# Privacy Policy for Luma **Effective Date: May 30, 2026** Luma ("we," "us," or "our") is a mobile application developed by Backlogr Devs, designed to provide a privacy-respecting client for accessing the Lemmy fediverse (a decentralized link aggregation and discussion platform). We are committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By downloading, installing, or using Luma (the "App"), you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App. ## 1. Information We Collect We collect minimal information to provide and improve the App's features, such as browsing communities, posting content, and managing your Lemmy account(s). The types of information we may collect include: ### a. Account and Authentication Information - Luma connects directly to Lemmy instances (servers) you choose. To enable features like posting, commenting, voting, and subscribing, you must log in to a Lemmy account using your existing credentials. - **Important:** Your Lemmy username and password are never stored or processed by Backlogr Devs or our servers. Authentication is handled directly between the Luma app and the Lemmy instance you are connecting to, using that instance's API. - We do not create or maintain separate user accounts for Luma itself. ### b. Subscription and Payment Information - For premium or plus accounts, subscriptions are processed through third-party payment providers, which may include Google Play Billing and other authorized payment processors. We do not collect or store your payment details (e.g., credit card information, bank account details). All billing and payment processing is managed exclusively by the third-party payment provider, and we only receive confirmation of your subscription status. - We may collect basic information related to your subscription, such as transaction identifiers or account references provided by the payment processor, solely to verify and manage your premium access and entitlements. ### c. Usage and Device Information - Automatically collected data when you use the App, including device type, operating system, IP address, app version, and usage patterns (e.g., which communities you view, how you interact with posts). - We may use analytics tools to collect anonymized data on app performance and user behavior to improve the App. - We may collect data about application usage and performance, including crash reports and diagnostic information. This information is used solely to identify and resolve technical issues, improve app stability, and enhance the user experience. ### d. User-Provided Content - Any content you create or interact with through Luma, such as posts, comments, votes, direct messages, and uploaded media (images, links). This data is sent directly from Luma to the Lemmy instance(s) you are connected to. - **Crucially, this content is stored on the Lemmy instance(s) you use, not on Backlogr Devs servers.** Your interactions are governed by the privacy policies of those individual Lemmy instances. - All data, including app settings and preferences, is stored locally on your device only. No cloud backup or synchronization features are offered. We do not collect sensitive personal information (e.g., health data, financial details beyond subscriptions, or biometric data) unless explicitly required for a feature and with your consent. ## 2. How We Use Your Information We use the collected information for the following purposes: - To provide core App functionalities, such as browsing, posting, and interacting with Lemmy communities. - To process and manage premium subscriptions through third-party payment providers. - To improve the App, fix bugs, identify crashes, and analyze usage trends. - To communicate with you, such as sending app updates or responding to support requests. - To comply with legal obligations, enforce our terms, or protect our rights. We do not use your information for targeted advertising or sell it to third parties. ## 3. Sharing Your Information We may share your information in limited circumstances: - **With Lemmy Instances:** When you use Luma to interact with a Lemmy instance, your data (including posts, comments, and votes) is shared with that instance in accordance with its own privacy policy and terms of service. - **Service Providers:** We use trusted third-party service providers for payment processing. These providers are contractually obligated to protect your data and use it solely for the services they provide to us. - **Legal Requirements:** If required by law, subpoena, court order, or government request, or to prevent harm, fraud, or illegal activities. - **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We do not share your personal information with unaffiliated third parties for their own marketing purposes. ## 4. Data Security We implement reasonable security measures to protect your information from unauthorized access, loss, or alteration. However, no method of transmission or storage is completely secure. By default, your Lemmy credentials are never stored by us. Your interactions with Lemmy instances are subject to the security practices of those instances. All app data is stored locally on your device. We recommend using device-level security features (e.g., passcodes, biometric authentication) to protect locally stored data. ## 5. Data Retention We retain your information only as long as necessary for the purposes outlined in this Policy or as required by law. For example: - Usage data may be anonymized and retained indefinitely for analytics. - Subscription data is retained for billing verification. Content you post to Lemmy instances is retained according to those instances' own data retention policies. You can request deletion of your data from our systems at any time (see Section 7). ## 6. Children's Privacy The App is not intended for children under 13 years of age (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete it promptly. ## 7. Your Rights and Choices Depending on your location, you may have rights under data protection laws (e.g., GDPR, CCPA): - **Access and Correction:** Request a copy of your data or correct inaccuracies. - **Deletion:** Request deletion of your data (note: this may affect App functionality). - **Opt-Out:** Disable analytics via App settings. - **Consent Withdrawal:** Withdraw consent for data processing where applicable. To exercise these rights, contact us using the details in Section 9. We may verify your identity before processing requests. You can manage subscriptions through Google Play settings. For content you've posted to Lemmy instances, you must contact those instances directly for deletion requests. ## 8. International Data Transfers Backlogr Devs is based in Uganda. Additionally, Lemmy instances you connect to may be located anywhere in the world. By using the App, you consent to the transfer of your data to these locations, where privacy laws may differ. ## 9. Changes to This Privacy Policy We may update this Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via the App or email. Continued use of the App after changes constitutes acceptance. ## 10. Contact Us If you have questions about this Privacy Policy or your data, please contact: - **Developer:** Anslem Seguya - **Email:** support@backlogr.site - **Phone:** +256 784 491 735 - **Group:** Backlogr Devs For support related to Google Play subscriptions, contact Google Play Support directly.