PRIVACY & CONSENT
Your information stays your choice.
LUMEYRO is designed around explicit permission, limited data use and controls that are understandable in both the app and member portal.
Apple Health
Raw Apple Health records remain in Apple Health on your authorised device. LUMEYRO reads only the categories you authorise. If you enable private trend sharing, the app may securely save one limited daily summary so your progress can appear across your LUMEYRO account.
AI Companion context
The Companion receives only the account and health summary permitted by your sharing controls. It should not ask for unnecessary medical identifiers, and it does not continuously monitor you.
Your controls
- Turn Health-summary sharing on or off inside the iPhone Companion.
- Turn daily trend sharing on or off at any time.
- Choose whether proactive notifications are enabled, their categories, daily limit and quiet hours.
- Manage Apple Health permissions in Apple’s Health app or iPhone Settings.
- Contact info@lumeyro.com for account or data-rights support.
Together storage and voice
With your agreement, Together keeps conversations, confirmed recipes/routines, preferences, sessions, programs and Caring notes in your private account. You can pause or erase this space. Forgetting a note does not erase every earlier conversation. Voice recognition may be processed by your browser’s speech provider; selected reply text is sent to the protected voice service for playback. Microphone access starts with your action and stops when this page is hidden. Typed use remains available.
Family and Care Circle
Accepted adults control shared activities and optional limited check-ins. Private health records and conversations are not shared by these features. Guardian-managed profile structures use an age band, not an exact birthday; separate support histories must not expose adult conversations. Expanded child-device access is not released for actual children: private adult-operated testing uses fictional profiles, and further privacy, consent and safeguarding review is required. Care Circle notifications are minimal support updates, not emergency monitoring.
Browser storage and location
Account-scoped browser choices can retain a selected voice and chosen city. Setup answers remain in this tab for up to eight hours and are cleared after completion or sign-out. No precise coordinates are saved by the new web controls. Location is requested only by your action, rounded before leaving the browser and never tracked in the background. Chosen-city searches and rounded-area restaurant lookups go through LUMEYRO to Photon / OpenStreetMap. Forecast requests send a rounded area to MET Norway. These providers do not receive your account ID, health profile or conversation. Provider availability and coverage vary. Opening directions or dietary-search links separately shares the selected public destination/search with Apple or Google Maps. Companion uses a city or forecast only with the corresponding saved sharing choice; its browser forecast context expires after 15 minutes. Existing schedules keep their confirmed timezone until changed.
Shared health summaries on the website
When health-summary sharing and personalisation are enabled, Companion may use your last synced daily summary, labelled with its date and sync time. Missing values remain unknown. The browser cannot read Apple Health directly, and an older summary is never continuous monitoring. These records are not sent to weather or restaurant providers.
Account protection
Your website, iPhone and iPad use the same secured Supabase identity. Row-level security is used so signed-in users can access only records belonging to their own account.
