This Privacy Policy applies solely to the mobile note-taking application "Lumiya" (hereinafter referred to as "Lumiya" or "this Product") and its related services, developed and operated by Hangzhou Qingzhou Technology Co., Ltd. (hereinafter referred to as "Qingzhou Technology," "we," or "us").
We highly value your privacy and personal information security, adhering strictly to the Apple ecosystem's "data minimization" and "local-first, secure cloud" design philosophy. While striving to provide a minimalist, seamless recording and planning experience, we maintain the utmost restraint in data collection.
This policy will help you understand: what information we collect and how we use it; how we share information with third parties; how we retain, store, and protect your information; how to manage your personal information; the iOS system permissions we request; policy updates and notifications; and additional rights for specific regions (GDPR / CCPA / China PIPL).
We collect personal information primarily to provide Lumiya's core features: card-based journaling, plan weaving, and intelligent insights. We strictly collect and use your data only within the "minimum necessary" scope.
Unique Anonymous Credential: When you first open Lumiya on your iOS device, the system automatically generates a completely anonymous unique identifier (User ID) as your exclusive identity marker. We never collect your phone number, email address, real name, ID card, or contacts. You do not need to create a username or password.
Purpose: This anonymous User ID serves solely as a technical primary key to securely associate your records in the cloud, enable cross-device synchronization, and manage your Lumiya Pro membership benefits (such as AI usage quotas).
Future Cross-Platform Authorization: Should we launch web or desktop versions in the future, we may introduce new login methods (e.g., Sign in with Apple or email binding) for cross-platform syncing. We will prominently notify you and seek explicit consent before collecting any such information.
Content: When you use Lumiya's card-based input (text, voice, image attachments) or set weekly/monthly/yearly plans, we collect the notes, task statuses, and tags you actively create.
Transmission and Security: Your data is transmitted via industry-standard SSL/TLS encrypted channels and securely stored on Tencent Cloud servers and Cloud Object Storage (COS) located in Singapore. This cloud storage is strictly for preventing data loss and enabling cross-device synchronization. Our technical and operations staff have absolutely no right or ability to view your private text or images.
Payment Method: When upgrading to Lumiya Pro, we strictly use Apple's native In-App Purchase (IAP) system.
Zero Sensitive Financial Data: All payment instructions and financial settlements are handled directly by Apple. We never collect, access, or store your credit card information, bank account details, Apple ID passwords, or any financial data.
Order Interaction: We only receive an anonymous Receipt Token, product type, and transaction ID from Apple's servers to allocate membership benefits to your anonymous User ID.
To maximize the value of "weaving daily fragments into personal growth," Lumiya utilizes local algorithms and Large Language Models (LLM) to organize your records:
Absolute Commitment to Data Protection: All intelligent reasoning is processed securely. We make an absolute promise: your personal records, private emotional texts, and AI insight reports will never be sold, leaked to unrelated third parties, used for targeted advertising, or used to train any public generic Large Language Models.
To ensure stability, optimize UI rendering, and troubleshoot crashes, we only collect:
Zero Tracking Promise: We never collect MAC addresses, IDFA (Identifier for Advertisers), GPS location, or any sensitive tracking data.
Feature Prompts: With your active iOS notification permission, we may send plan expiration reminders or daily inspiration reviews. You can turn this off anytime in iOS Settings.
No Third-Party Ads: Lumiya contains zero third-party advertising SDKs and conducts no commercial behavioral tracking.
We use de-identified network logs and anonymous User IDs for underlying security verification, troubleshooting cloud synchronization, and preventing malicious attacks on our cloud servers.
In accordance with applicable laws, we may process relevant information without your prior consent in situations directly related to national security, public safety, criminal investigations, or when necessary to protect major legitimate rights and interests where obtaining consent is impossible.
Lumiya is a purely native iOS mobile application. We do not use any Cookies, Web Beacons, or third-party web tracking technologies within the app, nor do we engage in cross-app or cross-browser behavioral tracking.
We firmly refuse to embed any third-party commercial advertising networks or social media marketing SDKs. We only collaborate with trusted infrastructure partners in the following necessary scenarios:
Business Transfer: In the event of a merger, acquisition, or asset transfer, your anonymous User ID and cloud data will be transferred as assets. We will require the new entity to remain bound by this Policy or ask for your renewed consent.
Legal Disclosure: We will only disclose your information to the extent necessary when required by mandatory laws, regulations, or valid legal documents from administrative or judicial authorities.
Storage Location and Cross-Border Transfer: All personal information and card content generated during your use of Lumiya are securely stored on Tencent Cloud servers and Cloud Object Storage (COS) located in Singapore. When you use this product, your data will be securely transmitted and stored overseas. We strictly comply with applicable laws regarding cross-border data transfer and utilize industry-standard security technologies (such as full-link SSL/TLS) to ensure data transmission security.
