Privacy Policy

1. Introduction

Welcome to The Lumina Path ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account information (email address, username, and password credentials)
• Encrypted dream journal data (see Section 3 below)
• Profile information and app preferences
• Communication data when you contact us
• Payment information, when applicable (processed by third-party providers)

2.2 Dream journal metadata

To sync your account across devices, we also store non-journal metadata such as entry IDs, creation and update timestamps, and sync status. The readable text of your dreams (title, content, tags, emotions, and AI analysis) is encrypted before it leaves your device or browser—we do not store that text in plain form on our servers.

2.3 Automatically collected information

We automatically collect certain information when you use our services:

• Device information (device type, operating system, browser type)
• Usage data (pages visited, features used, time spent)
• IP address and location data
• Cookies and similar tracking technologies

3. Dream journal encryption

Lumina Path uses client-side encryption for dream journal content on both our mobile app and web dashboard:

• Your device or browser encrypts dream text before it is sent to our servers. We receive and store encrypted payloads—we cannot read your journal without your account password.
• Your password unlocks an encryption key for your session. We do not store your password in plain text, and we do not store the unlocked key on our servers.
• On the web, you may need to enter your password again after refreshing the page or starting a new browser session to decrypt your dreams.
• When you use AI dream analysis on iOS, your entry is decrypted temporarily to generate results. Analysis output is stored back in encrypted form when saved to your journal.

If you reset your password through a forgot-password email link, you may lose access to previously encrypted dream entries until additional account recovery features are available. See our Terms of Service for related account responsibilities.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services (including encrypted sync across your devices)
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and security threats
• Personalize your experience and provide relevant content

5. Information sharing and disclosure

We do not sell your personal information or your dream journal content. We may share information only in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

6. Data security

We use technical and organizational measures designed to protect your information, including:

• Encryption in transit (HTTPS/TLS) for data sent between your device and our servers
• Client-side encryption of dream journal content before sync
• Password hashing for account credentials (we never store your password in plain text)
• Access controls and monitoring on our production infrastructure

No method of transmission or storage is completely secure. You are responsible for keeping your account password confidential and for signing out on shared devices. If you believe your account has been compromised, contact us promptly.

7. Your rights and choices

Depending on your location, you may have certain rights regarding your personal information:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Opt-out of marketing communications

To exercise these rights, please contact us using the information provided in the Contact section below.

8. Cookies and tracking technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. Children's privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International data transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our services, you consent to the transfer of your information to these facilities.

11. Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact us

If you have any questions about this Privacy Policy, please contact us at: