Privacy Policy & Terms of Service

Lumino (“Lumino,” “we,” “us,” or “our”) is a screentime management service consisting of a Chrome browser extension and an accompanying web application. Together these tools help users set limits on the time they spend on specific websites, track their usage over time, and build healthier browsing habits through an in-app credit-score system.

This Privacy Policy describes how we collect, use, store, and protect information when you use Lumino’s Chrome extension and web application (collectively, the “Service”). By installing the extension or signing into the web app you agree to this policy.

For questions or concerns, contact us at: lumino.team@outlook.com

We collect the minimum data necessary to provide the Service.

2.1 Account Information

When you sign in with Google OAuth we receive your email address and a unique Google account identifier. We use this solely to create and authenticate your Lumino account. We do not receive or store your Google password.

2.2 Screentime & Browsing Activity

The Chrome extension monitors the time you spend on websites that belong to a screentime group you have configured. Specifically, we record:

• The domain name of tracked websites (e.g., youtube.com).
• The number of minutes spent on each tracked website, aggregated by hour of day, day of week, and rolling 30- and 90-day periods.
• The remaining daily allowance for each website group.

We do not record page titles, full URLs, search queries, form inputs, passwords, cookies, or any page content. We only know which top-level domain you visited and for how long.

2.3 Screentime Limits Configuration

We store the website groups and time limits you create so they can be synced to the extension and enforced consistently across sessions.

2.4 Credit Score

Lumino computes an in-app “credit score” based on how consistently you stay within your self-set limits. This score is stored in your account and displayed only on your personal dashboard. It is never visible to other users or any external party.

2.5 Timezone

We store your browser’s local timezone so that daily limits reset at midnight in your local time rather than in UTC.

2.6 Technical Logs

Our infrastructure provider may temporarily retain standard server logs (IP address, request timestamps, HTTP status codes) for security and reliability purposes. These are not linked to your browsing activity data and are purged within 30 days.

Every piece of data we collect is used for one purpose: making Lumino work for you.

We do not use your data for advertising, analytics sold to third parties, machine-learning model training (beyond your own account), or any purpose not listed above.

We do not sell, rent, license, or share your personal data with any third party — including advertisers, data brokers, research firms, or other users of Lumino.

We use the following sub-processors solely to operate the Service:

We may disclose information if required to do so by law or in the good-faith belief that such disclosure is necessary to comply with a legal obligation, protect our legal rights, or prevent harm. We will notify you of any such disclosure where legally permitted.

We take the security of your data seriously and implement the following protections:

• All data is encrypted in transit using TLS 1.2 or higher.
• Data at rest is encrypted by Supabase using AES-256.
• Row-level security (RLS) policies on our database ensure that authenticated queries can only access data belonging to the requesting user.
• No other Lumino user can query, view, or modify your account data.
• API keys and secrets are never embedded in client-side code.
• OAuth tokens are managed by Supabase's secure session infrastructure and are not stored in plain text.

While we implement these safeguards, no system is completely immune to security risks. If you discover a vulnerability, please disclose it responsibly to lumino.team@outlook.com.

We retain your data for as long as your account is active. Specifically:

• Usage data (minutes_used) is stored as rolling counters and is not permanently archived per-session.
• Your account information and limits are retained until you delete your account.
• Server logs are purged within 30 days.

When you delete your account all rows associated with your user ID are permanently deleted from our database within 7 days. Residual copies in automated database backups are purged on a rolling 30-day cycle.

You have the following rights with respect to your personal data:

To exercise any of these rights, email us at lumino.team@outlook.com. We will respond within 30 days.

Lumino is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

The Lumino Chrome extension requests the following browser permissions, each of which is necessary for core functionality:

The extension does not use remote code execution, inject scripts on arbitrary pages, or access page content, form data, or cookies. Permissions are scoped to the minimum required and will not change without a policy update and new extension version.

10.1 Acceptance

By installing the Lumino Chrome extension or using the Lumino web application you agree to be bound by these Terms. If you do not agree, do not use the Service.

10.2 Permitted Use

You may use Lumino for your own personal, non-commercial screentime management. You agree not to:

• Reverse-engineer, decompile, or tamper with the extension or web application.
• Attempt to access another user's data or circumvent our row-level security.
• Use automated means to artificially inflate or deflate your credit score.
• Resell or sublicense the Service.

10.3 Service Availability

Lumino is provided “as is.” We do not guarantee uninterrupted access and may modify or discontinue features at any time. We are not liable for lost usage data resulting from service outages or bugs.

10.4 Limitation of Liability

To the maximum extent permitted by law, Lumino shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of or inability to use the Service.

10.5 Governing Law

These Terms are governed by and construed in accordance with the laws of the United States, without regard to conflict-of-law principles.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, for material changes, notify you by email or via a notice in the web application. Continued use of the Service after any change constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: