Privacy Policy

1. Who we are and what this policy covers

LumenDrift is operated by Lumenshore Limited (company number 09607326), registered in England and Wales. Our registered office is Windsor House, Troon Way Business Centre, Humberstone Lane, Leicester, England, LE4 9HA.

This policy covers the LumenDrift website, iPhone app, account and authentication services, early-access registration, customer support, and related backend services. You can contact us through the signed-in app or by writing to the registered office with “LumenDrift privacy” on the envelope.

2. Information we collect

• Account details: your name, email address, authentication-provider identifier, and LumenDrift account identifier.
• Google sign-in data: when you choose Continue with Google, Google and our authentication provider, Clerk, provide the basic profile information you approve, normally your Google account identifier, name, email address, and profile image if available.
• App and device details: preferred sound ritual, locale, time zone, app version, build number, iOS version, device model, notification-authorisation state, and a pseudonymous device identifier stored by our backend as a protected digest.
• Content you choose to send: early-access email, support or chat messages, bug-report details, and an optional note with a deletion request.
• Service data: authentication records, security events, request logs, signed-media requests, and other diagnostics needed to operate and protect the service.
• Website measurement: Vercel Web Analytics records anonymous page views, including the visited path, referrer, broad location, device, operating-system, and browser categories. Vercel Speed Insights records Core Web Vitals and related performance data. We do not configure custom analytics events or advertising profiles.
• Purchase information: subscription, product, renewal, expiry, and entitlement status supplied by Apple and our subscription-infrastructure provider, RevenueCat. We do not receive your full payment-card details.

3. How we use information

• Create and secure your LumenDrift account and let you sign in using the method you select.
• Connect your account to the LumenDrift backend, deliver the soundscape catalogue and short-lived media links, and keep requested account features available across sessions.
• Remember the state, locale, and settings you choose and explain product recommendations.
• Respond to support requests, investigate bug reports, and process data-deletion requests.
• Send early-access or service communications you requested. We do not use Google sign-in data for advertising.
• Measure aggregate website visits and real-user performance so we can improve page quality and reliability.
• Prevent abuse, diagnose failures, maintain security, comply with law, and establish or defend legal claims.

4. How Google user data is handled

LumenDrift requests only the basic identity information needed to create or access your account. We use Google user data to authenticate you, display or store your account name and email, link your LumenDrift profile, and provide account support.

LumenDrift does not request access to Gmail, Google Drive, Google Calendar, contacts, photos, or other Google product content. We do not sell Google user data, use it for personalised advertising, or allow humans to read it except when needed for support, security, legal compliance, or with your permission.

You can disconnect LumenDrift from your Google Account permissions and can request deletion of your LumenDrift data as described below. Disconnecting Google does not by itself delete information already held in your LumenDrift account.

5. Local information and privacy controls

Some information, including downloaded sound worlds, favourites, settings, and listening history, is stored on your iPhone. LumenDrift uses local listening information to support recommendations without sending raw wellbeing, Health, calendar, location, microphone, or contacts data to our backend.

Local information remains on the device until you use the relevant reset control, remove downloads, or delete the app. Signing out or asking us to delete server data does not automatically erase information stored only on your iPhone.

6. When we share information

We do not sell personal information. Providers may process information in countries other than your own; where required, we use contractual and other safeguards for international transfers.

• Clerk, which provides account and authentication infrastructure and coordinates the Google or Apple sign-in flow you select.
• Google or Apple when you choose their sign-in service, subject to the choices and terms shown by that provider.
• Hosting, measurement, database, security, email, support, and content-delivery providers that process information for us under appropriate instructions. The current website is hosted by Vercel and uses Vercel Web Analytics and Speed Insights; protected sound files are delivered from Cloudflare R2 through short-lived links.
• Apple for App Store distribution, subscriptions, entitlements, and platform services.
• RevenueCat to coordinate App Store purchase status, restore purchases, and keep the Royal entitlement consistent between the app and our backend. We identify the subscription with the stable account identifier assigned by Clerk to your authenticated account, not your name or email address.
• Authorities, advisers, or a successor organisation when reasonably necessary to comply with law, protect rights and safety, or complete a corporate transaction with appropriate safeguards.

7. Retention and security

We retain account information while your account is active and for as long as reasonably needed to provide the service, resolve disputes, enforce agreements, meet legal obligations, and protect the service. Support and diagnostic records are kept only as long as needed for those purposes.

When an account-deletion request is completed, the RevenueCat customer profile, Clerk identity, and LumenDrift server profile, device records, access tokens, chats, and linked bug reports are removed. We retain a limited deletion-request and administrative audit receipt when needed to prove that the request was handled, comply with law, or protect the service. Deletion does not cancel an Apple subscription, and Apple may retain transaction records under its terms and legal obligations.

We use access controls, encryption in transit, protected credentials, pseudonymous device identifiers, short-lived media links, and other technical and organisational measures designed to protect information. No system can guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent where consent is the legal basis. You may also complain to your local data-protection authority.

In the iPhone app, open You, find LumenDrift account, and choose Request data deletion. If you cannot sign in, write to our registered office with “LumenDrift account deletion” on the envelope and include the email address associated with your account. We may need to verify your identity before completing a request.

9. Legal bases

Where applicable, we process information to perform our contract with you, based on your consent, to comply with legal obligations, and for legitimate interests such as securing, maintaining, and improving LumenDrift. We balance those interests against your rights and choices.

10. Children

LumenDrift is designed for a general audience and is not directed to children under 13. If local law requires parental consent at an older age, a parent or guardian must provide it. Contact us if you believe a child provided personal information without the required permission.

11. Changes and contact

We will update the date shown on this page when this policy changes. If a change materially affects how we use account information, we will provide additional notice where appropriate.

Questions, requests, or complaints can be sent through the signed-in app or by post to: LumenDrift Privacy, Lumenshore Limited, Windsor House, Troon Way Business Centre, Humberstone Lane, Leicester, England, LE4 9HA.