Privacy Policy

1. Information we handle and why

• Information you provide. This includes content you enter or submit to a feature, preferences and goals, and messages or attachments you send when requesting support. We use this information to provide that feature, remember your choices, and respond to you. Information saved only on your device is distinguished from uploaded information in the app-specific section.
• Account information, where an app offers accounts. The details requested at registration, such as an email address and chosen profile name, are used to create and secure the account and provide account features. Lumi currently does not require an Appfluence account.
• Purchases. The app store and our subscription providers supply transaction references, products purchased, trial eligibility, subscription status, renewal and expiry information, and purchase or refund events. We use these to give you paid access, restore purchases, resolve billing issues, prevent misuse, and understand subscription performance. For App Store purchases, Apple handles payment credentials; we do not receive your full card details.
• Technical and interaction information. Subscription and paywall services process app or installation identifiers, device and operating-system details, app version, language and region settings, approximate region derived from the network address, and events such as opening a paywall or selecting an offer. These support delivery, troubleshooting, analytics and comparison of paywall versions. A random identifier can still distinguish a device or installation; this information is not necessarily anonymous.
• Advertising measurement. Where enabled in Lumi, Meta receives app-install and launch events, trial starts, subscription purchases and renewals, together with product and transaction references, the amount charged, currency and available product-price information. This helps us measure which advertisements lead to installs and subscriptions and improve our advertising. Meta’s software may also process installation identifiers, device and app information, diagnostics and network information such as an IP address. Access to the device’s advertising identifier depends on your tracking permission. See the tracking choices and Lumi sections below.
• Network and security information. Online requests expose information such as an IP address and request timing to the infrastructure handling them. We use necessary technical information to deliver requests, limit abuse and keep services available.

Optional information is voluntary. Declining a permission or choosing not to provide information may prevent the feature that depends on it from working.

2. Service providers and other disclosures

Providers receive information needed for the work they perform. The providers used in Lumi are:

RevenueCat and Superwall use a common app user identifier in Lumi to keep subscription status and paywall events aligned. Lumi does not send its saved photo collection or Screen Time selections to these subscription providers.

We may also disclose relevant information where required by law, to respond to a valid legal request, to protect people or investigate misuse, or as part of a business transfer subject to applicable privacy protections. We may share information at your direction, for example when you deliberately use a sharing feature.

We do not sell your personal information for money. The advertising-related disclosures to Meta described in this policy may be considered “sharing”, targeted advertising or a “sale” under some privacy laws, depending on the information and its use. These activities remain subject to applicable consent and opt-out requirements. You can manage Apple’s tracking permission as described below and contact us to exercise applicable privacy rights.

3. Permissions, notifications and tracking choices

You can manage camera, photo access, notifications and other device permissions in operating-system settings. Relevant in-app settings provide additional controls. Turning off a permission affects future access and may stop the associated feature; it does not recall information already transmitted.

Lumi and Apple’s App Tracking Transparency (ATT). When advertising measurement is enabled, Lumi requests Apple’s tracking permission. You can choose “Ask App Not to Track” and still use Lumi and its subscription features. You can change this choice in iOS Settings → Privacy & Security → Tracking. Lumi enables collection of Apple’s advertising identifier only when ATT is authorised and rechecks the current choice when the app becomes active and before reporting purchases.

Declining tracking does not necessarily stop all event reporting. Install, launch and purchase-related events may still be sent to Meta for limited measurement with the tracking permission marked as not authorised and advertising-identifier collection disabled. This must respect Apple’s restrictions and any additional legal consent requirements. It is not a promise of complete anonymity: installation identifiers, device information and network information can still be involved. Lumi does not provide a substitute tracking identifier to bypass your choice.

Where applicable law requires consent for optional analytics, advertising identifiers or similar device access, that processing requires the relevant consent. An operating-system permission does not replace any additional consent required by law. This policy itself does not opt you into marketing.

These legal pages are hosted using OpenAI Sites and its delivery infrastructure. Hosting providers process connection information, such as IP addresses and request details, to deliver and protect the pages. Appfluence has not added advertising trackers, analytics scripts or cookies to these pages. The hosting provider’s handling of information is also described in OpenAI’s Privacy Policy.

