Legal

Privacy Policy

Last updated: 16 August 2026

Who we are

Lumio (“Lumio”, “we”, “us”) is a background-removal tool for images and video, operated by [your name or company]. For any privacy question, contact us at [your contact email]. This policy explains what personal data we handle, why, and your choices.

What we collect

Account data — your email address and a securely hashed password (or, if you use Google sign-in, the email address Google shares with us). We never see your Google password.
Files you upload — the images and videos you submit, used only to remove their background and return the result to you.
Basic technical data — a session cookie to keep you signed in, and standard server logs (e.g. request time and errors) needed to run and secure the service.

How we use it

To sign you in, process your files, keep the service secure and working, and contact you about your account if needed. We do not sell your data, we do not sell or publish your images, and we do not use your uploads to train AI models.

Cookies

We use a single essential cookie to keep you logged in. We do not use advertising or cross-site tracking cookies. If we add analytics later, we will update this policy.

Storage & retention

Your files are processed transiently to fulfil your request. Results are held only briefly so you can download them (temporary output files are deleted automatically, and in any case within a few hours), and are not kept as a permanent library. Your account email stays on file while your account exists; ask us and we will delete it.

Who we share with

We use a small number of service providers to run Lumio, and they may process data only to provide their service to us: Hugging Face (application hosting), Google (optional sign-in), and, once paid plans launch, a payment processor. We do not share your data with anyone else except where required by law.

Security

Passwords are stored only as salted hashes, sessions are signed, and traffic is served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.

Your rights

Depending on where you live (e.g. the GDPR in the EU/UK, CCPA/CPRA in California, the DPDP Act in India), you may request access to, correction of, or deletion of your personal data, and object to certain processing. Email [your contact email] and we will respond within the time the law requires.

Children

Lumio is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

International transfers

Lumio is operated online and our providers may process data in other countries. Where required, we rely on appropriate safeguards for such transfers.

Changes

We may update this policy as the service evolves; we will change the “last updated” date above and, for material changes, notify you.

Contact

Questions about this policy or your data: [your contact email].