Luma AI / Privacy

Your notes.
On your iPhone.

Privacy Policy

Effective November 10, 2026. Black Thorn Labs LLC provides Luma. Contact durian@blackthornlabsgames.com with privacy questions.

Scope

Luma is available on the App Store and does not create a cloud notebook account. This policy describes its local-processing design. The additional memory tools, Calendar connection and portable backups described below apply to version 1.1; availability depends on the version installed, and these features may not yet be available in the public release.

Information processed locally

Luma processes recordings, temporary spoken questions, transcripts, corrections, vocabulary, highlights, recaps, typed questions and answers on your iPhone. Optional approximate starting-location tags and manual place names also remain in the local notebook. Luma does not upload this content to us or to a cloud AI service, and does not use it for server-side AI training.

The notebook is encrypted and excluded from device backup. Luma includes no advertising, cross-app tracking or analytics SDKs. Automatic speaker recognition is not enabled. AI, transcription and suggested labels can be wrong.

Pasted text, its title/source/date, user-approved people and project links, keyword bookmarks, name corrections, follow-up status and optional private progress are stored in the encrypted on-device notebook. Pasted material is labelled separately from recorded speech. These features do not send notebook content to Black Thorn Labs or a cloud AI service, identify speakers or access Contacts.

Permissions and your choices

Microphone access supports recordings and spoken questions you initiate. Obtain any required permission from everyone recorded; your own microphone permission does not establish their consent. You control stopping recording.

Starting-location tagging is off by default. If enabled, it requests While Using location permission and a single approximate location at the start of a conversation while the app is open. No route tracking or online address lookup is performed. You can use manual place labels without location permission, disable future tagging and remove existing tags. Changed or removed tags clear affected generated recaps and in-memory answers; the original transcripts and audio remain.

Calendar connection is optional. After you tap Connect, Luma requests Apple's Full Access permission to display existing appointments. You choose which calendars Luma displays; this selection is an app filter, not a restriction on the underlying OS permission. Calendar event details are held in memory, cleared from that view on disconnect/background, and are not added to transcripts, AI questions or analytics. Apple's native event editor handles changes you approve; your selected calendar provider may sync those saved changes under its own policies. Disconnect stops Luma reading appointments and clears the view, but iPhone Settings controls revoking permission. Luma does not automatically start recording, move a Calendar event when a transcript changes, or delete Calendar copies when their source notes are deleted.

Daily recap and weekly review reminders are optional local notifications. Permission is requested only when you choose to enable a reminder. Weekly review uses generic lock-screen text, not the contents of unfinished items. You can turn reminders off in Luma or manage notification permission in iPhone Settings.

You can change microphone, speech or location permissions in iPhone Settings. Declining optional permissions does not remove saved text or prevent ordinary text search.

Network connections that remain

Optional speech or AI model downloads contact Apple, Hugging Face and their delivery providers. These hosts receive and may retain network and request information, including your IP address, device or operating-system details, service-request logs and approximate location inferred from your connection, under their own policies. Luma does not attach recordings, transcripts, notes or questions to these downloads. Installed AI models process notes locally.

Apple StoreKit handles purchases and provides signed entitlement information to the app. Luma does not receive your payment-card details. Apple's services follow Apple's privacy terms. The optional larger model is downloaded from Hugging Face; its hosting practices follow its own privacy policy.

Apple privacy information · Hugging Face privacy policy

Retention and deletion

Transcripts, saved highlights and recaps remain until you delete them. By default, processed audio becomes eligible for deletion 24 hours after successful transcription; cleanup runs when Luma is open, so this is not an exact-time guarantee. Unprocessed audio is not automatically expired. You can choose 7 days, 30 days or retention until manual deletion.

In a conversation, Delete audio only removes its recording while preserving text. Delete conversation and recap removes the selected conversation and its retained derived notes; affected indexes and recaps are updated. Optional model downloads can be removed separately from the Pro/model screen. Deletion and export do not require Pro.

Because the notebook is excluded from automatic device backup, deleting Luma or losing the phone can permanently lose the archive. Export important text or create a password-encrypted backup first. We cannot restore an on-device notebook, expired audio, an unavailable backup file or a password that was never sent to us. Canceling a subscription does not itself delete saved notes.

Portable backup and restore (version 1.1)

You can explicitly export a password-encrypted portable backup through Files. It can contain your notebook and, if selected, retained audio. Audio is limited to 60 MB before encoding and the imported backup file must be under 200 MB; other archive size checks also apply. Audio that has already expired or was deleted cannot be recreated. No automatic notebook cloud backup is enabled. If you select iCloud Drive or another cloud-backed Files location, that provider may sync the encrypted file and handle file/request metadata under its own policies. Luma does not send the password, a recovery key or a readable notebook to Black Thorn Labs. Keep your file and password safe: we cannot recover a lost password.

Restore requires choosing the file, unlocking it, reviewing the counts and explicitly confirming restoration. It adds missing records and preserves current records when identifiers match; it does not reset usage or paid access. App permissions, notification schedules, app preferences and Apple Calendar copies are not restored. Check Calendar before adding a copy again. A portable archive is separate from local deletion: deleting a note or uninstalling Luma does not remove previously exported/shared files or copies held by another app or provider. You control those copies separately.

Exports and support

Copy and Share send selected text only when you choose. Text may include personal details or place names. The recipient app or service then handles it under its own rules. Deleting the local original does not recall shared copies.

If you email support, we receive the address, message and attachments you voluntarily send and use them to respond and resolve your request. Do not send private recordings or transcripts unless you intend to disclose them. Contact us to ask about or request deletion of support correspondence, subject to any required retention. This correspondence is separate from the on-device notebook.

Website visits and changes

This website is separate from the Luma app. Its hosting and delivery services receive normal web requests and connection information. The app's local-only processing description does not mean that browsing this website or emailing support is offline.

We will update this page if Luma's data practices change. Any future feature that sends notebook content off device will need clear disclosures and appropriate user choices before use. For questions or requests, contact durian@blackthornlabsgames.com.

Age requirements

Luma is intended for people aged 13 and older and is not directed to children under 13. Minors must have parent or guardian permission where required. Any higher applicable legal minimum or App Store age restriction also applies. The App Store listing shows the current age rating.