4. Legal grounds for using information

We process personal information subject to South Africa’s Protection of Personal Information Act, 2013 (POPIA). Where applicable, UK or EEA data protection law also applies. The grounds relied on depend on the activity:

• Performing our contract with you: processing necessary to deliver paid access, fulfil purchases, manage an account where offered, and respond to service requests.
• Legitimate interests: proportionate security, fraud prevention, service reliability and understanding subscription performance, after considering the effect on your rights. We do not use this ground to avoid consent where consent is required.
• Consent: optional AI photo uploads in Lumi, advertising tracking and advertising-related device access where consent is required, and other optional processing for which consent is required. You can withdraw consent without affecting earlier lawful processing.
• Legal obligations: records and disclosures required for matters such as tax, accounting or responding to lawful requests.

Health information, religious beliefs and some other types of information have additional protection. Where a feature specifically requests such information, the notice shown for that feature explains its purpose and any additional consent required. We use that information only for the disclosed purpose and on a basis permitted by applicable law. Please do not include sensitive details that a feature or support request does not need.

5. Storage, retention and deletion

Information held only on your device remains there until you delete it or the app removes it as part of its normal operation. Device backups may contain separate copies controlled through your device or backup provider.

For information held in our services or by our providers, we determine retention according to its purpose: maintaining and restoring purchases, resolving support requests and billing disputes, preventing fraud, measuring advertising performance where permitted, and meeting legal record-keeping requirements. Information is deleted or de-identified when no longer needed for those purposes. App-specific retention details appear below.

Lumi keeps local transaction references and the date advertising measurement was first enabled to avoid reporting the same purchase repeatedly. Meta may retain events and technical information under its own retention practices and legal obligations. Turning off tracking or deleting local data does not automatically erase information already received by Meta. Contact us about information shared through Lumi, and see Meta’s Privacy Policy for its retention practices and privacy controls.

Deleting an app, account or local data does not itself cancel an app-store subscription or remove records the store must keep. Request deletion of remotely held information using the contact details below. We may need proportionate information to locate your records and verify the request.

6. International processing

Our providers may process information outside South Africa and your country of residence, including in the United States. Transfers from South Africa must meet POPIA’s requirements, for example through a binding agreement providing adequate protection or another applicable ground under section 72. Where UK or EEA transfer rules apply, the relevant transfer also requires an applicable adequacy decision, appropriate safeguards or another permitted basis. You can contact us for information about the safeguards that apply to your information.

7. Security

We use safeguards appropriate to the information and the service. In Lumi, these include encrypted network connections, device storage protections, restricted server credentials and signed activity-check results. No online service or device can be guaranteed completely secure. Keep your device and operating system updated and avoid sending unnecessary sensitive information in support requests or photos.

8. Your privacy rights

Depending on your location and the processing involved, you may have rights to access or receive a copy of your information, correct it, request deletion, restrict its use, obtain a portable copy, or withdraw consent. Exceptions may apply, for example where records must be kept by law.

You may object to processing based on legitimate interests. You may also object to direct marketing at any time.

Contact us to exercise your rights. We respond within applicable legal deadlines and may ask for information reasonably needed to verify and fulfil a request. For information stored only on your device, we may explain how to use local controls because we do not hold a remotely accessible copy.

Where applicable US state privacy laws apply, you may also have rights to know the categories of information disclosed, opt out of sale, targeted advertising or certain profiling, and appeal a declined request. An authorised agent may submit a request where permitted. We will not discriminate against you for exercising a protected privacy right.

In South Africa, you may request access to your personal information, seek its correction or deletion, and object to processing where POPIA permits. The Information Regulator provides forms for objections, correction and deletion requests.

You can complain to South Africa’s Information Regulator at POPIAComplaints@inforegulator.org.za or through its complaints channel. You may also complain to the competent authority in your country; in the UK this is the Information Commissioner’s Office. You do not need to contact us first to exercise a right to complain.

9. Younger users

The Services are intended for people aged 16 and over, subject to any higher age requirement stated for a particular app. If you are under 16, do not use the Services or submit personal information. If you are 16 or 17, a parent, guardian or other legally competent person must authorise your use and any processing for which their consent is required by applicable law. An app-store content rating does not replace these requirements.

