Privacy Policy

Who is responsible

Lumora is run by Alexandro Almeida, who is responsible for the processing described here. Privacy contact: xandroalmeida@gmail.com.

Data we handle

Account: name, e-mail and password (stored only as a hash). If you sign in with Google we receive your name, e-mail and a Google account identifier; we never receive your Google password or access to other Google data.

Content you add: homes (name, country, currency, time zone and, if you provide it, address), equipment and areas, photos and documents (labels, receipts, manuals, warranties), maintenance records, reminders, service requests and quotes.

Invited technicians: whoever receives a request link sees only what you chose to share and may provide their name, contact and quote.

Technical data: IP address and browser tied to your session, and access logs kept briefly for security and troubleshooting. In the app (app.lumora.zalk.com.br) we use only essential session cookies, with no advertising cookies or analytics.

Website (lumora.zalk.com.br): only if you accept in the cookie notice, we use Google Analytics to count visits and clicks in aggregate. If you decline, no analytics code is loaded. You can change your choice at any time via the “Cookies” link in the site footer.

Why we use it

To provide the service you asked for (store and show your information, send reminders and e-mail notices, share requests with whom you choose), to keep your account secure, to meet legal obligations and, on the website and only with your consent, to understand which pages are useful.

We do not sell your data, do not use it for advertising and do not train AI models with it.

AI document reading

AI reading is optional and only happens after you allow it, each time. Only the chosen file is sent to Google (Gemini API) to suggest details such as brand and model; no other information about your home is sent. Suggestions are never applied without your approval.

We record each use (date, user, home, model and token counts) for cost control, without storing the file content in that record.

Who we share it with

Home members you invited and technicians, only what you choose to share.

Providers that run the service on our behalf: a contracted server (app and database hosting), Amazon Web Services (private file storage, in the USA), Amazon Web Services and Cloudflare (encrypted backups), Google (Google sign-in, AI reading and, with your consent, Google Analytics on the website), Cloudflare (website hosting) and Resend (e-mail delivery). Some of them process data outside Brazil.

Authorities, when required by law or court order.

How long we keep it

For as long as your account exists. When a home is deleted, access ends immediately and its data and files are permanently erased within 30 days. When you delete your account, your personal data is removed and authorship in history shared with other members is anonymised.

Backups expire on their own in about five weeks; if one ever has to be restored, deletions are re-applied before access is reopened. The AI usage record keeps only identifiers and counts, for cost purposes.

Your rights

You can view and correct your data in the app, export a home (Home › Export), delete a home or your account (Settings) and stop using AI reading at any time. For other requests under Brazil’s data protection law (LGPD) or the law that applies to you, write to the contact above.

Security

Access is always over HTTPS, files are kept in private storage with no public links, each home is visible only to its members and backups are encrypted. No system is immune to failure; if a relevant incident happens we will notify those affected.

Children

Lumora is not intended for people under 18.

Changes

We may update this policy. The date at the top shows the version in force; important changes will be announced in the app or by e-mail.