Privacy Policy

Lumen is a personal knowledge base and notes app. You create notes and pages, organize them with tags and properties, capture checklists, action items, and reminders, attach files, and use AI features to summarize, ask questions, and draft. Lumen is built for individual use rather than public publishing, so the default state of everything you write is private to your account.

This policy applies to the Lumen web app and the account you use to sign in.

We collect only what Lumen needs to work. There are three categories.

Account data. Your email address, display name, and avatar image if you upload one, plus authentication details created when you sign in with an email and password or with Google sign-in. When you use Google sign-in, we receive basic profile information from Google such as your email address, name, and profile picture. We never receive your Google password.

Your content. Everything you put into Lumen, including:

• Notes, note pages, titles, and rich text content
• Tags, properties, statuses, and priorities
• Checklists, action items, reminders, and due dates
• Files and audio you upload as sources for a note
• AI-generated output you keep, such as summaries, briefings, transcripts, and chat replies
• Share links you choose to create, and the notes they expose

Usage and technical data. Information needed to operate and secure the service, such as timestamps for creating and updating records, device and browser information, approximate region derived from your connection, error and diagnostic logs, and basic request logs from our infrastructure providers.

We do not ask for, and ask that you do not store, sensitive information you would not want held in a personal notes app, such as government identifiers or payment card numbers.

We use the information above to:

• Provide Lumen: create, store, search, and display your notes, pages, and tasks
• Sync your content across the devices and browsers where you are signed in
• Power AI features you invoke, such as chat, summaries, proofreading, transcription, and daily briefings
• Keep your calendar, reminders, and task views accurate to your local time zone
• Maintain security, prevent abuse, detect fraud, and debug failures
• Respond to you when you contact support and to send essential service messages such as password resets

We do not use your notes or personal content for advertising, and we do not build advertising profiles about you.

AI features run only when you ask for them, for example when you open Ask Lumen, generate a summary or study guide, proofread text, transcribe audio, or view the daily briefing.

When you use an AI feature, the relevant content is sent to an AI provider on our behalf so the request can be completed. That may include the note or page you are working in, text you selected, attached source files, transcripts of audio you uploaded, and your prompt.

• Content is processed only to produce the feature you requested and to return the result to you
• We do not use your content to train AI models, and we ask our AI providers not to train on it either
• AI providers may retain limited request data briefly for abuse prevention and reliability, as described in their own terms
• AI output can be incomplete, out of date, or wrong. Treat it as a draft and verify anything important, especially dates, numbers, names, and commitments

If you would rather a note never reach an AI provider, simply do not run AI features on it.

You can attach documents and audio to a note, and record audio directly for meeting, lecture, and interview notes. Uploads are stored so they can be shown alongside the note and used as sources for AI answers. Audio may be split into segments and transcribed by an AI provider so it can be searched and summarized.

You are responsible for what you upload. Please only upload material you have the right to use, and only record people where you have their consent and recording is lawful where you and they are located. Deleting an attachment removes it from the note; deleted files are removed from active storage and then purged from backups on our normal cycle.

We do not sell your notes or personal content, and we do not rent or trade it. We share information only in these situations.

Service providers. We rely on a small set of vendors to run Lumen, including cloud infrastructure and database hosting, authentication, file storage, email delivery for account messages, error monitoring, and AI providers for the features described above. They may process your information only on our instructions and only to provide their service to us.

At your direction. If you create a share link for a note, anyone with that link can view that note until you disable the link. You control whether a link exists.

Legal and safety. We may disclose information if we are required to by law, valid legal process, or a lawful government request, or where we believe disclosure is necessary to protect the rights, safety, or property of you, us, or others. Where we are permitted to notify you, we will try to do so.

Business changes. If Lumen is involved in a merger, acquisition, or transfer of assets, your information may transfer as part of that transaction, and this policy will continue to apply until it is replaced by a policy you are told about.

Your data is stored with our managed cloud infrastructure provider. Traffic is encrypted in transit, data is encrypted at rest by our provider, and access to your content is restricted at the database level so records are scoped to your account. Access by our team is limited to what is needed to operate the service and investigate problems.

No service can promise perfect security, so please use a strong, unique password and keep your email account secure.

We keep your content for as long as your account is active. Notes you delete go to Trash and remain recoverable until you delete them permanently or the Trash retention window passes. When you delete your account, your notes, pages, attachments, tasks, and profile are deleted from active systems; residual copies in encrypted backups and operational logs age out on our normal schedule. We may keep a minimal record of the deletion itself for security and compliance.

You stay in control of your account and its contents.

• Update your profile: change your display name, avatar, and preferences in Settings
• Export your work: export any note as a PDF, and copy content out of Lumen at any time
• Delete content: delete notes, pages, attachments, and share links yourself
• Delete your account: use Settings to permanently delete your account and its content
• Ask us: request access, correction, or deletion, or ask a privacy question, by writing to privacy@lumenpkm.com

Depending on where you live, you may have additional rights over your personal information, such as the right to access, correct, delete, or port it, or to object to certain processing. We honor these requests for all users where we reasonably can, and we will never charge you or degrade your service for exercising them. We may need to verify your identity through your account email before acting on a request.

Lumen is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a minor has created an account, contact us and we will remove the account and its content.

Lumen is operated with cloud infrastructure and AI providers that may process data in countries other than your own, including the United States. Where information moves across borders, we rely on our providers' safeguards and contractual protections for those transfers. Wherever your data is processed, the commitments in this policy apply.

We may update this policy as Lumen changes. When we do, we will revise the effective date at the top of this page, and for material changes we will give notice in the app or by email before the change takes effect. Continuing to use Lumen after an update means the updated policy applies to you.

Questions, requests, or concerns about privacy are welcome. Write to privacy@lumenpkm.com and a human will read it.