Who is responsible for your data
The provider of Lumora and controller of the personal data described here is Alfonso Alexandr, an individual based in the Republic of Moldova. Contact address: Boris Glavan 33, MD-3100, Balti, Moldova. Email: support@lumenstyle.net. These details match the developer’s public Google Play listing.
This policy explains what data the app processes, why it is needed, and who receives it. It is a notice about processing, not a substitute for separate consent where the law requires it.
The data we process
- Account: name, email, sign-in information, and details received from your chosen authentication provider.
- Wardrobe: uploaded clothing photographs, detected item attributes, categories, tags, favorites, saved outfits, and calendar entries.
- Personal photos and preferences: photos for virtual try-on and requested appearance analysis, and height, body parameters, gender, sizes, and style preferences you provide. Photos can include faces, bodies, interiors, and other information; consider this before uploading.
- AI requests: stylist messages, instructions, processing settings, and generated results.
- Purchases: transaction identifiers, subscription status, credit balance, and credit transactions. The app store processes payment details; we do not need your full bank card number.
- Technical data: IP address, device and app information, installation and advertising identifiers, usage events, push tokens, diagnostics, and error reports.
- Location: your selected city, or coordinates if you grant the system permission for weather. You can choose a city manually. Advertising and analytics SDKs may also infer an approximate region from your IP address.
Why we process data
We use data to operate your account, recognize clothing, build your digital wardrobe, suggest outfits, create virtual try-on images, perform appearance analysis you request, and provide calendar and weather features. Necessary data also supports purchase records, notifications, support, abuse prevention, and diagnostics.
Separate advertising and analytics tools measure app usage and advertising campaign performance. Their data and recipients are described below; this processing is distinct from processing photographs for outfit features.
Legal bases
- Contract: data necessary to perform the functions you request and provide paid features.
- Legitimate interests, where applicable: security, abuse prevention, and necessary diagnostics, taking your rights into account.
- Consent, where required: device permissions and certain advertising or analytics operations. Accepting app terms or reading this policy does not itself replace required consent.
- Legal obligations: transaction records, lawful requests, and protection of legal rights.
How photos reach AI services
Photo analysis: the original photo and instructions may be sent to Google Gemini or Anthropic Claude to identify clothing and its attributes. Routing depends on the feature, service availability, and plan.
Advanced digitization: when you use the advanced image-processing model, the original photo, not just its text description, is sent to fal.ai — Features & Labels, Inc. with instructions to extract an item and produce a clothing image. A source can be sent as file content or as a link accessible to the service.
Virtual try-on: fal.ai receives the person’s photo, garment images or a collage, instructions, and generation settings. Where a model runs through a third-party API, the model provider, such as OpenAI or Google, may also receive the data, depending on the selected route.
Fallback processing: Runware may generate images when the corresponding fallback provider is enabled. It receives the information needed for the same requested operation.
If you do not want a particular photograph sent to an external AI provider, do not upload it for that function. Upload your own photographs or material you have permission to use, and avoid including bystanders, documents, or unnecessary personal information.
Providers may retain inputs, outputs, request logs, and files. Deleting a photo in Lumora does not mean that all copies at an external provider are immediately deleted. Retention and deletion requests are explained below.
Who receives data
| Recipient | Data and purpose |
|---|---|
| Anthropic / Claude | Photos, instructions, and necessary context for clothing analysis and recommendations. Anthropic privacy |
| Google / Gemini | Photos and instructions for clothing or requested appearance analysis; feature settings. Gemini API terms |
| fal.ai — Features & Labels, Inc. | Original clothing and person photos, collages, instructions, settings, and results; where needed, API model providers identified by fal.ai. fal.ai privacy |
| Runware | Photos or garment descriptions for fallback generation when that route is enabled. Runware privacy |
| Contabo | Server infrastructure, databases, and app media storage. Contabo privacy |
| Google Play / RevenueCat | Purchase and app-user identifiers, subscription status, and transaction information. RevenueCat privacy |
| Google Firebase / Sentry | Analytics and diagnostic events, device information, technical errors, and related identifiers. Firebase privacy |
| Google AdMob / TikTok for Business | Advertising identifiers, app and purchase events, IP/region, and identity-matching data where supplied to the SDK. Hashed contact details remain pseudonymous and are not automatically anonymous. TikTok data terms |
| WeatherAPI | Selected city or coordinates for current weather and forecasts. WeatherAPI privacy |
Processing depends on the feature and enabled services. See Sentry’s privacy policy and Google’s privacy policy for AdMob. Photos are not necessary for advertising attribution. We do not sell photos or profiles as a standalone product; advertising disclosures may fall under special sharing or “sale” rules in some jurisdictions.
