Privacy policy
Last updated: October 21, 2026
Lumiquo is built local-first. This policy explains what stays on your device, when data leaves it, and how launch notification requests are handled.
Where your data lives
Notes, transcripts, summaries, tags, version history, Forge sessions, documents, preferences and app-lock state are stored locally for your signed-in account. Lumiquo does not operate cloud sync for your notebook. Audio is streamed for transcription and is not retained as a recording. Recovery snapshots are temporary copies of unfinished work; they are deleted when saved or discarded and purged after 30 days.
Account and access
Sign-in is required. Your email or sign-in token is processed by Firebase Authentication to create and verify your account. Signing in does not upload your notes. A salted PIN hash and app-lock settings stay on your device. Optional biometrics are handled by the operating system; Lumiquo does not receive biometric data.
When you choose cloud AI
When you choose Refine, Summarize or Forge, relevant note or section text is sent over HTTPS to the Lumiquo backend and forwarded to OpenRouter for AI processing. Audio is not sent for these AI actions. The backend does not store prompt or result text in its database, files or logs. It can retain usage metadata: account identifier, opaque note/document identifier, task, model, tokens, cost, duration and status. This describes Lumiquo’s backend; it does not promise universal zero retention by third-party providers. AI results can be inaccurate and should be reviewed.
Optional research and transcription
Forge Research requires your request and consent. The section, current section text and question are processed through the backend’s web-search provider; the original note is not included in that Research request. Smart transcription processes voice on-device after a language-model download. Downloads contact the apoema-ai/ai-models GitHub releases without sending notes. Optional Cloud transcription uses the platform speech engine, such as Google on Android or Apple on iOS, under its own policy.
Diagnostics and integrity checks
Firebase Crashlytics may receive crash traces and an account identifier, without note text or audio. Release builds use Firebase App Check with Play Integrity or DeviceCheck to verify genuine app requests. Support forms are disabled in current beta builds; if enabled later, submitting one sends the information and diagnostics you choose to the team through Resend.
Your controls
You can export notes, settings and documents as a ZIP from Settings → Privacy → Export My Data. The ZIP is plaintext and its temporary copy is removed after sharing. Deleting local data removes the notebook, documents, preferences and app-lock state on this device while keeping the account. Deleting your account also deletes the local data and Firebase account; reauthentication may be required. Signing out retains local data. Uninstalling removes local app data. AI usage metadata is not deleted with individual notes or accounts because it records usage already incurred and contains no note text.
Data use and children
Lumiquo does not sell your data, use advertising trackers, upload notes for cloud storage, retain audio recordings, or use your notes to train models. Lumiquo is not directed at children under 13. We do not knowingly collect personal information from children.
Website launch notifications
When you request a Lumiquo launch notification, we use your email for that notice. Vercel processes the form, Cloudflare Turnstile protects against automated submissions, and Resend stores the contact and sends the request to lumiquo@apoema.ai. The team notification records the requested product, page language and consent. We reuse the contact segment used by Koin for Kids and EzTally; requesting Lumiquo does not subscribe you to announcements for those products. Existing unsubscribe preferences are preserved. Function error logs do not contain your email or verification token. To cancel or request deletion, email lumiquo@apoema.ai. We close the launch list after the announcement and remove records no longer needed. This website request is separate from an app account.
Contact and changes
Lumiquo is operated by Rodrigo Mendes / Apoema. For privacy requests, contact privacy@apoema.ai. For launch requests, contact lumiquo@apoema.ai. We may update this policy as the product changes.