Lumette
Privacy Policy
Last updated: October 7, 2026
Who we are
Lumette (“the app”, “we”, “us”) is developed and published by Matvey Pirogov, the controller of the personal data described in this policy. Contact: lumette@pirog.app.
Data that stays on your device
What you choose in the app is stored only on your iPhone, in the app’s local storage:
- the moods and colors you picked;
- which painting you had on which day, your favorites and how you framed paintings for the Lock Screen;
- whether you have Lumette Pro and whether you have already seen the one-time offer;
- app settings such as the theme and your privacy choices.
We do not receive this data. It is included in your device backups according to your iCloud or computer backup settings. Deleting the app deletes it from your iPhone.
Data processed by services we use
| Service | What and why | Your choice |
|---|---|---|
| Apple (App Store, StoreKit) | Payments for Lumette Pro are handled by Apple under Apple’s privacy policy. We never see your payment details. | — |
| RevenueCat, Inc. (USA) | Manages Pro subscriptions and purchases: a random app user ID, purchase and subscription records, app version and device type. Used to unlock Pro, restore purchases and count subscriptions. | Needed to sell and restore Pro (contract). |
| Apple Ads attribution (Apple, via RevenueCat) | If you install Lumette after tapping one of our ads on the App Store, the app gets an attribution token from Apple’s AdServices framework, and RevenueCat exchanges it with Apple for the campaign, ad group, keyword and country of that ad. No advertising identifier (IDFA) is used, and Apple does not treat this as tracking. Used only to see which of our ads pay off. | Legitimate interest (measuring our own ads). You can object at any time: lumette@pirog.app. |
| Cloudflare, Inc. (USA) | Delivers the paintings from our image server lumette-art.pirog.app. Like any web request, downloading a painting sends your IP address and basic request headers (app version, device type) to Cloudflare so it can return the file. We keep no logs of these requests and never link them to you. The paintings themselves are public-domain works from The Metropolitan Museum of Art, The Art Institute of Chicago and The Cleveland Museum of Art. | Needed to show paintings (contract). |
| Google Firebase Analytics (Google LLC / Google Ireland) | Pseudonymous usage events: screens opened, setup finished (how many moods and colors you picked, not which), Lock Screen preview opened, a painting saved to Photos (success or not), paywall shown or closed, the one-time offer shown or declined, purchase or restore made, plus device model, OS version, app version and approximate country. No advertising ID is collected and the data is not used for ads. | In the EEA, the UK and Switzerland — only if you say yes during setup (consent). Elsewhere — on by default (legitimate interest). Off at any time: Settings → Privacy. |
| Google Firebase Crashlytics | Crash reports: the error, the state of the app when it crashed, device model, OS and app version. Used only to find and fix bugs. | On by default (legitimate interest). Off at any time: Settings → Privacy. |
Notifications are local notifications scheduled on your device; no push service is involved.
Links to the App Store
Links to Lumette on our website and in our posts carry a campaign name, for example “launch-post”. Apple reports to us, in aggregate, how many people downloaded or subscribed after following each link.
What we don’t do
- No account and no sign-in. No ads in the app and no advertising SDKs.
- No tracking across apps and websites owned by other companies, and no advertising identifier (IDFA).
- We don’t sell or share your personal data for advertising.
- No access to your photo library beyond adding the paintings you save (add-only), and no location, contacts or camera.
How long data is kept
On-device data stays until you delete it or the app. Analytics data is kept for up to 14 months and crash reports for up to 90 days. Purchase records are kept by RevenueCat while needed to provide Pro and to meet legal accounting obligations.
The reminder before your free trial ends is a local notification scheduled on your iPhone; no push service is involved. Paintings you save go to your Photos with add-only access — the app cannot see your photo library. The widget reads today’s painting from a folder shared only between the app and its widget on your device.
International transfers
RevenueCat, Google and Cloudflare may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
Your rights
Depending on where you live (for example under the GDPR or US state laws), you may have the right to access, correct or delete your data, to object to or restrict processing, to data portability and to withdraw consent at any time. Most data never leaves your device, so you control it directly. For analytics, crash or purchase data, write to lumette@pirog.app — include the approximate date of purchase if your request is about a subscription. You can also complain to your local data protection authority.
Children
Lumette is not directed at children under 16, and we do not knowingly collect data from them.
Changes
If this policy changes, we will update this page and the date above. Significant changes will also be noted in the app’s release notes.