Privacy Policy — Lumi Diary

The English version below is the official, legally binding version.

This Privacy Policy explains how Lumi Diary: Journal with Lock (the "App"; Android package and iOS bundle ID com.lumidiary.journal), developed by Fighttech ("we", "us", "our"), handles information when you use the App on Android or iOS. By using the App you agree to this policy.

In short: your diary entries, photos, videos, voice notes, drawings, moods and tags are stored on your device. We do not have servers that store your diary and we never receive, read, sell or share its content. Optional backups go to your own Google Drive or iCloud account. We use Firebase for anonymous analytics and crash reports, and AdMob / Unity Ads to show ads in the free version.

1. Information stored on your device (diary content)

Everything you write or attach in the App — text, titles, moods, tags, photos, videos, audio recordings, drawings, stickers, themes, reminders and settings — is saved locally in the App's private storage on your device. Your lock PIN / pattern and security-question answer are stored on your device only (in hashed or platform-protected form). Biometric unlock (fingerprint, Face ID) is handled entirely by your operating system; the App never receives your biometric data.

We do not collect, transmit or have access to this content.

2. Optional backup to your own cloud

Google Drive (Android): if you enable backup, you sign in with Google and grant the App access to the hidden, app-specific appDataFolder of your Google Drive. Backup files are stored in your own Google account; we cannot access them. The App does not read or modify any other files in your Drive. Google's handling is governed by the Google Privacy Policy.
iCloud (iOS): if you enable backup, data is stored in the App's container in your own iCloud account, governed by Apple's Privacy Policy. We cannot access it.
ZIP export: you can export a ZIP backup file to a location you choose. You are responsible for where you keep or share that file.

The Google account email shown in the backup screen is used only on your device to identify which Drive to back up to and is not sent to us.

3. Information collected automatically

To keep the App stable and improve it, we use the following third-party services. None of them receive your diary content.

Service	Purpose	Data
Firebase Analytics (Google)	Understand which features are used, in aggregate	App-instance ID, anonymous usage events (e.g. "entry created", "theme changed" — never the text), device model, OS version, app version, country/language, approximate session data
Firebase Crashlytics (Google)	Detect and fix crashes	Crash stack traces, device state at crash time, installation UUID, OS and app version
Google AdMob	Show ads in the free version	Advertising ID (Android AAID / iOS IDFA if permitted), IP address, device information, ad interactions
Unity Ads	Show ads in the free version (mediation)	Advertising ID, IP address, device information, ad interactions
Google Play Billing / Apple StoreKit	Process Premium purchases	Purchase token, product ID, purchase status. Payment details are handled by Google or Apple and never shared with us.

Privacy policies: Firebase, Google Ads, Unity Ads.

4. Advertising and your choices

Consent (EEA, UK, Switzerland and other regions where required): we use Google's User Messaging Platform (UMP) to ask for your consent before personalized ads are shown. You can change your choice at any time from Settings → Privacy → Ad preferences in the App.
iOS App Tracking Transparency: on iOS, the App asks for permission before accessing your device's IDFA. If you decline, only non-personalized ads are shown.
Android: you can reset or delete your advertising ID in Settings → Google → Ads (or Settings → Privacy → Ads).
Premium users do not see ads.

5. Permissions

Photos / media / camera: only to attach pictures or videos you choose to an entry.
Microphone: only while you record a voice note.
Notifications: to deliver writing reminders you set.
Biometrics: to unlock the App with fingerprint or Face ID, handled by the operating system.
Internet: for optional cloud backup, ads, analytics, crash reports and purchases. Writing works fully offline.

6. How we use information

We use the limited data described in section 3 to operate, maintain and improve the App, fix crashes, measure feature usage in aggregate, show ads in the free version and verify purchases. We do not sell personal information and we do not use your diary content for any purpose.

7. Legal bases (EEA/UK users)

We rely on your consent for personalized advertising and, where required, analytics; on our legitimate interest in keeping the App secure and stable for crash reporting; and on performance of a contract for processing purchases.

8. Data retention

Diary content stays on your device (and your own backup) until you delete it. Firebase Analytics data is retained for up to 14 months; Crashlytics crash data for up to 90 days. Ad-partner retention is governed by their own policies.

9. Children's privacy

The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Security

Your diary is protected by the App lock and by your device's own security. Cloud backups are protected by your Google or Apple account. No method of storage is 100% secure; please keep your device and accounts protected with strong credentials.

11. Your rights and data deletion

Because we do not hold your diary content, you control it directly:

Delete individual entries in the App, or delete all data from Settings → Data → Delete all data.
Uninstalling the App removes all locally stored data.
Delete cloud backups from Settings → Backup in the App, or from your Google Drive settings (Manage apps) or iCloud settings.
To reset analytics/advertising identifiers, use your device settings as described above.

Depending on where you live (e.g. GDPR, UK GDPR, CCPA/CPRA), you may have rights to access, correct, delete or object to processing of personal data. Email us and we will help, including with any requests to Google or Unity related to identifiers. See also our data deletion page.

12. International transfers

Our service providers (Google, Unity) may process data in countries other than yours, under appropriate safeguards such as Standard Contractual Clauses.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the effective date. Significant changes will be announced in the App.

14. Contact

Fighttech — Email: trunghieu4121993@gmail.com