settings
• Sleep, nursing, bottle, solids, and diaper information, including changes and deletion markers needed for synchronization
• Active sleep or nursing timer state
• Custom food entries and account-level preferences included in synchronization
• Device or installation identifiers and synchronization information, such as timestamps, version numbers, status, and conflict-resolution metadata

Cloud Sync information is stored on a Cloudflare-hosted backend and synchronized with authorized devices. Turning Cloud Sync off on one device stops upload and download on that device and lets local-first use continue; it does not delete the account, the existing cloud copy, or an Apple subscription. Signing out ends the account session and stops Cloud Sync on that device, and likewise does not delete the account or the cloud copy.

Relevant care records available on a device, including records received through Cloud Sync, may be used on that device to train, update, or calibrate a separate personalized prediction model for that baby. The model and prediction outputs remain on the device and are not part of the normal Cloud Sync payload.

5. Optional de-identified improvement program

Not part of the current release. This section describes a planned feature. No improvement data exists or is processed today.

Cloud Sync is a prerequisite for the optional improvement program, but enabling Cloud Sync alone does not enroll you in the improvement program. LumaNest must present a separate improvement program choice before using account-linked care data for that purpose.

If you opt in, LumaNest may use selected cloud-synchronized information to create de-identified or aggregated improvement data. Source information may include:

• Age or corrected-age ranges
• Sleep and wake timing, duration, and derived patterns
• Feeding and diaper information when recorded
• Care routines, feature interactions, and prediction-performance information
• Limited technical context needed to validate the dataset

Before information enters an improvement dataset, LumaNest will remove direct identifiers such as caregiver and baby names, email addresses, account identifiers, and device identifiers, and may generalize dates, times, or rare combinations. LumaNest will use reasonable measures designed to prevent the data from being linked back to an individual or household and will not attempt to re-identify it.

Improvement data may be used to evaluate and improve LumaNest’s own prediction methods, algorithms, and features, and to produce internal product statistics. LumaNest does not use improvement data to conduct scientific or human-subject research, and does not publish or present findings drawn from it. LumaNest may share de-identified or aggregated improvement data with service providers that assist with this analysis and that are contractually required to maintain confidentiality, use the data only for that purpose, apply appropriate safeguards, and not attempt re-identification.

You may withdraw from future improvement use in the app or by sending a Privacy Request. Withdrawal stops new improvement use associated with your account after it is processed. It may not remove information already irreversibly de-identified, combined into aggregate statistics, or incorporated into completed internal analyses.

6. Optional AI Assistant and external language-model providers

Not part of the current release. This section describes a planned feature. LumaNest does not send any information to an external AI provider today.

When offered, the AI Assistant is optional. Before personal information is sent to an external AI provider, LumaNest will present a clear disclosure and request explicit permission. The AI Assistant is activated by a user request and does not automatically send the entire Cloud Sync account.

Depending on the request and permission shown in the app, the limited context sent for an AI response may include:

• The user’s question and recent AI conversation context
• A baby’s first name or nickname
• Age or corrected age
• Sleep, feeding, and diaper information
• Selected care records, trends, preferences, or derived summaries relevant to the request

LumaNest may use commercial API services supplied by providers such as OpenAI or Anthropic. Those providers process prompts and outputs on LumaNest’s behalf under their commercial terms and data-processing commitments. LumaNest will use business or API configurations in which customer inputs and outputs are not used for general model training by default, and will not opt this data into provider model training without a separate explicit permission.

LumaNest may retain and use de-identified or aggregated AI Assistant interactions to improve LumaNest’s own prompts, retrieval, safety systems, personalization, product design, and algorithms. AI-generated content may be inaccurate, incomplete, outdated, biased, unsafe, or unsuitable for a specific child and is not medical advice or emergency guidance.

7. Purchases, notifications, support, and website technologies

Purchases

Apple processes App Store purchases. LumaNest does not receive your full payment-card number. Apple and RevenueCat may process transaction identifiers, receipts, product identifiers, storefront, purchase and renewal status, expiration information, and a LumaNest-generated customer identifier to provide entitlement status, restore purchases, prevent fraud, answer support questions, and produce subscription performance metrics.

Deleting a LumaNest account does not cancel an Apple subscription. Apple and RevenueCat may retain purchase or entitlement records under their platform, accounting, fraud-prevention, and legal obligations.

Notifications

If you allow notifications, Apple Push Notification service may receive a device token and delivery metadata. LumaNest may use notifications for reminders, timer activity, or low-content synchronization hints. You can change notification permission in iOS Settings.

