Legal
Privacy policy
People write things in a prayer journal they would not write anywhere else. This page lists every category of data Lumen holds, why it exists and how to get rid of it, in plain language, with no category left implicit.
Last updated 2026-08-15
Who is responsible
The controller for the processing described here is Lumen (sole proprietorship), Mariahilfer Straße 62/37, 1070 Vienna, Austria. For anything about your data, write to info@lumenprayer.app. It reaches a person, and gets an answer.
The short version
- Lumen contains no advertising SDK and no advertising identifier.
- Your prayers, notes and reflections are not read, analysed or used to train anything.
- Nothing is sold, rented or brokered to anyone.
- All six Bible translations live inside the app, so reading and searching Scripture does not tell a server what you looked up.
- You can ask for your account and everything in it to be deleted, and we will do it.
This website
The site sets no cookies, runs no analytics and embeds nothing from a third party: no fonts, scripts, pixels or videos loaded from another domain. That is why there is no cookie banner: there is nothing to consent to.
The site is hosted on Vercel, which processes standard server request data (IP address, time, requested URL, user agent) to deliver pages and defend against abuse. Vercel acts as our processor. If you submit the early-access form, the email address you type is stored so that we can write to you once, at launch. Nothing else is attached to it, and asking us to remove it takes one line of email.
The app: what is stored, and why
Lumen keeps your data in a Supabase (PostgreSQL) database so it survives a lost phone and follows you to a new one. Every table listed below has row-level security enabled, so a row is readable only by the account that created it.
| What | Why it exists |
|---|---|
| Account: email address, and a password or one-time sign-in code | To sign you in and to recover your account. Handled by Supabase Auth. |
| Profile: display name, optional city, accent colour, dark mode, text weight, language, chosen Bible translation | To greet you by name and to keep the app looking and reading the same on every device. The city is optional and only used to suggest a nearby community. |
| Onboarding answers: tradition, prayer and Bible experience, goal, main obstacle, daily time, preferred reminder | To choose your first reading plan, routine and reminder time instead of dropping you into an empty app. Kept so those choices can be revisited. |
| Prayers: title, category, your own text, answered state and the note you write when a prayer is answered | Your journal. It exists only so you can read it back. |
| Bible highlights and notes: the verse reference, the highlight and any note beside it | To show your marks the next time you open that chapter. |
| Reading progress: which plan is active and which days are done | To resume where you stopped and to show plan progress. |
| Habits, routines and completions: the steps you defined, their schedule, and which ones you completed on which day | To run today’s routine and to draw the week. |
| Reflections: short answers you write during a routine | So you can look back at them later. |
| Streak snapshots: the day’s goal, how much of it was completed, and whether a grace day was used | To compute the streak and the journey without recalculating your whole history. |
| Push token: the Apple notification identifier for your device | Only present if you allow notifications, and only used to deliver the reminders you set. Revoking permission in iOS ends it. |
| Translation interest: which not-yet-available translation you tapped | To decide which Bible to license next. It records the translation, not what you read. |
| Subscription status: whether your subscription is active, when it renews, and the receipt Apple issues | To unlock the paid features on every device you sign in on. Card details never reach us: Apple takes the payment and we only ever see whether it went through. |
What is deliberately not collected
- No advertising or tracking identifiers, and no third-party analytics SDK.
- No contacts, photos, microphone or precise location. The city is a text field you type.
- No record of which Bible passages you read or search for. That happens on the phone, against the bundled text.
Who else sees it
Three processors, all under contract and none of them permitted to use your data for their own purposes:
- Supabase: database, authentication and file storage for the app.
- Apple: delivers push notifications, takes the payment for a subscription, and processes App Store data under its own privacy policy.
- RevenueCat: tells the app whether your subscription is active. It receives an identifier for your account and the purchase receipt Apple issues. It never sees your prayers, your notes, your reading or your name.
No one else. We do not sell or share personal data, and nothing in Lumen is used to train a machine-learning model.
Lumen includes the groundwork for an optional Bible-question assistant. It is switched off and no question you type reaches any AI service today. If it is ever enabled, this page will say so before it ships, and the feature will be something you choose to use.
How long it is kept
For as long as you have an account, because a prayer journal is only useful if it is still there next year. Delete your account and the associated rows go with it. Backups roll off within 30 days.
Your rights
Under the GDPR you can ask for access, correction, deletion, restriction, portability, and you can object to processing. Write to info@lumenprayer.app and you will get an answer within 30 days. You may also complain to a data protection authority in your country.
The legal basis is Article 6(1)(b), performing the service you asked for, for everything needed to run your account, and Article 6(1)(a), your consent, for push notifications. Consent can be withdrawn at any time in iOS Settings without losing your progress.
Children
Lumen is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has an account, write to us and it will be removed.
Changes
If this policy changes in a way that affects you, the date at the top changes and the app tells you. We will not quietly widen what we collect.