Privacy Policy

Effective October 1, 2026

What we collect

• Your account: name, email address, date of birth (to confirm you're an adult), password (stored only in scrambled, one-way form, so no one can read it), time zone, and a profile photo if you add one. If you turn on Face ID or fingerprint sign-in, we store a public key from your device. Your fingerprint and face never leave your device.
• What you share: messages, photos, captions, comments, reactions, events and answers (Going, Maybe, Can't go), notes, lists and sign-ups.
• Your spheres: which spheres you're in, your role, and invites, including the email address or phone number of the person invited.
• Notifications: if you turn them on, an address from your phone's notification service so we can reach that device.
• Daily email summary: if notifications are off on all your devices, we may email you once a day about messages, Rays, photos, events and new members you haven't seen yet. We work this out from what Luxsphera already keeps (what you've read and which devices have notifications on); nothing about your activity is tracked. You can turn it off in Profile, Notifications.
• Kids' accounts: the name, username, birth month and year a parent or guardian enters, a PIN stored only in scrambled, one-way form, and a profile photo if a parent or guardian adds one. Kids' accounts have no email address.
• Plans and payments: which plan you're on, who's on it, and when it renews. Card details go straight to Stripe; we never see or store your full card number. Stripe collects your billing address at checkout so the right sales tax can be added.
• Apps: which apps are on your Apps tab, and what an app saves for you (like your Calculator history, or your Bible highlights and notes). Only you can see it, it's in your data download, and it's deleted with your account. Apps run walled off from the rest of Luxsphera and can't see your account or anything you've shared. Some games are their own websites shown inside Luxsphera; they don't receive your Luxsphera information, and their own privacy notices apply.
• Security basics: sign-in records and IP addresses, used to keep accounts safe and stop abuse, and deleted about 30 days after a sign-in ends.

We use one cookie, to keep you signed in. There are no advertising or analytics trackers.

Who can see what

• Content in a sphere is visible only to the people in that sphere. Private messages are visible only to the people in that conversation.
• Your name and profile photo are seen only by people you share a sphere, conversation or plan with.
• Nothing on Luxsphera is public or searchable on the internet.
• Before a photo is uploaded, your phone shrinks it and removes hidden details such as the location where it was taken.
• Luxsphera's administrator can technically access stored information, as with most apps. We look at it only to keep Luxsphera running, to review reports, or when the law requires it. Messages are not end-to-end encrypted yet; we'll say so here if that changes.

Companies that help run Luxsphera

We share information only with these services, only for these purposes:

• Cloudflare: hosting, storage for messages and photos, security, the sign-up bot check (Turnstile) and automatic checks of photos and videos (using still frames taken from each video) against known child sexual abuse images. If something matches, we keep it as evidence and report it to NCMEC, as US law requires.
• Resend: sending sign-in codes, invites and account emails.
• Stripe: processes payments for plans and extra storage, works out sales tax, and sends receipts. It receives your name, email address, billing address and card details. Stripe's own privacy notice covers what it does with them.
• Apple, Google or Mozilla: delivering notifications to your device. Notification contents are encrypted so they can't read them.

When the law requires it

If we find material that sexually exploits children, we report it to the National Center for Missing & Exploited Children (NCMEC), as US law requires, and keep the related information as the law directs. We respond to valid legal requests, and we may share information when needed to protect someone from serious harm.

How long we keep things

We keep your content until you or a sphere manager deletes it, or until your account is closed. When something is deleted, it's hidden right away and erased within a day; it may stay in backups for up to 30 days before it's gone for good.

Your choices

• Delete your own messages, photos, comments, events and cards at any time.
• Choose which spheres notify you, set quiet hours, or turn notifications off in your profile.
• Reset your private calendar link if you think someone else has it.
• Download a copy of your information, photos and videos, or delete your account, from Profile, Your data. You can also email hello@luxsphera.com from the address on your account.

Children

You need to be 18 or older to make your own account. Anyone under 18 uses a kid's account, which only a parent or guardian can create, with the guardian's consent and controls. Guardians choose what their child can share and with whom, approve what goes outside their home, see who their child messages, and can read those messages if they turn that on. Guardians can change, pause or delete their child's account at any time, and a child's reports also go to their guardians. Once the young adult turns 18, they or their guardian can move the account to the young adult's own email address from the app; guardian access ends then.

Changes

If this policy changes in a way that matters, we'll tell you in the app before it takes effect.

Questions

Email hello@luxsphera.com. Also see our Terms of Use.