Privacy Policy

1. Who we are

Luminary is developed and operated by Luminary App Co., Riyadh, Kingdom of Saudi Arabia. We are the data controller for the personal data described in this policy. You can reach our privacy team at privacy@luminary-app.com.

2. Data we collect

Data you give us

• Account data: name, email address, password (stored as a hash by our authentication provider), and optional profile photo.
• Academic profile: institution, college, specialty, cohort and academic year, used to connect you with the right courses and groups.
• Content you create: notes, drawings, uploaded files (slides, PDFs, images), calendar events, study-debt entries, messages sent in chat groups, and study room activity.
• Support requests: messages you send to us and any information you include in them.

Data collected automatically

• Device and usage data: device model, operating system version, app version, language, time zone, crash reports and diagnostic logs.
• Push notification token: if you enable notifications, a device token used only to deliver them.

We do not collect precise location data and we do not use third-party advertising SDKs.

3. How we use your data

• To create and secure your account and sign you in.
• To provide the features of the app: syncing notes, organising your calendar, delivering messages, and hosting study rooms.
• AI study packets: when you ask Luminary to summarise or generate study material from a document you upload, the text of that document is sent to our AI processing provider to generate the result. It is used only to produce your output and is not used to train third-party models.
• To send you service notifications you have opted into (lecture reminders, study-debt alerts, messages).
• To detect abuse, keep the platform safe, and comply with law.
• To understand how the app is used in aggregate and improve it.

4. Legal bases

We process your data to perform our contract with you (providing the app), with your consent (notifications, optional profile details), to meet legal obligations, and for our legitimate interests in keeping the service secure and improving it. We comply with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and, where applicable, the GDPR.

5. Sharing your data

We do not sell personal data. We share it only with:

• Service providers that host and operate the app on our behalf, under contract: authentication and database hosting, file storage, AI processing, real-time messaging and video infrastructure, push notification delivery, and crash reporting.
• Other users, limited to what you choose to share: your name and profile in groups you join, and messages you send.
• Authorities when required by law or to protect the rights and safety of users and the public.

6. Data retention

We keep your data while your account is active. When you delete your account, your profile, notes, files, calendar and messages authored by you are deleted from our production systems within 30 days, and from backups within 90 days. We may keep minimal records where the law requires it (for example, billing records).

7. Your rights

You can, at any time:

• Access and export your data from the app or by contacting us.
• Correct your profile details in Settings.
• Delete your account and data from Settings → Account → Delete account in the app, or by following the steps on our account deletion page.
• Withdraw consent for notifications in your device settings.
• Object to or restrict certain processing, and lodge a complaint with your data protection authority.

To exercise these rights, email privacy@luminary-app.com. We respond within 30 days.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to authorised staff and protected by multi-factor authentication. No system is perfectly secure, so please use a strong, unique password.

9. Children

Luminary is intended for university students and is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

10. International transfers

Our providers may process data outside the country where you live. Where this happens we use appropriate safeguards, such as contractual clauses, to protect it.

11. Changes to this policy

We will post any changes on this page and update the date at the top. For significant changes we will notify you in the app or by email.

12. Contact

Luminary App Co.
Riyadh, Kingdom of Saudi Arabia
privacy@luminary-app.com