Back to LumenDoc
LumenDoc

Privacy Policy

This page is the public privacy policy for this app and is intended to be linked from the app, the App Store, and support flows.

Last updated: May 2026

Overview

LumenDoc is a document scanning, spending, reminder, calendar, and Library Ask app. This Privacy Policy explains what information LumenDoc processes, what stays on your device, what is sent to AI services, and how Free and Pro limits work.

No Account Required

You can use LumenDoc without creating an email/password account. By default, LumenDoc creates an anonymous app identifier on your device and uses it to issue a secure backend session for AI requests and quota checks.

  • You can use scanning, Library, spending, reminders, calendar features, and Library Ask without providing an email address.
  • Sign in with Apple is optional and used only for account continuity, protected backend requests, and subscription/quota continuity.
  • Your quota records are tied to an anonymous app identifier or optional Sign in with Apple identifier.
  • We never sell your document data or use it for advertising.
Your documents are not used to train AI models, and no email is required to use LumenDoc.

Information We Process

When you use LumenDoc, we process the information needed to scan, organize, search, summarize, remind, and protect your documents.

  • Documents you scan or import, including page images, OCR text, extracted dates, vendors, amounts, categories, and line items.
  • Library Ask questions and AI answers, including the document text excerpts needed to answer your question.
  • Spending information inferred from receipts, invoices, bills, fines, and similar transactional documents.
  • Reminder and calendar information you choose to create from scanned documents, such as due dates, expiries, appointments, notification identifiers, and calendar event identifiers.
  • Subscription state from Apple's StoreKit and App Store Server Notifications.
  • Quota records for Free and Pro AI Vision scans and Library Ask usage, tied to your anonymous app identifier or optional Sign in with Apple identifier.
  • Crash, diagnostic, and basic feature-usage information needed to operate and improve the app.

How We Use Your Information

  • Provide document scanning, local organization, reminders, spending insights, calendar controls, and Library Ask.
  • Enable AI-powered document OCR, search, question answering, and document metadata extraction.
  • Create local spending summaries and reminder/calendar controls from document data.
  • Keep StoreKit subscription access and quota limits in sync.
  • Improve and maintain the app.

AI and Your Data

LumenDoc uses Google Gemini through our private LumenDoc backend for AI features.

  • AI Vision scanning: document images are sent to Google Gemini to extract text and metadata, including handwriting, faded receipts, tables, vendors, amounts, dates, and document category.
  • Library Ask: when you ask a question, relevant OCR text excerpts and your question are sent to Google Gemini to generate an answer. Page images are not sent for chat answers.
  • Embeddings: OCR text is sent once per scan to Google Gemini's embedding API to create a numerical representation that helps LumenDoc search your library.
  • Gemini receives this data over encrypted HTTPS. Google does not use LumenDoc API data to train models.
  • LumenDoc does not permanently store your scan images on our servers; the backend forwards them for processing and returns the result.
Your documents are not used to train AI models.

What Stays on Your Device

Your document library is primarily stored on your device. This includes scanned page images, OCR text, local search indexes, embeddings, chat history, spending rows, reminder records, and document metadata.

If a Pro user's 100 AI Vision scans for the current subscription cycle are used, additional scans continue with Apple's on-device OCR until the quota resets. Those over-quota scan images are not sent to Gemini for AI Vision OCR.

iCloud Backup

If you have LumenDoc Pro and iCloud is enabled, LumenDoc can back up your library to your private iCloud database using Apple CloudKit. Apple operates iCloud and CloudKit. LumenDoc does not operate or read your private iCloud database outside the app's own backup and restore flow.

LumenDoc v2.0 uses CloudKit for private backup and restore. Multi-device sync is not part of this release.

Permissions

  • Camera access is used to scan documents.
  • Photo library access is used only for images or documents you choose to import.
  • Calendar access is used only when you choose to add a date from a document to your calendar.
  • Notifications are used only when you choose to create reminders.
  • Face ID or Touch ID is used only if you enable app lock. Biometric authentication is handled by iOS; LumenDoc does not receive your biometric data.

Payments and Subscriptions

LumenDoc Pro subscriptions are purchased and managed through Apple's App Store and StoreKit. Apple handles payment information, billing, trials, renewals, cancellations, and refunds. LumenDoc does not receive or store your credit card details.

We receive subscription state and App Store Server Notifications so the app can unlock Pro features and keep AI Vision quota in sync.

Third-Party Services

  • Google Gemini: AI Vision OCR, Library Ask, and embeddings.
  • Apple App Store / StoreKit: subscription purchase, renewal, cancellation, and refund handling.
  • Apple App Store Server Notifications: subscription status updates used to keep Pro access and quota in sync.
  • Apple iCloud / CloudKit: optional private iCloud backup for Pro users.
  • Apple Calendar, Notifications, and biometric services: optional on-device features you control.
  • Cloudflare: backend request transit, sessions, rate limits, and quota infrastructure. No persistent scan-image payload storage.

Free and Pro Limits

Free includes 5 lifetime AI Vision scans and 15 lifetime Library Ask questions. Free counters do not reset.

LumenDoc Pro includes 100 AI Vision scans per subscription cycle, unlimited Library Ask, full spending history, reminders, calendar events, and private iCloud backup. After a Pro user's AI Vision quota is used, scans continue with on-device OCR until the quota resets on the billing anniversary.

Data Retention and Deletion

Local documents stay on your device until you delete them, delete your account, or remove the app. Server-side quota records are retained while you use the app so Free and Pro limits can be enforced reliably. App Store transaction records are retained by Apple according to Apple's policies.

You can delete individual documents at any time. You can also delete your LumenDoc account/data from Settings > Account > Delete account. This removes local app data, attempts to remove your private CloudKit backup data, clears reminders and app indexes, and removes the LumenDoc server-side quota record associated with your app identifier.

Deleted documents and deleted account data are not recoverable through LumenDoc.

Your Choices and Rights

  • Use LumenDoc without providing an email address.
  • Access your documents, extracted text, spending information, reminders, and Ask history in the app.
  • Edit document title, category, vendor, amount, and dates.
  • Share or export your documents.
  • Delete documents or delete your LumenDoc account/data.
  • Manage or cancel subscriptions in your Apple App Store account settings.

Changes to This Policy

We may update this Privacy Policy from time to time. We will publish the updated policy here and may notify you in the app when a change is significant.

Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact [email protected].