About
Privacy Policy.
Luminoise is built to need as little about you as possible. This page says what we do handle, who else touches it, and what you can ask of us.
What this covers
This policy covers the website at luminoise.app (the “Site”) and the Luminoise iPhone app (the “App”), both operated by Luminoise (“we”, “us”). It does not cover other websites we link to, such as the research we cite or the Apple App Store, which have their own policies.
The Site
Server logs
The Site is delivered through Cloudflare. When you visit, Cloudflare processes technical data needed to deliver and protect the Site, such as your IP address, the page requested, your browser and device type, and the time of the request. We use this to keep the Site available and secure, not to profile you.
Fonts
Some text is set in fonts loaded from Google Fonts. Loading them sends your IP address and browser details to Google, which handles them under its privacy policy.
Cookies and storage
We do not set cookies and we do not use advertising, analytics or tracking scripts on the Site. Your browser’s local storage keeps two small items on your device only: your light or dark theme choice, and the time of your last visit, which decides whether the intro animation plays again. They are never sent to us, and you can clear them in your browser at any time.
The waitlist
If you join the waitlist, we store your email address, the time you joined, and a short label saying which part of the Site you used. We use it to send you one email when Luminoise launches, and nothing else. The waitlist covers the iPhone app and the web app.
To stop abuse, we also keep a scrambled (keyed hash) form of your network address for up to an hour to limit repeated submissions. We do not store your raw IP address with the waitlist. When someone joins, we receive a short notice email with the address that signed up, sent through Cloudflare Email Routing.
The list is stored with Cloudflare and is visible only to us. To be removed, reply to the launch email or write to waitlist@luminoise.app, and we will delete your address. We keep it until you ask us to remove it or until we no longer need it for the launch email.
The App
The App does not require an account, and you can listen as a guest. Your favorites and routines are stored on your phone. We do not ask for your name, email address, contacts, location or precise health data in order to use it.
Apple provides developers with aggregated information about the App, such as downloads and crash reports from people who have chosen to share diagnostics with developers. That information does not identify you to us. Purchases, if any, and your Apple Account are handled by Apple under its own privacy policy.
The App Privacy section of our App Store page is Apple’s required summary of how the App handles data. We keep it consistent with this policy. If we add something that collects or shares more, such as accounts, syncing or analytics, we will update this policy and that summary before it reaches you.
When you contact us
If you email us, we receive your email address and whatever you choose to tell us, and we use it to reply and keep a record of the conversation. If you apply for a job, we receive the details you send, as described on the Careers page.
How we use information
- to deliver, secure and troubleshoot the Site and App;
- to respond to your messages and requests, and to email you once at launch if you joined the waitlist;
- to understand and fix problems, using aggregated information from Apple and Cloudflare;
- to meet legal obligations and protect our rights.
Where the GDPR or UK GDPR applies, our legal bases are legitimate interests (running and securing the Site and replying to you), performing a contract with you (providing the App), legal obligation, and consent where we ask for it, which you can withdraw at any time.
Health information
Luminoise does not ask for or collect health information, and it is not a medical device. If you tell us something about your health in an email, we use it only to respond to you. Please do not send anything you want kept private from us. For the limits of what Luminoise does, see the Neuroscience Vow.
How long we keep it
Content stored on your phone stays there until you delete it or the App. Cloudflare keeps server logs for the periods set out in its own policies. We keep waitlist addresses as described above, and emails and job applications only as long as we need them for the purpose they were sent, then delete them.
Your rights
Depending on where you live, you may have the right to ask us to access, correct, delete, restrict or export personal information we hold about you, to object to our processing of it, and to withdraw consent. If you are in the UK or European Economic Area, you may also complain to your data protection authority. If you are a California resident, or live in another US state with a privacy law, you may have the right to know what we collect, to delete or correct it, to opt out of sale or sharing (we do neither), and not to be treated differently for using these rights.
To make a request, email privacy@luminoise.app. We may need to confirm it is you, and we will reply within the time the law requires. Because the App does not need an account, we may hold little or nothing that identifies you. You can also use your device settings to remove the App’s data from your phone, and Apple’s settings to manage what you share with developers.
International transfers
Cloudflare and Google operate globally, so information may be processed in countries other than yours. Where the law requires, those providers rely on recognized transfer safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.
Children
Luminoise is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, email us and we will delete it.
Security
The Site is served over HTTPS with a strict content security policy, and we limit what we collect so there is less to protect. No system is perfectly secure, so we cannot guarantee absolute security.
Do Not Track
The Site does not track you across other websites, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We treat such a signal as a valid opt-out request.
Changes
If we change this policy, we will update the date at the top. For material changes we will give clearer notice on the Site or in the App before they take effect.
Contact
Privacy questions and requests: privacy@luminoise.app.