Privacy policy

01What we collect

• Your Lumio account: your email address and your first and last name. It’s the same account as the Lumio app for events. You sign in with a one-time code sent to your email, so we never hold a password.
• Your lists: each list’s title, occasion, date, time zone, currency, note and sections, and the gifts on it: names, notes, store links, prices, delivery estimates and any photo you upload.
• People you invite: the email addresses you enter, and the guests you import from a Lumio event you host.
• What guests do on a list: what they set aside or mark as bought, chip-in groups and their messages, private guest chats (“whispers”), stores they add, and the thank-you notes owners send after the Reveal.
• The notifications we create for you, and the language your browser asks for.

02How we use it

Only to run Lumio Gifts: to show a list to the people invited to it, to keep everyone from buying the same gift, to keep claims hidden from the people a list is for until the Reveal, to send sign-in codes, and to tell you about invites and changes to gifts you’ve claimed.

We don’t sell your information, we don’t show ads, and there are no third-party analytics or tracking in Lumio Gifts.

03Who can see what

• A list’s owner and co-owners see the list, its gifts and who’s on it (names and email addresses). They never see who claimed what before the Reveal.
• Guests see the list and its gifts, whether a gift is still available, and the names of people in a chip-in group or a whisper they’re part of. Guests see how many other guests there are, not who.
• On a list linked to a Lumio event, guests’ email addresses are shown only to that event’s hosts.
• After the event, the Reveal shows the owner and co-owners who gave what, so they can say thank you.

04Where it’s kept

Your information is stored with Amazon Web Services in Sydney, Australia: Amazon Cognito for sign-in, plus a database, file storage for photos and email delivery for sign-in codes. Photos may be served through TwicPics, an image delivery service [confirm whether TwicPics is used, and any other processors].

05Cookies and storage

We use only the cookies Lumio Gifts needs to work: the ones that keep you signed in, and one that remembers your language. Your browser also remembers the last list you opened, so “This list” can take you back to it. There are no advertising or tracking cookies.

If you also use the Lumio app on your phone, Lumio Gifts notifications can reach you there as push notifications, through Apple’s or Google’s push service.

06Store links

When you tap Buy, we send you to the store’s own website, and its privacy policy applies there. Lumio never fetches or previews the links people paste.

07Keeping and deleting it

We keep your information while your account is open. You can delete gifts and lists at any time. Gifts that guests already bought stay in that list’s Reveal.

To delete your account, or to get a copy of your information, email [privacy contact email]. We’ll respond within [30 days] [confirm the retention period after an account is deleted].

08Your rights

You can ask to see, correct or delete the personal information we hold about you. If you’re not happy with how we handle it, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au) [confirm jurisdictions, and add GDPR wording if we serve the EU or UK].

09Children

Lumio Gifts isn’t meant for children under [16]. [Confirm the minimum age and how parents can ask us to remove a child’s information.]

10Changes and contact

If we change this policy, we’ll update the date at the top, and tell you in the app before a significant change takes effect.

Questions: [privacy contact email], [postal address].