Privacy policy

01What we collect

• Your Lumio account: your email address, your first and last name, and your date of birth if you give it. It’s the same account as Lumio Gifts. You sign in with a one-time code sent to your email, so we never hold a password.
• Events you host: the title, type, date and time, location, description, dress code and settings.
• Guests: the email addresses hosts invite, each guest’s RSVP, and who joined through a shareable link.
• What you add to an event: wishes, photos for the memory wall (and who a wish or photo is for), and what you’ve read.
• Your device: a push notification token, so we can send you notifications, and crash reports when the app breaks (device model, system and app version, and what went wrong).
• Photos and the camera: only the photos you pick or take. The app asks before it uses your camera or photo library, and never reads the rest of it.

02How we use it

Only to run Lumio: to show an event to its guests, to send invites and sign-in codes, to put wishes and photos on the event’s wall, and to notify you about invites, RSVPs and what’s new.

We email an invite to an address that doesn’t have a Lumio account yet, on the host’s behalf. We don’t sell your information and we don’t show ads. Crash reports help us fix bugs and aren’t used to track you.

03Who can see what

• Hosts see their event’s guest list, with names, email addresses and RSVPs. Guests see the event’s details and how many are coming, not the guest list.
• Wishes and photos appear on the event’s wall for its guests. If the host reviews them first, they appear once approved. A wish or photo meant for one person also appears in their Interactions.
• Anyone with an event’s shareable link sees a short preview (no location, no guest list) and can join as a guest. Hosts can turn the link off at any time.
• If the host allows downloads, guests can save the wall’s photos. [Confirm the exact visibility rules for each setting.]

04Where it’s kept

Your information is stored with Amazon Web Services in Sydney, Australia: Amazon Cognito for sign-in, plus a database, file storage for photos, and Amazon SES to send emails. Photos are served through TwicPics, an image delivery service. Push notifications go through Apple’s and Google’s push services, and crash reports go to Bugsnag (SmartBear). [Confirm the full list of processors and where Bugsnag stores data.]

05On your device

The app keeps your sign-in session in your phone’s secure storage, and a few preferences on the device. There’s no advertising ID and no tracking across other apps or websites.

06Keeping and deleting it

We keep your information while your account is open. Hosts can remove guests, wishes and photos from their events, and you can delete what you’ve posted.

To delete your account, or to get a copy of your information, email [privacy contact email]. We’ll respond within [30 days] [confirm the retention period after an account is deleted, and for photos on events you joined].

07Your rights

You can ask to see, correct or delete the personal information we hold about you. If you’re not happy with how we handle it, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au) [confirm jurisdictions, and add GDPR wording if we serve the EU or UK].

08Children

Lumio isn’t meant for children under [16], even when an event is for a child. [Confirm the minimum age, and how to handle photos of children on an event’s wall.]

09Changes and contact

If we change this policy, we’ll update the date at the top, and tell you in the app before a significant change takes effect.

Questions: [privacy contact email], [postal address].