Privacy
Your memories. Your control.
This page is maintained by Lumora to explain, in plain English, how we handle your photos and account data.
Last updated · June 22, 2026
Server-side reveal lock
Locked photos never leave our servers until the reveal time you chose. Guests can't bypass it through the browser, the network tab, or a shared URL.
Encrypted in transit & at rest
All requests run over HTTPS/TLS. Photo files and database rows are stored encrypted at rest by our infrastructure providers.
We don't sell your data
Your photos, names, and emails are used to run Lumora — not to train models, build ad profiles, or sell to third parties.
You can delete everything
Delete a film and its photos are removed from storage. Delete your account and we wipe your profile, films, and uploads.
What we collect
- Account info — your email, display name, and avatar (if provided) when you sign in.
- Films & photos — film names, settings, guest lists, and the photos uploaded into each roll.
- Payment info — when you upgrade a film, our payment processor handles your card details. We only store the order ID, amount, and status.
- Basic logs — IP address, browser, and timestamps for security and abuse prevention.
Where your data lives
Lumora is built on managed cloud infrastructure. Your database rows and photo uploads are stored in encrypted buckets by our hosting providers. Photo files are referenced by signed URLs and gated by a server-side reveal check — locked photos are never delivered to guests before reveal time.
We use a small number of trusted subprocessors:
- Cloud database & auth — for accounts, films, and access policies.
- Image storage & delivery — for photo uploads, processing, and signed delivery.
- Payment processor — for upgrades and receipts (card data never touches our servers).
How the reveal lock works
When you choose after event, during event, or additional delay, your reveal time is enforced in our database — not just hidden in the UI. Until that time passes, photo rows are filtered out for guests by our access policies and the underlying file URLs are not returned. The film owner can always see their own photos.
Payments
Upgrades (more guests on a film) are processed by our payment provider. We receive an order confirmation, the amount paid, and the status — we never see or store your full card number, CVV, or bank credentials. Refund and chargeback requests are handled per the provider's rules.
Cookies & analytics
We use the minimum cookies needed to keep you signed in and to remember your preferences. We don't run third-party ad trackers. If we add product analytics, we'll use privacy-respecting tools and update this page.
Your rights
- Access — view your films, guests, and photos at any time inside the app.
- Delete a film — removes the film, its photos, and its guest list.
- Delete your account — wipes your profile and all content you own. Email us to request this.
- Leave a film — if you were invited, you can leave and your guest entry is removed.
Contact
Questions, deletion requests, or security reports: privacy@lumora.app.
Privacy you can feel in the product.
Start a film, invite your circle, and keep the reveal under your control.