Privacy policy

for the iOS app “Lumi – Period & Pill” and this website · Last updated: November 3, 2026 · This is a translation; the German version is legally binding.

In short: Lumi does not collect, store or transmit any personal data. Everything you enter in the app stays on your iPhone only. There is no account, no server, no analytics, no advertising and no sharing with third parties.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Justin Michl
Mühlenplatz 1
23879 Mölln, Germany
Email: lumipille.support@proton.me

2. What the app processes on your device

Lumi works completely offline. The app stores the information you enter locally on your iPhone in an app-specific database (Apple SwiftData). Depending on how you use it, this includes:

your first name or nickname (optional, only to address you),
your pill schedule (pill and break days, start date, reminder time) and your supply,
cycle information (start of your last period, typical cycle and period length),
your daily entries: confirmed or missed pills, bleeding days and intensity, pain and its intensity, selected symptoms and free-text notes,
earlier pill schedules if you log a pill switch in the app, and an optional note about yourself for the doctor summary,
settings such as appearance, garden style and whether the estimated fertile window is shown.

This information is health data within the meaning of Art. 9 GDPR. It is processed exclusively by you on your device. The controller has no access to it at any time; nothing is transmitted to the controller or to third parties. There is therefore no processing by the controller within the meaning of the GDPR.

3. What the app does not do

No user account, no registration, no sign-in.
No servers operated by the controller, no cloud sync by the app.
No third-party analytics, tracking or advertising SDKs. The app itself transmits no usage statistics, crash reports or device identifiers. The only exception: if you have allowed sharing with app developers in iOS under “Privacy & Security → Analytics”, Apple forwards anonymised crash reports to the controller – without your entries and without your name. You control this solely through iOS.
No advertising, no in-app purchases, no sharing or selling of data.
No location requests, no access to contacts, microphone or camera. Lumi only accesses your photos if you choose a profile picture yourself: iOS then hands over exactly that one image, Lumi downsizes it and stores it locally in the app. The app cannot see the rest of your library.

4. Notifications (reminders)

Lumi reminds you with local notifications. They are scheduled and delivered by the app directly on your iPhone. No push server is involved; no data leaves your device for this. You can turn notifications off at any time in iOS Settings.

5. Widget, doctor summary, travel mode

Widget: So that the widget on your Home or Lock Screen can show your pill status, the app stores a small summary of the current day (e.g. “Pill 10 of 21”, reminder time, your first name) in a protected area on your iPhone that only Lumi and the Lumi widget can read. This also stays on the device. Note: a widget on the Lock Screen is visible without unlocking your iPhone – whether you put it there is up to you.

Doctor summary: On request, Lumi creates a PDF from your entries (you choose the time range and sections; your own notes are not included by default). The PDF is created on your iPhone and is shared exclusively via the iOS share sheet. Once you share it – via Messages, email or a printer, for example – it is wherever you sent it; Lumi has no further influence on that.

Travel mode: To keep your reminder at your home time while travelling, the app reads your iPhone's time zone. This is not location tracking: no location is requested and nothing is transmitted.

6. Backup file, device backups and switching devices

Backup file: At your request, Lumi creates a file (“Lumi backup YYYY-MM-DD.json”) containing all the information listed above. The file is created on your iPhone and is saved or shared exclusively via the iOS share sheet or the Files app – where it goes is your decision (e.g. iCloud Drive, AirDrop, a USB stick). The file is not encrypted. When restoring, Lumi only reads the file you select yourself. The controller never receives the file.

Device backup: The local app data is part of your iPhone's device backup. If you use iCloud Backup or a backup via a computer, it is included there according to the rules and settings of your Apple account. The controller has no influence on or access to this. You can find more information in Apple's privacy policy.

7. App Store

When you download the app from the Apple App Store, Apple Inc. or Apple Distribution International Ltd. processes data in accordance with its own privacy policy (e.g. Apple ID, device data, download statistics). The controller only receives anonymised, aggregated statistics from Apple (such as the number of downloads per country), from which no person can be identified.

8. Contact by email

If you email us, we process the data you provide (email address, content of the message) to answer your request. The legal basis is Art. 6(1)(b) GDPR (request regarding use of the app) or Art. 6(1)(f) GDPR (legitimate interest in answering). The data is deleted once the request has been fully dealt with and no statutory retention obligations apply. Please don't send us health data by email unless your request requires it.

9. This website

This website is a static site without cookies, analytics tools, embedded third-party content or a contact form. When you visit it, the hosting provider processes technically necessary connection data (e.g. IP address, time, page requested) in server logs in order to deliver the site and keep it secure (Art. 6(1)(f) GDPR). The hosting provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes this connection data as a processor; transfer to the USA is safeguarded by the EU Standard Contractual Clauses and Vercel's certification under the EU-US Data Privacy Framework. Details: Vercel's privacy policy.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection vis-à-vis the controller (Art. 15–21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). As the controller receives no data from the app, in practice this only concerns email correspondence.

You can view, change and delete the data stored in the app yourself at any time – completely via “Settings → Delete all data” in the app. If you delete the app, all locally stored data is irreversibly removed (remaining copies in your own backups or backup files are deleted by you via your Apple account's backup management or in the place where you keep them).

11. Children and young people

Lumi collects no data – including from children and young people. The app is aimed at people who take the pill or want to track their cycle; the age rating in the App Store takes the medical information it contains into account.

12. Medical notice

Lumi is a reminder and calendar app and not a medical device. It does not replace medical advice, makes no diagnoses and makes no statement about contraceptive protection. All forecasts shown – expected days, estimated ovulation, estimated fertile window – are calculated estimates based on your own entries and are not suitable for contraception. If you have health questions, please talk to your doctor.

13. Changes

If anything changes in how the app works that affects privacy, we will update this policy and publish the new version here. The date at the top shows the current version.