Special Notice for Users in Mainland China: If you are located in mainland China, the storage of your personal information on overseas servers constitutes a cross-border transfer of personal information under the Personal Information Protection Law (PIPL). We will separately inform you of this cross-border transfer and obtain your separate consent when you first launch the app.
Retention Period: While you use this product, your data is retained until you actively delete the relevant records or cancel your identity. After you delete records or cancel your identity, the associated data will be irreversibly erased from our cloud databases within 24 hours; residual copies in routine backups will be permanently purged within a maximum of 30 days as backups rotate. Where laws and regulations provide otherwise, such provisions prevail.
Security Measures: We implement strict routine data backups, classified data isolation, and secure development protocols. All team members and partners are heavily restricted from accessing core user data and are bound by strict confidentiality agreements.
Incident Response: Should a system-level data breach occur, we will immediately notify you via prominent in-app announcements or push notifications, providing risk assessments and remedial measures, and will report to regulatory authorities as required by law.
You have absolute control over your personal data and can easily manage it within the app:
You can intuitively view, modify, or delete any card text, photo attachments, and tasks in your timeline and plan pages at any time.
Lumiya is an independent native tool. We will never scan your iPhone's "installed app list" in the background. The app contains no public social squares; your core thoughts belong solely to you.
Path: You can go to Settings → Data & Security → Delete Data & Identity at any time.
Immediate Effect: Deletion takes effect immediately with no waiting period. Upon confirmation, your underlying credentials will be disconnected immediately. Within 24 hours, all card records, media attachments, and data associated with that User ID will be irreversibly erased from our cloud databases.
Your inspiration belongs to you. You can tap "Export Data" in the sidebar (profile page), and the system will instantly package your cards and plans into a universal format for offline download and backup. Free users can export in HTML format; Lumiya Pro members can additionally export in Markdown and PDF formats.
Lumiya adheres to a "do not disturb, do not overstep" principle. We will never request sensitive permissions like GPS location, contacts, or call logs. We only request the following permissions to enable core features:
| Permission | Usage Scenario |
|---|---|
| Photo Library | Requested when selecting images from your album as card attachments or saving shared images to your device. Accessed via the iOS system photo picker (PHPicker), which only accesses images you actively select. |
| Microphone | Requested when utilizing the voice-capture feature for rapid thought recording. |
| Speech Recognition | Requested when utilizing the voice-to-text feature to transcribe your spoken words into text fragments in real-time. |
| Face ID / Touch ID | Requested if you enable the local app lock. Verification is performed locally on your device's secure chip and is never uploaded to our servers. |
| Calendar | Requested only when you actively tap "Sync to Calendar" to write your plan tasks into the system calendar for viewing and reminders. We only write the tasks you choose to sync and never read other events in your calendar. |
| Notifications | Requested only if you actively enable plan expiration reminders or daily inspiration reviews. |
You can independently disable any or all of these permissions in your iPhone's Settings → Lumiya at any time.
We may update this Privacy Policy from time to time. For major changes involving service purposes, processing rules, or permission changes, we will display a prominent pop-up or top-bar notification in the app and seek your explicit consent before they take effect.
Security Self-Defense Obligation: Given our minimalist anonymous User ID system, please keep your iPhone and its unlocking credentials (like lock screen password or Face ID) secure to prevent unauthorized access to your private data.
Developer and Operator: Hangzhou Qingzhou Technology Co., Ltd.
Registered Address: Room 204945, 20th Floor, Wenyuan Building, No. 426 Binwen Road, Puyan Street, Binjiang District, Hangzhou, Zhejiang Province, China.
If you have any questions, comments, complaints, or suggestions regarding this Privacy Policy, please contact our team through the following channels:
We will process your request and provide a specific response within 15 working days upon receiving and verifying your inquiry.
Regardless of your location, we maintain the same high standards for your privacy. If you are a resident of the European Economic Area (EEA), the UK, or Switzerland, subject to the General Data Protection Regulation (GDPR), or a resident of California subject to the California Consumer Privacy Act (CCPA), you possess the following specific statutory rights in addition to those outlined in Section 5:
Lumiya's services are directed primarily toward adults. We do not knowingly collect personal information from children under the age of 13 (or the equivalent minimum age in your jurisdiction, such as 16 in the EEA and 14 in mainland China). If you are a minor under the applicable age limit, please do not use this product.
If we learn that we have inadvertently collected the anonymous identity credential or data of a child without verifiable parental or guardian consent, we will take all reasonable steps to locate and permanently delete such data from our cloud servers as quickly as possible. If you believe we might improperly hold data from a child, please contact us at support@tsingzhou.art.