Privacy Policy
Last Updated: November 3, 2026
1. Who we are
This policy covers the LumoTravel app, the website lumoapps.org and its journal. The data controller is Vladimir Maslov, an individual developer based in Moldova. Contact: support@lumoapps.org.
2. Using the app without an account
You can use the app without giving your email. The app then creates an anonymous account, and your travel data stays on your device. Cloud sync starts only after you add an email.
The app is free for up to 5 trips, and you never have to buy anything. A subscription and its 7-day free trial start only if you choose them in the App Store.
3. Data we process
| Category | Data | Stored encrypted on our server |
|---|---|---|
| Account | Email, password in hashed form, language, account dates | No, needed to run the account |
| Subscription | Status, expiry date, product, transaction ID, price, RevenueCat ID | No |
| Profile (optional) | Name, date of birth, nationalities and passport expiry dates, phone, target countries, residence permit expiry date | Yes |
| Travel (optional) | Countries, entry and exit dates, trip purpose, comments, visas and their stay rules | Yes |
| Documents (optional) | Tickets, visa photos, insurance and hotel bookings you upload | Yes |
| Reports | PDF reports you generate | Yes |
| Notifications | Push notification token | No |
| Support | Your email and message when you contact us or report a rule | No |
| App usage | Actions in the interface, app version, device and system type, internal user ID | Handled by PostHog |
| Website usage | Pages, clicks, referring site, campaign tags, browser language, device type, browser details, country derived from IP | No, see section 5 |
We do not ask for your passport number, tax ID or home address in the app. Do not write them in comments. Documents you upload may contain them, and they are stored encrypted.
4. Location
If you allow it, the app uses your device location to detect which country you are in, including in the background when you turn this on. Exact coordinates are processed on your device and are not sent to our servers. Only the resulting country and trip dates may be synced.
The app first tries to find the country offline. When you are online, coordinates may be sent to Apple's location service to confirm the country and city. You can turn location access off at any time in your device settings.
5. Website analytics and cookies
Our own website analytics works without cookies. It keeps a random session ID in your browser for the visit. We read your IP address only to derive your country and store it as a hash, so we do not keep the address itself.
Google Analytics, loaded through Google Tag Manager, runs only if you press Accept in the cookie banner. It sets Google cookies and sends data to Google. If you press Reject, it does not load. You can change your choice at any time with Cookie settings in the website footer. Your choice is stored in your browser.
Fonts are served from our own server, so viewing the site does not send your data to a font provider.
6. Why we use data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the app, sync, calculations, reports and notifications | Contract |
| Storing documents and other optional data you add | Consent, which you can withdraw by deleting them |
| Detecting your country from location | Consent through the device permission |
| Managing subscriptions and purchases | Contract and legal obligations |
| Support and rule reports | Contract and legitimate interests |
| App analytics and our own website analytics, to improve the service | Legitimate interests |
| Google Analytics | Consent |
| Security and abuse prevention | Legitimate interests |
We do not sell your data, show ads or use your data for advertising. Calculations in the app are informational. We do not make automated decisions with legal effects on you.
7. Who receives data
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner | Server hosting | All data stored on our server | Germany |
| Apple | App Store payments, push delivery, location lookup | Purchase data, push token, coordinates when used for lookup | United States and others |
| RevenueCat | Subscription management | Internal user ID, subscription and purchase status | United States |
| PostHog | App analytics | Usage events, internal user ID, device data | European Union |
| Website analytics, only after consent | Cookies, pages visited, device data, IP address | United States and others | |
| Resend | Sending emails | Your email and the message | United States |
| Expo | Delivering push notifications | Push token and notification text | United States |
Pinterest. We use the Pinterest API only to publish our own journal articles to our own Pinterest business account. We do not receive, store or process Pinterest data of website visitors or app users. The access tokens for our own account are stored encrypted on our server and are used only to create and update our Pins.
App versions released before November 2026 also send your account email to PostHog, and the country and day count when you tap a country on the home screen. Updating the app stops this.
We may also disclose data when the law requires it.
When data leaves the European Economic Area, we rely on the safeguards offered by these providers, such as Standard Contractual Clauses.
8. How long we keep data
- Account, profile, travel data, documents and reports: until you delete them or your account.
- Records you delete in the app: removed from the server within 30 days.
- Deleting your account: your data and files are removed from our active systems. Database backups made for maintenance are replaced over time.
- Detailed website analytics: 90 days. After that we keep only daily totals with no personal data.
- Support messages and rule reports: as long as needed to handle them. They are stored separately and are not removed automatically with your account, so email us if you want them deleted.
- Purchase records: removed from our server with your account. Apple and RevenueCat keep their own records.
9. Security
Data between the app and our server travels over HTTPS. On our server, the fields marked in section 3 and all uploaded files are encrypted, and access is restricted. We can technically decrypt this data for legal obligations, support you ask for, or system security.
On your device, the app does not add its own encryption. Your data there is protected by your device security, such as your passcode. Saved documents are excluded from device backups, while other app data may be included in them. Face ID is handled by your device, and we never receive it.
10. Your rights
Depending on where you live, you may have the right to:
- access your data and get a copy;
- correct inaccurate data;
- delete your data;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time;
- complain to your data protection authority.
To delete your account, open Profile and choose Delete Account. For any other request, email support@lumoapps.org. Deleting the app does not cancel a subscription. Manage it in your Apple ID settings.
11. Children
LumoTravel is not intended for children under 13, and we do not knowingly collect their data. If you think a child gave us data, contact us and we will delete it.
12. Changes
We will update the date above when this policy changes. We will tell you about important changes in the app or by email.