Privacy Policy

Privacy Policy — Lumina™ Last updated: July 2026 1. Data Controller Lumina™ is the data controller for the personal data processed through this application. 2. Data We Collect - Account information: name, email address, profile photo (via Google OAuth) - Career data: CVs, work experience, education, skills, projects - Job search data: saved jobs, analysis results, generated documents - Usage data: consent timestamps, subscription tier - Anonymous usage analytics: aggregate page visits and feature events (Vercel Web Analytics, cookieless and not linked to your identity) 3. How We Use Your Data - To provide AI-powered job search assistance - To generate tailored CVs and cover letters - To analyse job-CV fit and provide relevance scores - To maintain your account and preferences 4. Data Storage Your data is stored securely in the EU (Frankfurt region) using Supabase infrastructure. All data is encrypted in transit and at rest. 5. Third-Party Processing We send career data to Google Gemini's API for AI analysis. Google processes this data under their API terms and does not use it for model training. 6. Your Rights (UK GDPR) You have the right to: - Access your data (Settings > Export My Data) - Delete your data (Settings > Delete Account) - Withdraw consent at any time - Data portability (JSON export) 7. Data Retention We retain your data for as long as your account is active. Upon account deletion, all data is permanently removed within 30 days. 8. We Do Not - Sell your personal data - Use your data to train AI models - Share your data with advertisers - Track you across other websites or applications 9. Free Tools (Anonymous) Lumina offers free tools (for example the Free CV Score at /free-cv-score) that you can use without an account. When you use a free tool, the text you provide (such as a CV, a job description, or a company name) and the result we generate are stored so we can analyse and improve the tools. This free-tool data is anonymous: it is not linked to any account or to you personally. We store only a one-way hashed form of your IP address (never your raw IP), used to enforce fair-use limits. We do not sell this data, and we do not use it to train AI models. Because this data is not tied to an account, it is retained until we remove it manually rather than on an account-deletion schedule. You choose whether to use the free tools, and you confirm your acceptance of these terms before each use. 10. Contact For data protection enquiries, contact us through the application's support channels.