Privacy Policy — Lume

Last updated: June 11, 2026

Lume is a gratitude journal for iPhone, made by Davide Mastricci, an independent developer in Italy. This page explains, in plain language, what happens to your data when you use Lume.

The short version: Lume collects nothing. Your journal belongs to you, lives on your device and in your own private iCloud, and never reaches the developer or anyone else.

What the developer collects

Nothing. Lume has:

no analytics and no tracking,
no ads,
no third-party SDKs,
no accounts or sign-in,
no backend servers.

There is simply no place for your data to be sent. The developer never sees your entries, your name, your contacts, or anything else you do in the app.

Your journal entries

Everything you write in Lume — your daily gratitude entries and your thank-you history — is stored on your device using Apple’s SwiftData.

If you are signed in to iCloud, Lume also syncs this data through Apple’s CloudKit to your own private iCloud database, so it survives a device change and stays in sync across your devices. This private database is controlled by your Apple Account; the developer has no access to it and cannot read, recover, or share its contents. Apple’s handling of iCloud data is described in Apple’s privacy policy.

Contacts and thank-yous

When you send a thank-you, Lume uses Apple’s contact picker (CNContactPickerViewController). This picker requires no Contacts permission: the app never accesses your address book and only receives the single contact you explicitly choose.

The name and phone number of the person you thank, along with your message, are saved in your thank-you history — on your device and in your private iCloud, exactly like your journal entries. They are never transmitted to the developer or to any third party.

If you tap “Send via WhatsApp”, Lume opens WhatsApp with your message pre-filled. Nothing is sent until you tap send inside WhatsApp yourself. Once you do, the message is handled by WhatsApp under WhatsApp’s own terms and privacy policy.

If you choose “Share as Card”, Lume renders the card image on your device and opens the standard iOS share sheet. Where the card goes from there is entirely your choice, via the app you pick.

Notifications

Lume can send you one optional daily reminder to journal. This is a local notification, scheduled entirely on your device — there are no push notifications from any server. You choose the time, you can turn it off anytime, and Lume only asks for notification permission after explaining why.

(Technical note: the app includes Apple’s push entitlement only because iCloud sync uses invisible “silent pushes” managed by Apple. These never show you anything and carry no data to the developer.)

Face ID

You can optionally lock Lume with Face ID or your passcode. This is off by default. Biometric authentication is handled entirely by iOS on your device — Lume never sees or stores your biometric data, and it never leaves your iPhone.

Children’s privacy

Lume is rated 4+. Because the app collects no data from anyone, it also collects no data from children.

Under privacy laws such as the GDPR, you have rights over personal data that an organization holds about you. Since the developer of Lume holds no data about you at all, there is nothing for the developer to access, correct, export, or delete on your behalf.

Your data exists only in places you control:

on your iPhone, and
in your private iCloud account, managed by Apple.

You can exercise your rights over iCloud data directly with Apple through your Apple Account and privacy.apple.com.

Deleting your data

Deleting everything is always in your hands:

Delete the app to remove all Lume data from your device.
To remove synced data from iCloud as well, go to Settings → your name → iCloud → Manage Account Storage, find Lume, and delete its data.

No request to the developer is needed — and none would be possible, since the developer has nothing to delete.

Changes to this policy

If this policy ever changes, the new version will be posted on this page with an updated date. Since Lume’s whole approach is “collect nothing”, meaningful changes are not expected.

Contact

Questions about privacy in Lume? Write to davide.mastricci7@gmail.com. (If you do, your email address and message are used only to reply, and never shared.)

Riepilogo in italiano

Lume non raccoglie alcun dato. Niente pubblicità, niente analytics, niente tracciamenti, niente account, nessun server: quello che scrivi resta sul tuo iPhone e, se usi iCloud, nel tuo spazio iCloud privato gestito da Apple — lo sviluppatore non può leggerlo in alcun modo.

I contatti che scegli per i ringraziamenti restano anch’essi solo sul tuo dispositivo e nel tuo iCloud. L’invio via WhatsApp avviene solo quando tocchi tu “invia” dentro WhatsApp, secondo i termini di WhatsApp. I promemoria sono notifiche locali, il blocco con Face ID è opzionale e gestito interamente da iOS.

Per cancellare tutto: elimina l’app e, se vuoi, rimuovi i dati di Lume da iCloud nelle Impostazioni. Per qualsiasi domanda: davide.mastricci7@gmail.com.