Privacy Policy

Account data: your email address and, if you sign in with Google, the basic profile information Google returns. Passwords are handled by our authentication provider and never stored by us in readable form.

Photos and albums: the image files you upload, plus their filename, size, file type, upload date and the album you place them in.

Billing data: your subscription status, plan, renewal date and a payment-processor customer reference. Card numbers are entered on the payment processor's form and are never stored on our servers.

Photos are kept in a private storage bucket. There is no public URL for a photo file. Every view or download is served through a short-lived signed link generated for your session.

Access rules are enforced per account at the database and storage layer, so one account cannot list, read, modify or delete another account's photos.

We do not scan your photos for advertising, we do not sell them, and we do not use them to train machine-learning models.

Deleting a photo moves it to trash, where it stays recoverable for 30 days. After that window it is permanently removed from storage.

Deleting your account removes your photos, albums and share links. Billing records required for accounting may be retained by the payment processor.

A share link is optional and off by default. Turning it on generates a random, unguessable token for that album only.

Anyone holding the link can view and download the photos in that album. They cannot upload, rename, move, delete or see any other album, and they never gain access to your account.

Share pages are marked no-index so search engines do not list them, but a link is only as private as the people you send it to. Turning sharing off revokes the token immediately and old links stop working.

Lumenly Cloud is $5 per month. Payments are handled by our payment processor; we receive the subscription status, renewal date and a customer reference so we can unlock your library and show your billing page.

We never see or store full card numbers, CVC codes or bank credentials. Invoices, payment methods and cancellation are managed through the billing portal.

We rely on a small number of providers to run the service: cloud hosting, database, authentication and object storage for your library, and a payment processor for subscriptions. Each receives only the data needed for its function.

You can download your originals at any time, individually or as a ZIP, and you can delete any photo, album or your whole account.

To request a copy of your account data or its deletion, contact us from the email address on your account.

If this policy changes in a way that affects how your photos, share links or billing data are handled, we will update this page and notify account holders by email.