Support, privacy, and security messages

When you contact LumaNest, it receives the information you choose to send, such as your email address, message, screenshots, exported diagnostics, and technical details. Do not send passwords, authentication tokens, or more baby information than is necessary.

All public correspondence uses hexacanvaslabs+support@gmail.com:

• General support: use a descriptive subject; acknowledgement target within 2 business days
• Privacy requests: use Privacy Request; acknowledgement target within 5 business days and a substantive-response target within 30 calendar days unless law permits more time
• Security reports: use Security Report; acknowledgement target within 3 business days and an initial-status target within 10 business days

These are response targets, not guarantees that every matter will be resolved within those periods.

Website cookies, advertising networks, and cross-site advertising

The initial LumaNest website uses cookie-free aggregate Cloudflare Web Analytics and does not enable advertising cookies or cross-site advertising.

The following paragraphs describe planned technologies. None of them are active today. LumaNest may later use cookies, pixels, advertising networks, campaign measurement, retargeting, or other cross-site advertising technologies on the website or in marketing campaigns. If enabled, those technologies may collect browser and device information, page views, referral URLs, ad impressions, clicks, campaign identifiers, cookie identifiers, and similar marketing interaction information.

Before activating advertising or non-essential cookies, LumaNest will provide the notice, consent, preference control, and opt-out required by applicable law. Baby care records, improvement-source information, and AI Assistant content will not be used for targeted advertising or shared with advertising networks for behavioral targeting.

If the iOS app later links app data with third-party data for tracking across apps or websites owned by other companies, LumaNest will request authorization through Apple’s App Tracking Transparency framework before tracking. You may allow or deny tracking at that prompt, and core app functionality will not depend on granting tracking permission.

An embedded product video, when present, loads from the named video provider only after you press play.

8. How information is used

LumaNest uses information as reasonably necessary to:

• Provide local logging, history, import and export, widgets, Live Activities, and personalized on-device prediction
• Authenticate users and keep account data separated
• Store and synchronize information after Cloud Sync is enabled
• Operate the optional improvement program after separate consent
• Provide an AI Assistant after explicit permission
• Provide subscription entitlements and restore purchases
• Deliver notifications that you allow
• Respond to support, privacy, and security requests
• Diagnose reliability problems, prevent abuse, protect accounts, and maintain service security
• Produce aggregate website, subscription, improvement program, and product metrics
• Conduct advertising or campaign measurement only after the required website consent or App Tracking Transparency permission
• Comply with applicable law and enforce the Supplemental Terms of Use

Where data-protection law requires a legal basis, processing may rely on providing a service you request, consent for an optional feature or permission, legitimate interests in security and service operation, or compliance with legal obligations.

9. Sharing and service providers

LumaNest does not sell personal information. It does not use baby care records, improvement-source records, or AI Assistant content for targeted advertising.

Information is shared only as needed to provide the relevant function, complete a transaction, respond to your request, protect users or the service, operate the improvement program you joined, complete a business or legal process, or comply with law. Service providers and recipients may include:

• Apple: App Store distribution, in-app purchases, operating-system services, Sign in with Apple, push notifications, and App Tracking Transparency
• Google and Firebase Authentication: account authentication, authentication security, and optional Google Sign-In
• Cloudflare: website delivery, aggregate Web Analytics, backend APIs, Cloud Sync processing and storage, first-party service analytics, operational logs, and security
• RevenueCat: subscription entitlement, customer history, subscription metrics, and offer processing
• OpenAI or Anthropic: commercial language-model processing when the AI Assistant is used and permission is provided
• Analysis service providers: de-identified or aggregated improvement data under contractual confidentiality, purpose, security, and no-re-identification restrictions
• Advertising and measurement providers: website or marketing interaction data only if the corresponding technologies are enabled with required consent; no baby care records or AI Assistant content
• A video provider: only after you choose to play an embedded video

Each third party listed above with whom LumaNest shares user data is contractually required to provide the same or equal protection of that data as stated in this Policy. LumaNest requires service providers acting on its behalf to protect information consistently with those contractual obligations, this Policy, and applicable law, and does not authorize them to use the data for their own unrelated purposes. Information may also be disclosed when required by valid legal process, to protect rights or safety, to investigate fraud or abuse, or as part of a merger, financing, acquisition, sale, or other business reorganization.

