Effective Date: [LAUNCH DATE] · Last Updated: [LAUNCH DATE]
Welcome to LumenHealth (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information and health data when you use our mobile application (the “App”). We are committed to protecting your privacy and handling your health information responsibly.
By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
Our App allows you to track and manage personal health information. The types of health data you may enter include:
In addition to information you directly enter, the App may generate or retrieve the following:
If you use the Community features of the App, we collect:
Important distinction — private vs. public data: Your personal health data (conditions, medications, symptoms, vitals, mood entries, and journal entries) is private and is never shared with other users or displayed in the Community. Community posts and comments are separate content that you choose to share and are visible to other LumenHealth users. You control what you share in the Community.
We may collect:
We use your information for the following purposes:
Important: Certain features of our App require sending portions of your health data to third-party services. We want you to fully understand when and why this happens.
When a condition summary is not available from MedlinePlus, the App sends the condition name and related medical classification information to Anthropic’s Claude API to generate an informational summary. This means:
We use Google Firebase for data storage (Firestore) and may use Firebase Authentication for account management. Your health data stored in Firestore is subject to Google’s data processing terms. Firebase servers are located in the United States.
The App queries the WHO ICD-11 API to retrieve medical condition classification data. Only condition search terms and classification codes are sent; no personal identifiers are transmitted.
The App retrieves publicly available health information from the MedlinePlus service. Only condition names or identifiers are used in queries; no personal data is transmitted.
We do not sell, rent, or trade your personal information or health data to third parties. We do not use your health data for advertising purposes.
Certain health data is stored locally on your device using AsyncStorage. Data stored locally remains on your device and is not transmitted unless you explicitly use a feature that requires it (such as generating a PDF export or requesting an AI summary).
If cloud sync is enabled, your health data is stored in Google Firestore. We implement reasonable security measures to protect data in transit and at rest, including:
While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee the absolute security of your information. Locally stored data (AsyncStorage) is not encrypted by default and could be accessible if your device is compromised.
When you use the Community features, the following may be visible to other LumenHealth users:
Your personal health tracking data — including conditions, medications, symptoms, vitals, mood entries, weight, and journal entries — is never displayed in the Community or shared with other users unless you voluntarily include that information in a community post.
The App allows you to post anonymously in the Community. When you post anonymously:
Anonymous posting does not mean untraceable. It means your identity is hidden from other community members, not from LumenHealth LLC.
We may review community content to enforce our Community Guidelines and Terms of Service. This may include reviewing posts and comments for prohibited content, responding to user reports, and taking action such as content removal or account suspension when violations are identified.
If you delete a post or comment, it will be removed from visibility to other users. However, we may retain copies for a limited period for legal compliance, safety review, or to resolve disputes. If you delete your account entirely, your community content will be removed or anonymized within 30 days.
Depending on your location, you may have the following rights regarding your personal data:
If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt out of the sale or sharing of personal information (we do not sell or share your data); and not be discriminated against for exercising your privacy rights. To exercise these rights, contact us at privacy@lumenhealth.app with the subject line “CCPA Request.”
If you are a Colorado resident, you have the right to access, correct, and delete your personal data, as well as the right to opt out of the processing of personal data for targeted advertising or the sale of personal data. We do not sell your data. To exercise these rights, contact us at privacy@lumenhealth.app.
If you are a Washington State resident, we comply with the Washington My Health My Data Act. You have additional rights regarding consent for collection and sharing of health data, data minimization, and the right to access and delete your consumer health data. Contact us at privacy@lumenhealth.app to exercise these rights.
Residents of Connecticut, Virginia, Texas, and other states with comprehensive privacy laws may have additional rights. Please contact us at privacy@lumenhealth.app to learn more about exercising your rights under your state’s privacy law.
We retain your health data for as long as you maintain an active account or as needed to provide you with the App’s services. You may delete individual entries or all of your data at any time through the App. If you request account deletion, we will delete your personal health data and remove or anonymize your community content within 30 days, except where we are required by law to retain it.
The App is not intended for use by individuals under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected data from a child without parental consent, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately at privacy@lumenhealth.app.
In the event of a data breach involving your personal health information, we will notify you and applicable regulatory authorities as required by the FTC Health Breach Notification Rule and applicable state laws. Notification will be provided without unreasonable delay and will include a description of the breach, the types of information involved, and steps you can take to protect yourself.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the “Last Updated” date at the top of this policy. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
LumenHealth LLC
Privacy Requests: privacy@lumenhealth.app
General Support: support@lumenhealth.app
Aurora, Colorado