Privacy

Who we are. FitLumina is a consumer fitness web app. Contact: Fitlumina@outlook.com.

Age requirement

FitLumina is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact support and we will delete it.

Data we may process

• Account details when sign-in is enabled (email and authentication identifiers via Clerk)
• Profile details you enter (name, age, goals, training preferences, optional body metrics, gender for demos/accents)
• Workout plans, session logs, history, XP/streaks, and food/macro logs on your device and, when signed in and entitled, synced to our database
• Purchase and entitlement data via Stripe; license key as backup; single-device seat identifier
• Optional comfort notes; if you use Lumina voice, audio or transcripts may be processed as described under Voice & AI

Voice & AI (Lumina)

When you use Lumina voice, short audio clips and text may be sent to our voice AI provider (xAI) to transcribe speech and generate replies. FitLumina does not design to store raw microphone audio as a long-term archive on our servers. Request/response handling may pass through our hosting provider (Vercel) for the duration of the request. Retention and any model-training uses by xAI are governed by xAI’s terms and privacy policy. Do not use voice for sensitive medical, financial, or government identifiers.

Comfort notes & “injuries”

Optional comfort notes (body areas or limitations) help the app suggest gentler exercise swaps. They are not a medical record, not a diagnosis, and not monitored by clinicians. Do not use FitLumina to manage injuries or medical conditions without professional guidance.

FitLumina is a consumer fitness app, not a healthcare provider or health plan. We do not claim HIPAA “covered entity” status. We still treat optional limitation notes as sensitive personal information and use them only to improve training comfort in the app.

Retention

We keep account and entitlement records while your account or purchase relationship is active, and for a limited period afterward as needed for security, fraud prevention, accounting, and legal obligations (for example, payment records retained by Stripe). Cloud training state is kept while you use cloud sync and until you delete it or we process a deletion request. Browser localStorage remains until you clear it or use in-app delete. Rate-limit and operational logs, when used, are short-lived.

Sale of data

We do not sell your personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are commonly used under California law (CCPA/CPRA). If that ever changes, we will update this notice and provide required choices.

Your rights

Depending on where you live (for example California under CCPA/CPRA), you may have rights to know, access, correct, or delete personal information we hold, and to not be discriminated against for exercising those rights. Contact support to exercise these rights. We will verify requests as required.

If we introduce advertising or sale/share practices in the future, we intend to honor Global Privacy Control (GPC) signals where required. Today we do not run third-party ad pixels for selling personal data.

Contact: Fitlumina@outlook.com