If you believe a child has provided information contrary to the applicable age or consent requirements, contact us so we can investigate and, where appropriate, stop the processing and delete the information.

10. App-specific details: Lumi

Local collection and Screen Time

Lumi is a focus and screen-time app. Saved moments, full-size photos, stickers, activity progress, earned minutes, preferences and chosen apps are held on your device. There is currently no Lumi account or Appfluence cloud backup of that collection. Your device backup settings may separately preserve local data.

With your authorisation, Apple’s Screen Time frameworks use your selections and local activity signals to apply app restrictions and manage earned time. Lumi stores the selections using Apple-provided tokens. Lumi does not upload the selected-app list, browsing history or contents of other apps to its activity-check service, RevenueCat, Superwall or Meta.

Meta advertising measurement

When enabled, Lumi sends the measurement events described above directly through Meta’s official software. Trial starts and purchases are based on confirmed Apple transactions, rather than taps on a subscription button. Purchase events include the amount actually charged and its currency; a free trial normally has a zero charge, with the product’s listed price sent separately when available. Paid renewals may be reported when Lumi next opens if the app was closed when the renewal occurred.

We use these events to understand and improve campaigns for Lumi on Meta’s services. Where your permissions and applicable law allow, Meta may use the information with other information it holds for advertising measurement and relevant advertising, as described in Meta’s Privacy Policy. Apple’s tracking choice applies as explained in section 3; declining it does not remove your access to Lumi.

Lumi does not include your saved photos, stickers, chosen-app list, Screen Time activity, focus or activity-check content, or onboarding answers in its Meta events. Lumi does not provide your email address, phone number or RevenueCat user identifier to Meta. Meta’s software can still collect the technical information described in this policy.

Photo checks and activity confirmations

When you enable photo checks and submit a photo, Lumi removes capture metadata, including location metadata, and sends a reduced-size copy through its Cloudflare-hosted activity service to OpenAI. The request also includes the activity category and technical identifiers needed to check the submission and return a signed result. The full-size photo remains on your phone. Visible information within the photo is still part of the image, so avoid including faces, documents, screens or other private details that the check does not need.

Lumi’s activity service handles the check in memory and does not keep a database or saved copy of photos, activity histories or results. Network providers still process connection information. Security limits use temporary counters. The app stores the result and any short AI feedback locally.

OpenAI’s API documentation states that API content is not used to train its models by default. Its abuse-monitoring systems may retain content for up to 30 days, with exceptions described in its policy, including legal and safety obligations. Lumi requests that responses are not stored as retrievable application state; that setting does not eliminate abuse-monitoring retention. See OpenAI’s data controls.

All current Lumi activities, including hydration, work, stretching and journaling, use a photo you deliberately submit for AI checking. Timed activities also send the verification receipt and completion details to confirm the focus duration. Photos taken only as keepsakes, and not submitted for an activity check, remain on the device. The activity service uses a random installation credential; resetting it does not cancel subscriptions or erase subscription-provider records.

Your controls

Use Settings → Photo checks to stop future AI photo uploads. You can delete saved media and use Lumi’s data-deletion control to remove its local collection, settings, app selections and earned time, stop Lumi’s restrictions and turn off photo checks. Previously submitted photos remain subject to the provider’s retention rules. Optional notifications are controlled through iOS settings. Subscription cancellation is separate and is managed through your Apple account. Manage Meta-related tracking permission through iOS Settings → Privacy & Security → Tracking; this choice does not recall events already sent or necessarily stop limited measurement. Contact us at jason@tryonething.app about deletion, objections or other privacy rights.

11. Changes to this policy

We will update this page and its effective date when our practices change. For material changes, we will provide an appropriate notice through the affected app or another suitable channel. If a new use requires consent, we will obtain that consent before proceeding.

12. Contact Appfluence

Privacy requests and support: jason@tryonething.app
Responsible party: Jason Mayo trading as Appfluence (sole proprietor)
Address: 15 Alexander Drive, Winston Park, South Africa