This policy covers the Luma marketing website and its story sample. The Luma app has different data flows and will have its own privacy notice before public release.
Who is responsible?
Mati Bot operates this website under the Luma name and is responsible for the website processing described here. Public contact and business details belong in the legal notice; those details are still being completed.
What happens when you visit?
Your browser sends the technical information needed to request a page: a network address, the requested URL and request headers, which can include browser information. The website server uses it to return the pages and assets you ask for.
The basis for this processing is our legitimate interest in delivering a functioning website (Article 6(1)(f) GDPR). Requests are necessary to show the site; you do not need an account or have to provide a name, email, photo or recording to browse.
The current website application does not retain access logs or visitor profiles. It processes requests in memory while serving them. Animation and sample-page choices stay in the current page and are not sent as analytics. We do not keep a browsing history or build advertising profiles.
Joining the beta list
If you choose to join, we store your email address, the signup date and the version of your consent in our private Supabase database. We use this information to send Luma beta invitations and updates. Joining does not create a Luma account or guarantee a beta place.
This is optional. The form asks for your agreement before saving your address. We keep it while organising the beta, or until you ask us to remove it. Email [email protected] from your signup address to leave the list or request a copy, correction or deletion. Please use a parent or caregiver’s email; we do not ask for children’s details.
Supabase stores the list for us. The signup form sends your address to the Luma server; visitors cannot read the list or access the database directly. Short-lived request counters help limit automated submissions; they are not stored with your signup. The form does not send email addresses to AI services.
Cookies, analytics and advertising
This site sets no cookies and uses no analytics, advertising pixels, fingerprinting, local storage or session storage. Fonts, illustrations and scripts are served with the website. We do not sell visitor data. See the cookie and device-storage notice.
Where information is processed
The public website is hosted by Render, with the application service located in Oregon, United States. Render processes connection information to deliver and secure the site. The Luma website application does not create visitor profiles or retain its own access logs. The website does not send visitor information to an AI service.
The operator is completing the hosting-specific details about infrastructure log retention and international-transfer safeguards. Render’s infrastructure processing is separate from the website application’s temporary request handling. This notice will be updated when those details and the operator’s public contact information are finalized.
Children and the Luma app
The website is information for parents and caregivers, with a story sample families can read together. It has no child accounts, chat, photo submission or voice-recording features. Please do not send children’s personal information through a sharing service on our behalf.
In the app under development, family stories, original recordings and chosen toy photos use a connected story Mac. Speech is transcribed locally; story ideas and selected photos may be processed by OpenAI. AR camera frames remain on the device. This website policy does not replace the app’s separate notices, retention rules and parental permissions.
Your choices and rights
Where the GDPR applies, you can ask about your data, request a copy or correction, and seek deletion or restrictions where the law allows. You may object to processing based on legitimate interests for reasons relating to your situation. See your privacy rights for the details and complaint routes.
We do not make automated decisions about visitors that have legal or similarly significant effects. Browsing the website is not consent to advertising or other optional data processing.
Changes to this notice
We will update this page when the website’s processing changes and show the revision date above. Any optional tracking introduced later will require the appropriate information and choices before it starts.