Last updated: October 13, 2026
Lumo ("we," "our," or "the app") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have.
Photos you enhance. When you enhance a photo, it is sent over an encrypted connection to our server and on to OpenAI, which returns the enhanced result to your device. When Lumo sorts photos into rooms, a smaller copy of each photo is sent the same way to identify the room. We do not store your original or enhanced photos on our servers. They stay on your device (and in your iCloud account if iCloud is on, see below) unless you choose to save or share them.
Listing details for descriptions. When you generate a listing description, the details you entered (such as the address, price, property type, bedrooms, bathrooms, square footage and highlights) are sent to our server and OpenAI to write it. We do not store them on our servers.
Usage data. We use PostHog to understand how Lumo is used and to improve it. This includes the screens you visit and actions you take (for example, photos enhanced, room types, settings chosen, errors, and paywall views), along with your app version, device model, operating system version, network type, and IP address. PostHog uses the IP address to estimate your approximate location (city and country). This data is linked to your device identifier (see below), not to your name or email, which we don't collect. If you installed Lumo after tapping an Apple Ads ad, Apple tells us which campaign, ad group and keyword it was, so we can see which ads work. This uses Apple's AdServices framework, not the advertising identifier.
Advertising measurement (Meta). We advertise Lumo on Facebook and Instagram. To see which of those ads bring people to Lumo, the app uses Meta's SDK to tell Meta when Lumo is installed and opened, with a random identifier the SDK creates for your installation of Lumo and technical details such as your device model, iOS version, language, time zone and IP address. After you've saved or shared photos with Lumo, the app asks whether you'll allow it to track your activity. Only if you allow it does Lumo also share your device's advertising identifier with Meta, and does RevenueCat, our subscription partner, tell Meta when you start a trial or make a purchase in Lumo, including subscription renewals (the product and price, with identifiers for your device; never your payment details). Allowing this is optional, Lumo works the same either way, and you can change your answer at any time in your iPhone's Settings under Privacy & Security › Tracking. Meta's use of this data is covered by its privacy policy at facebook.com/privacy/policy.
Session recordings. PostHog also records app sessions (what appears on screen and where you tap) so we can find bugs and confusing screens. Text you type and all images, including your photos, are masked in recordings. Other text shown on screen, such as a listing address, can appear in a recording. Recordings also note the app's network requests (address, timing and status, not their contents).
Crash reports. We use Sentry to receive reports when the app crashes or freezes, along with occasional performance measurements. Reports include technical details such as the device model, operating system version, app version and where in the code the problem happened. They do not include your IP address or personal information.
Subscription data. If you subscribe to Lumo Pro, your subscription is managed by Apple through the App Store and by RevenueCat, our subscription management partner. We receive your subscription status (active, expired, trial) and link it to your device identifier and usage data. We never see your payment details, card number, or Apple Account credentials.
Referral codes. If you open "Give a Colleague 50% Off," we create a referral code and store it with your device identifier. Apple's reports tell us how many times your code was redeemed, but not who redeemed it. We use that count only to give you your reward.
Device identifier. Lumo creates a random identifier stored in your device's Keychain. Our server uses it to count enhancements and enforce free tier and usage limits, and our usage data, session recordings and subscription status are linked to it. It is not your Apple Account, phone number, or advertising identifier.
Support emails. If you tap "Report a Problem" after an error, the email your mail app opens includes your app version, iOS version, device model, plan, device identifier and the error you saw. It is only sent if you choose to send it. If you email us, we receive your email address and whatever you include.
Brand profile information. If you set up agent branding (name, phone, email, brokerage, headshot, logo), this information is stored on your device (and in your iCloud account if iCloud is on). It is not sent to our servers. It is only used to overlay your branding on exported photos and reports as you direct.
We do not require an account, and we do not collect your name, email address, or phone number unless you include them in your brand profile (which stays on your device) or email us. We do not access your device's GPS location. We do not access your photo library beyond the photos you choose to enhance. We do not use the advertising identifier or track you across other companies' apps and websites unless you allow it when Lumo asks (see Advertising measurement above). We do not sell or rent personal data, and apart from that advertising measurement, we do not share it with third parties for advertising.
Photos and listing details are sent to OpenAI's API over an encrypted HTTPS connection. According to OpenAI's API data usage policy, data submitted through the API is not used to train their models and may be kept for up to 30 days to monitor for abuse before it is deleted. See OpenAI's privacy policy at openai.com/privacy for their complete data handling practices.
Our server only passes your photos and listing details through to OpenAI and returns the result. To enforce limits and prevent abuse, it keeps usage counts by device identifier and, for up to a day, by IP address. It does not keep your photos or listing details.
Lumo stores the following data locally on your device:
Keychain (persists across reinstalls): Free tier enhancement counter, first install date, and device identifier.
App storage: Your listings and enhanced photos, brand profile information, app settings and preferences, and a local summary of your usage.
This data is not accessible to other apps and is removed if you delete the app (except Keychain data, which persists to prevent free tier abuse).
iCloud: If you're signed in to iCloud, your listings, photos and brand profile are also stored in your private iCloud account so they sync across your devices. That data is held by Apple, and we can't access it. You can turn this off for Lumo in your iPhone's iCloud settings.
Lumo uses the following third-party services:
OpenAI — photo enhancement, room sorting and listing descriptions. See openai.com/privacy.
PostHog — usage analytics and session recordings. See posthog.com/privacy.
Sentry — crash and performance reports. See sentry.io/privacy.
RevenueCat — subscription management. See revenuecat.com/privacy.
Meta — measuring our ads on Facebook and Instagram. See facebook.com/privacy/policy.
Vercel and Upstash — hosting for our server and its usage counts.
Apple App Store — payment processing and app distribution. See apple.com/legal/privacy.
lumophotos.com uses PostHog to measure visits and clicks, which can include session recordings, and Vercel Web Analytics to count page views. Vercel Web Analytics does not use cookies or collect personal identifiers; it tells visits apart with a hash of the request that is discarded after 24 hours. The site also loads fonts from Google Fonts. It does not use advertising trackers.
To stop Lumo sharing your advertising identifier with Meta, turn off tracking for Lumo in your iPhone's Settings under Privacy & Security › Tracking.
To ask us to delete the usage data and session recordings linked to your device, email us at the address below and we'll help you find your device identifier. Deleting the app removes the data stored on your device, except the Keychain items described above.
Lumo is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Lumo after changes constitutes acceptance of the updated policy.
If you have questions about this privacy policy or your data, contact us at feedback@lumophotos.com.