Where processing may occur
The operator is based in the Republic of Moldova. Hosting, AI, payment, advertising, and analytics providers may process data in other countries. In particular, fal.ai and other AI providers may process data in the United States and other countries where they or their suppliers operate.
Hosting part of the infrastructure in the EU does not mean all processing takes place in the EU. Transfers are subject to the applicable data protection requirements, including applicable processing agreements and international transfer mechanisms where contractual safeguards are required. You may request details about recipients and safeguards relevant to your request.
How long data is kept
Your profile, wardrobe, preferences, and saved results are kept while needed for your account and selected features, or until you request deletion.
After a verified account deletion request, primary personal data is deleted or de-identified within 30 days, except information that must be retained for a legal obligation or a specific dispute. Residual backup copies are retired within 90 days after deletion unless the law requires longer retention.
Necessary transaction records may be retained for applicable accounting or legal obligations. Such retention does not automatically extend to all profile data or photos. Diagnostics are kept to the extent and for the period necessary for security and troubleshooting.
External providers have separate retention periods and controls. In particular, fal.ai may store request inputs and outputs by default. Request payload retention and CDN file retention are separate processes. Deleting these may require a separate provider request; we review and forward relevant requests to the extent required by our applicable obligations. We do not promise that deletion in Lumora automatically and immediately removes all fal.ai files.
See fal.ai’s request retention documentation and fal.ai’s Data Processing Addendum.
How we protect data
Data transfers between the app, server, and AI APIs use HTTPS/TLS connections. Service credentials and server-side processing are subject to necessary technical access controls.
No online service can promise absolute security. If an incident occurs, we take action and meet applicable notification obligations. This does not waive our own data protection responsibilities.
Your rights and settings
Depending on applicable law, you may request access, correction, a portable copy, erasure, restriction, or object to processing. Where processing relies on consent, you may withdraw it; withdrawal does not invalidate earlier lawful processing.
Contact support@lumenstyle.net and explain the right you wish to exercise. To protect your account, we may ask you to confirm ownership, but do not ask you to send your password. We respond within the applicable deadline, normally 30 days. Where an extension is legally permitted, we explain the reason and new deadline.
You can change camera, photo, location, and notification permissions in device settings. Android also provides advertising identifier controls. Restricting system permissions does not automatically delete data already sent.
You can contact the National Center for Personal Data Protection of the Republic of Moldova or another competent supervisory authority, including in your country of residence where applicable.
Deleting your account and data
Email support@lumenstyle.net with the subject “Lumora Account Deletion”, preferably from the address associated with your account. Explain that you want to delete your account and associated personal data. This web page is available without signing in to the app.
After verification, we delete the profile, associated photographs, wardrobe, saved outfits, calendar, and related settings, subject to the legal retention exceptions described above. We explain any relevant exceptions when handling your request.
Uninstalling the app does not delete your account. Deleting your account does not cancel a Google Play subscription: cancel it separately under “Payments & subscriptions → Subscriptions.”
User age
Lumora’s terms provide for use by people aged 18 and over. We do not intend to collect children’s data. If you believe a minor has provided data contrary to these terms, contact us so we can review the request and take appropriate action.
Changes to this policy
The current version is published here with its revision date. For material changes to processing purposes or methods, we provide any notice required by law and obtain fresh consent when necessary. Continued app use alone does not replace consent required by law.
Contact the controller
Alfonso Alexandr
Individual, Republic of Moldova
Boris Glavan 33, MD-3100, Balti, Moldova
Email: support@lumenstyle.net
App: Lumora: AI Wardrobe & Outfits on Google Play. App terms: Terms of Service.