Lumora Privacy Policy

Version: V1.3
Last updated: April 5, 2026
Effective: April 5, 2026

Shanghai Xunxin Network Technology Co., Ltd. (“we”, “us”, or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, store, and protect personal information when you use the Lumora mobile application (Chinese display name: 「亲享记画」, referred to as “Lumora” in English) and related services. Please read this Policy carefully before you use Lumora.

This Policy explains:

1. Information we collect and how we use it

We collect personal information only for the purposes described in this Policy. The following sections describe the main categories and uses.

1.1 Account registration and sign-in

When you register or sign in, we may collect your mobile number and SMS verification code to create and secure your account. If you use password sign-in, we process your password with encryption in transit and at rest. For WeChat sign-in, with your authorization we may receive WeChat nickname, avatar, OpenID, and other identifiers returned by WeChat; you may need to bind a mobile number on first WeChat sign-in for account linkage and applicable regulatory requirements. On Android, to determine whether the WeChat client is installed for showing the WeChat sign-in option, we may read the list of installed applications (or use an equivalent system capability).

1.2 Baby profiles and family collaboration

To provide parenting record features, you may create one or more baby profiles. We may collect baby nickname, date of birth, gender, avatar, and your relationship to the baby. If you use family collaboration, we process invited accounts and permission settings so authorized users can view or edit shared baby data.

1.3 Care and daily-life records

When you use bottle feeding, breastfeeding, sleep, diaper changes, complementary foods, temperature, medication, supplements, and other record types, we store the content you enter (amounts, durations, reminders, notes, image attachments, etc.). This may include health-related descriptions you voluntarily provide.

1.4 Growth data and charts

When you enter height, weight, head circumference, and similar data, we store it to display charts and trends.

1.5 Photos and file uploads

When you take or choose photos for avatars or attachments, we request camera and photo library/storage permission as needed. Files may be uploaded via secure interfaces to Tencent Cloud Object Storage (COS) or similar services for storage and display. We do not use such content for purposes other than those stated in this Policy.

1.6 Local storage and preferences

We may use local databases (e.g. SQLite) and key-value storage (e.g. SharedPreferences) for drafts, cache, and preferences (such as dark mode). Such data is primarily stored on your device.

1.7 Network and security

To operate the service and protect accounts, we collect and use network status, device model, OS version, app version, and similar device information for communication, troubleshooting, and risk control. Where permitted by law, we may record operation and access logs related to the service.

1.8 Customer support

When you contact us through in-app channels, we may retain your contact details and message content to respond to you.

Legal bases and exceptions

Depending on your jurisdiction, we rely on consent, performance of a contract, legitimate interests, and/or legal obligations. We may also process information without consent where applicable law allows (for example, compliance with law enforcement requests, protection of vital interests, or maintaining network security).

2. Cookies and similar technologies

Lumora is primarily a mobile application and generally does not use browser cookies. If we use similar technologies in in-app web views (such as local storage), they may support sign-in state, reduce repetitive steps, or measure usage. You can manage such storage through app or system settings.

3. Sharing, transfer, and disclosure

3.1 Sharing We do not sell your personal information for monetary consideration. We do not share your personal information with unrelated third parties except as described below:

To enable sign-in and file storage, we may provide necessary information to WeChat Open Platform and Tencent Cloud services; see Section 9 for details.

3.2 Sale / sharing for targeted advertising (CCPA/CPRA) We do not sell personal information as defined under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). We do not share personal information for cross-context behavioral advertising as “sharing” under CPRA in the manner described by those laws. If our practices change, we will update this Policy and provide any required notice or choice mechanisms.

3.3 Business transfers If we are involved in a merger, acquisition, or bankruptcy, your information may be transferred. We will require the successor to honor this Policy or notify you and seek consent where required.

3.4 Public disclosure We disclose personal information only if you expressly agree or when required by law or legal process.

