Privacy Policy

How Lumina collects, uses, and protects your information when you use our story-creation platform and related services.

1. Scope

This Privacy Policy explains how Brilliants ("Lumina," "we," "our," or "us") collects, uses, discloses, and protects information when you access or use the Lumina website, mobile application, and any related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information we collect

2.1 Information you provide

• Account data: name, email address, password (hashed), profile photo, language preference, and (optionally) phone number when you register or update your profile.
• Authentication identifiers: if you sign in with Google, we receive your Google account ID, email, name, and avatar URL from Google. We never receive your Google password.
• Story content: text, prompts, titles, page layouts, illustrations, audio narration, and any media you upload (images, videos, audio clips).
• Community content: tags, categories, descriptions, and metadata you attach to stories you publish to the Community, your public Space, or shareable links.
• Communications: messages you send to support, feedback, and survey responses.

2.2 Information collected automatically

• Device & usage: device type, operating system, app version, IP address (truncated for storage), language, time zone, crash logs, performance metrics, and pages or features viewed.
• Session tokens: we issue and store bearer authentication tokens (Laravel Sanctum) on your device so you stay signed in.
• Cookies: see Section 7.

2.3 Information from third parties

When you connect a third-party service (Google), we receive the profile fields described in Section 2.1. We may also receive information from payment processors confirming the status of your subscription, but we do not receive or store your full payment card number.

3. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service, including saving your stories and account state across devices;
• Authenticate you and protect your account from unauthorized access;
• Generate AI-assisted content you request (text, images, voice narration) by securely sending your prompts to the AI providers we use as data processors;
• Operate community features, including showing stories you publish to other users and tracking interactions like stars or views;
• Process payments and manage subscriptions, point balances, and usage quotas;
• Communicate with you about updates, security notices, billing, and support requests;
• Detect, prevent, and respond to fraud, abuse, security risks, and violations of our Terms;
• Comply with legal obligations and enforce our rights.

4. AI-generated content

Lumina uses third-party artificial intelligence providers (large-language model and media generation services) to create story text, illustrations, and voiced narration based on the prompts you submit. When you use these features:

• The prompts you submit and the language/voice options you select are transmitted to the AI provider for the sole purpose of generating the requested output.
• We have contractual arrangements with our providers requiring that your prompts are not used to train their foundation models and are not retained beyond what is necessary to deliver the response.
• Generated outputs are returned to Lumina, stored in your account, and made available only to you unless you choose to share them.
• AI output is generated probabilistically and may be inaccurate, offensive, or otherwise unsuitable. You are responsible for reviewing AI output before publishing or sharing it.

5. Sharing & disclosure

We do not sell personal information. We share information only as described below:

• Service providers and processors who help us run the Service (hosting, email delivery, payment processing, AI generation, error monitoring, analytics). They are contractually limited to processing data on our instructions.
• Other users, when you publish content to the Community, your public Space, or via a shareable link. See Section 6.
• Legal compliance: when required to comply with applicable law, lawful requests from public authorities, or to protect the rights, property, or safety of Brilliants, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred. You will be notified before your data becomes subject to a materially different privacy policy.
• With your consent, for any purpose disclosed at the time you grant consent.

6. Community & public sharing

Lumina offers three sharing controls, each independently togglable on a story or folder:

• Community: makes the story visible in the public Explore feed and discoverable by anyone.
• My Space: lists the story on your public profile page accessible at /lumina/share/space/<your-code>.
• Direct Link: anyone who has the link can view the story.

When any of these are enabled, the story, your display name, and your profile photo become visible to other users, including non-registered visitors. You can disable these controls at any time. Disabling a control removes future visibility, but information already retrieved or screen-captured by viewers cannot be recalled.

7. Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember preferences, secure forms (CSRF tokens), and understand aggregate usage. You can disable cookies via your browser settings, but some features of the Service will not function. We do not use third-party advertising cookies.

8. Payments

Paid subscriptions and one-time purchases are processed by our payment processor on our behalf. We receive transaction confirmations and the last four digits of the payment instrument. We do not store full card numbers or banking credentials. Refer to the payment processor's privacy policy for how they handle your data.

9. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize personal information within 30 days, except where retention is required by law, necessary to resolve disputes, or required to enforce our agreements. Deleted stories may persist in encrypted backups for up to 90 days before being purged.

10. Security

We take reasonable measures to protect your information, including encryption in transit (HTTPS/TLS), hashed password storage, restricted database access, and routine security review. No system is 100% secure; you are responsible for keeping your password and authentication device safe.

11. Children's privacy

12. International transfers

Lumina may store and process information in countries other than the one in which you reside. Where data is transferred outside your jurisdiction, we rely on lawful transfer mechanisms (such as Standard Contractual Clauses) to protect your information.

13. Your rights

Depending on your jurisdiction (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and associated personal information ("right to erasure");
• Export your information in a portable format;
• Object to or restrict certain processing;
• Withdraw consent at any time without affecting prior lawful processing;
• Lodge a complaint with your local data protection authority.

To exercise these rights, email us at support@brilliants9.com. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before fulfilling your request.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via the app or email at least 14 days before they take effect. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

15. Contact us

For privacy questions or requests, contact:

Brilliants — Privacy
Email: support@brilliants9.com
Web: brilliants9.com