10. Retention and deletion

Unless a longer period is required for security, fraud prevention, legal compliance, dispute resolution, or preservation, LumaNest applies these general periods:

• Local app data and on-device models: until you delete them, clear app data, or uninstall the app
• Active account and Cloud Sync information: while the account exists and the information is needed to provide the service, unless you delete specific content sooner
• Operational logs and incremental synchronization information: for short operational windows, generally no more than 30 days under the current configuration
• Improvement source data linked to an account: while improvement program consent remains active and the data is needed for the approved purpose, or until withdrawal or account deletion is processed
• Irreversibly de-identified or aggregated improvement data: may be retained for extended periods or indefinitely when it is no longer personal information under applicable law
• AI Assistant prompts, responses, and provider records: for the period needed to provide, secure, troubleshoot, and improve the feature, subject to the selected provider’s commercial retention controls and legal obligations
• De-identified or aggregated AI interactions: may be retained for product, safety, statistical, and algorithm-improvement purposes
• Website cookie and advertising identifiers: for the period shown in the applicable consent or preference interface when such technologies are enabled
• Support correspondence: up to 24 months after the request is closed
• Privacy-request and consent records: up to 3 years after the request is closed or the consent is withdrawn, where needed to document compliance
• Security reports and incident records: up to 5 years after the report or incident is closed
• Purchase, tax, accounting, fraud, and legal records: for the period required by Apple, RevenueCat, applicable law, or a legitimate legal obligation

Clearing LumaNest data on a device removes local-first data from that device only. A local-only wipe does not erase another device, an exported file, the account, or the cloud copy. A file you exported earlier is controlled by the destination you selected and is not erased when LumaNest data is later deleted.

After a verified account-deletion request is accepted, access is disabled and deletion from active LumaNest cloud systems begins promptly. LumaNest targets completion from active systems within 30 days. Account-linked improvement source data and LumaNest-controlled AI history are included in the deletion process. Limited backup, recovery, security, provider, and compliance records may remain until their normal deletion schedule expires.

Account deletion may not remove irreversibly de-identified or aggregated improvement or AI data that can no longer reasonably be linked to a person or household, or completed internal analyses. See Account deletion for the exact in-app path, local-data choice, subscription reminder, and failure handling.

11. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, receive a copy of, restrict, or object to certain processing, and to appeal a decision or complain to a regulator.

Practical choices include:

• Use local features without an account
• Decide whether to enable Cloud Sync
• Separately join or withdraw from the optional improvement program
• Decide whether to use the AI Assistant and whether to permit external AI processing
• Manage website cookie and advertising preferences when those technologies are enabled
• Deny App Tracking Transparency permission if in-app tracking is ever requested
• Export completed activity history
• Edit or delete individual records and baby profiles
• Turn off Cloud Sync on a device
• Sign out or clear local data on a device
• Delete the account and associated active cloud data through Profile → Account → Delete Account
• Email the public contact with the subject Privacy Request

LumaNest may need to verify your identity or connection to the relevant account before completing a request. Sections 4 to 10 describe what each of these choices covers and what it does not reach.

12. Children’s information

LumaNest is not directed to children as account holders. Adults provide and control information about babies and children in their care. The adult account holder is responsible for having authority to provide the child’s information and to make Cloud Sync, improvement program, and AI Assistant choices on the child’s behalf.

Do not submit a child’s information unless you are authorized to do so. Contact LumaNest with the subject Privacy Request if you believe information was provided without appropriate authority.

13. Security

LumaNest uses measures such as HTTPS or TLS, token-based authentication, server-side account separation, access controls, limited operational logging, data minimization, and contractual restrictions for analysis and AI providers. No transmission, storage, de-identification, or security method is completely secure or guarantees that re-identification or unauthorized access is impossible.

Protect your device passcode and account credentials, keep the operating system current, and report a suspected compromise using the subject Security Report.

14. International processing

LumaNest is operated from Washington State, United States. When you use an account, Cloud Sync, or another network-enabled feature, related information may be transferred to, processed in, or stored in the United States and other countries or regions where LumaNest's service providers operate. Some processing may occur through global network infrastructure, and provider storage locations may depend on the configuration of the relevant service.

LumaNest handles cross-border transfers as described in this Policy and in accordance with applicable law. Where required, LumaNest uses appropriate safeguards, including the contractual commitments required of the service providers listed in Section 9.

15. Changes and contact

LumaNest may update this Policy as the product, providers, law, or data practices change. The version and dates at the top identify the current text. Reasonable notice of a material change may be provided through the app, website, or account email when available. Where law or Apple policy requires consent for a new use, the new use will not begin until the required consent is obtained.

• Public email for support, privacy, and security: hexacanvaslabs+support@gmail.com
• Provider and controller: H S, an individual sole proprietor operating LumaNest in Washington State, United States

For routing, use Privacy Request or Security Report in the subject line when applicable.