Privacy Policy for the "Luminom" App

1. Controller

Piry UG

Friedrich-Ebert-Straße 2

Email: info@luminom.de

Phone: 02564 968808

2. Scope

This privacy policy applies to the "Luminom" mobile app (iOS/Android) and describes personal data processing under the GDPR and German data protection law.

3. Processed data categories

• Account and contact data (e.g. name, email, login details).
• Content data (e.g. photos, videos, text, audio uploads).
• Usage and device data (e.g. app events, device identifiers, IP address, log files).
• Communication data (e.g. support requests).
• Notification data (e.g. push tokens), if enabled.

4. Purposes of processing

• Provision of app features (memorial pages, feed, gallery/album, grief journal, grief hub, access control/social circles).
• Management of user accounts and permissions.
• Communication, support and notifications.
• Security, abuse prevention and app improvement.
• Billing/contract processing for in-app subscriptions (via Apple/Google).

5. Legal bases

Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interest in security and improvement). Where applicable: Art. 6(1)(c) GDPR (legal obligation).

6. Authentication and login

We offer login via email/password and, where applicable, Sign in with Apple and Google Sign-In. We receive authentication data required by providers (e.g. Apple ID/Google ID, and name/email depending on user permissions).

Legal basis: Art. 6(1)(b) GDPR.

7. Hosting, database and storage (Firebase)

We use Firebase services (Google Ireland Limited) as a processor for authentication, database (e.g. Firestore), file storage (e.g. Cloud Storage) and Cloud Functions. Personal data may be processed on Google servers.

Legal basis: Art. 6(1)(b) GDPR. Please add details on data processing agreement, data locations and subprocessors as needed.

8. Push notifications

We use Firebase Cloud Messaging for notifications. Push tokens are processed for this purpose. Use is optional and can be disabled in device settings.

Legal basis: consent, Art. 6(1)(a) GDPR.

9. Payments and subscriptions (App Store/Play Store)

In-app subscriptions are processed by Apple (App Store) and Google (Play Store). Payment and contract data are processed by Apple or Google. We do not receive full payment data, only subscription status information.

Legal basis: Art. 6(1)(b) GDPR.

10. Log data and security

To ensure operation and prevent abuse, we process log data (e.g. timestamps, IP address, device information). Legal basis: Art. 6(1)(f) GDPR.

11. Disclosure to third parties

We currently do not share personal data with third parties. If required for app operation, processors (e.g. Apple/Google) may be used.

12. Data subject rights

• Access, rectification, erasure and restriction of processing.
• Objection to processing and data portability.
• Withdrawal of consent with effect for the future.
• Right to lodge a complaint with a supervisory authority.

13. Changes to this privacy policy

We update this privacy policy whenever legal or technical requirements change.