Legal & Privacy

Privacy Policy

Last Updated: August 25, 2026 � Version 2.0

Privacy Commitment: At Lumnex (accessible from https://lumnex.click), your financial privacy is our utmost priority. We enforce strict database Row Level Security (RLS) and never sell, monetize, or lease your personal financial records to third parties.

1. Introduction & Overview

Lumnex is an advanced personal wealth and financial management platform designed to help you track expenses, analyze income, allocate savings toward custom purchase goals, monitor budget limits, and generate downloadable financial statements.

This Privacy Policy explains how Lumnex collects, stores, processes, and protects your information when you access our web application and services.

2. Information We Collect

We collect information only as necessary to deliver financial intelligence and account synchronization:

Account & Profile Information: When you register or sign in (via Email/Password or Google OAuth), we receive your email address, display name, and avatar image identifier.
Financial Ledger & Transaction Data: Records created by you including transaction amounts, transaction types (income/expense), custom categories, descriptions, notes, and timestamps.
Budget & Goal Targets: User-defined monthly category budgets, savings milestones, goal targets, target dates, and allocated savings deposits.
User Preferences: Default currency selection (e.g., PKR, USD, EUR, GBP) and interface theme preferences.
Technical & Session Data: Browser session storage tokens (localStorage) used exclusively to maintain your active authentication session and provide offline access.

3. How We Use Your Information

Your data is used exclusively to operate and enhance your personal finance experience:

To compute cumulative net worth sparklines, cash flow velocity, and budget limits in real time.
To render visual spending charts, category breakdown distributions, and daily transaction histories.
To generate customizable, printable PDF financial statements on-demand directly in your browser.
To synchronize your data securely across your devices when authenticated.

4. Google API Services & OAuth Limited Use Disclosure

Lumnex offers Google Sign-In as a seamless authentication mechanism. When you authenticate using Google OAuth:

We only request basic profile access (your email address, full name, and profile picture).
We do not access your private Google Drive, Gmail, Google Contacts, or other Google workspace services.
Lumnex�s use and transfer of information received from Google APIs will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Isolation & Row Level Security (RLS)

We employ industry-leading database isolation architecture:

        Row Level Security (RLS): Every table in our PostgreSQL database (profiles, transactions, categories, budgets, goals) is secured by cryptographic Row Level Security policies linked to auth.uid(). No user can ever query, read, update, or delete another user's financial records.
      

All communications between your browser and our servers are encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).

6. Your Rights & Data Control

You maintain 100% ownership and complete sovereignty over your data:

Right to Export: You can export your complete financial transaction history and summary metrics at any time in official PDF format via the Settings menu.
Clean Data (Financial Wipe): You can wipe all transactions, budgets, goals, and custom categories at any time from Settings > Data & Backup > Clean Data. This clears your local and cloud records while preserving your account login.
Permanent Account Deletion ("Delete My Account"): You can permanently delete your entire account and all associated records directly from Settings > Data & Backup > Delete My Account. This triggers a PostgreSQL cascade deletion removing your user authentication record, profile, transactions, budgets, goals, and categories permanently.

7. Third-Party Infrastructure Providers

We work with trusted cloud providers to host and secure the service:

Supabase: Cloud database (PostgreSQL) and authentication provider with enterprise-grade SOC2 compliance.
Vercel: Global edge CDN and frontend application hosting.

We do not partner with advertising networks or data brokers.

8. Cookies & Local Storage

Lumnex does not use third-party tracking cookies or advertising cookies. We utilize standard browser localStorage solely to store your authenticated session token, dark mode preference, and offline cache for fast application loading.

9. Children's Privacy

Lumnex is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect enhancements to our features or regulatory changes. Any modifications will be posted directly on this page with an updated revision date.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our data protection team at:

support@lumnex.click � privacy@lumnex.click