4. Storage, international transfers, and security

4.1 Location of processing We primarily operate and store personal information collected in connection with Lumora in the People’s Republic of China. If information is transferred across borders, we will comply with applicable requirements (including, where required, consent or standard contractual safeguards) and take reasonable steps to protect your information.

4.2 International users (United States and Canada) If you use Lumora from the United States, Canada, or other regions, you understand that your information may be processed and stored in China and other locations where we or our service providers operate. Such countries may have data protection laws that differ from those in your region.

4.3 Retention We retain personal information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law. After retention ends, we delete or anonymize information.

4.4 Security We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. No method of transmission or storage is completely secure; we encourage you to use strong passwords and protect your device.

5. Your rights and controls

Depending on where you live, you may have rights to access, correct, delete, export, restrict or object to certain processing, withdraw consent where processing is consent-based, and lodge a complaint with a supervisory authority. You may exercise many choices through in-app self-service or by contacting us as described in Section 8. For security, we may verify your identity before fulfilling requests.

5.1 Self-service in the app

After sign-in, you can:

5.2 Account deletion, copies, and deletion requests

You may delete your account in-app as described above. To request a copy of your personal information or deletion of specific server-held data, email us at xunxin0724@163.com. We will respond within a reasonable time as required by applicable law.

5.3 California residents (CCPA/CPRA) If you are a California resident, you may have the right to know categories and specific pieces of personal information collected; to delete personal information subject to exceptions; to correct inaccurate personal information; to opt out of sale/sharing (we state above that we do not sell or share for cross-context behavioral advertising as defined); and not to receive discriminatory treatment for exercising these rights. To submit a request, use the email above and include “California privacy request” in the subject line. We may verify your request in line with applicable law.

5.4 Other U.S. states Residents of certain U.S. states may have similar rights under local privacy laws. Contact us at the email above; we will respond in accordance with applicable law.

5.5 Canada If you are in Canada, you may have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws (including Quebec’s Law 25 where relevant), including access, correction, and withdrawal of consent subject to legal limits. You may contact us at the email above. You may also file a complaint with the Office of the Privacy Commissioner of Canada or your provincial commissioner, as applicable.

We also publish a companion page describing how users can manage their data for app store listings: https://xunxin.vip/data_privacy_rights_en.html.

6. Children’s information

Lumora is intended for use by parents and caregivers who record information about infants and young children. Accounts must be created by adults. We do not knowingly permit children under 13 (or the applicable age of digital consent in your jurisdiction) to register an account on their own. Information about a child is generally provided by a parent or guardian using the service.

If you believe we have collected personal information from a child without appropriate authority, contact us and we will take appropriate steps.

7. Changes to this Policy

We may update this Policy from time to time. If changes materially affect your rights, we will provide notice through the app or other reasonable means before the changes take effect. Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law.

8. Contact us

For privacy questions or requests:

Developer: Shanghai Xunxin Network Technology Co., Ltd.
Address: Building C, No. 888 Huanhu West 2nd Road, Lingang New Area, China (Shanghai) Pilot Free Trade Zone (Postal code: 201306), People’s Republic of China
Email: xunxin0724@163.com

We generally respond within fifteen (15) business days after identity verification, unless a different timeline applies under your local law.

9. Third-party SDKs

To provide features and maintain stability, we may integrate third-party SDKs. We assess partner security practices; partners may update their practices—refer to their official notices.

Third party Purpose Types of information (indicative) Privacy policy link
WeChat Open Platform SDK (fluwx) WeChat authorization, sign-in, sharing (as enabled) Device and network information; WeChat identifiers as returned by WeChat WeChat privacy notice (Chinese)
Tencent Cloud COS SDK Upload and storage of images and files File content; network and device information needed for upload Tencent Cloud privacy statement

Additional third-party services may be added as the product evolves; we will update this Policy or in-app notices accordingly.

Shanghai Xunxin Network Technology Co., Ltd. reserves the right of final interpretation of this Policy where permitted by law.