Privacy Policy

What this covers

Omniscience is an applied research group based in New York City. This policy covers Lumina for Android, this website, and any email sent to omni@omniomniomni.com or omni@omniscience.nz.

It does not cover Google Play itself — see Google's privacy policy for details regarding Google Play platform services. Play provides us only anonymous, aggregated install metrics.

On-device reading engine & pulse

Lumina runs all divination and astronomical algorithms entirely on your device. We operate no user accounts, customer tracking databases, or central prediction servers.

Pulse feature — When you use the optional camera pulse sensor, video frames are processed in-memory in real time solely to estimate pulse rhythm. No photographs, video streams, raw camera frames, BPM histories, or reflections are saved to storage or transmitted over any network.

Optional network requests (Weather & Space Weather)

Lumina provides two optional, reader-triggered atmospheric and space data lookups:

1. Current Sky (Open-Meteo)

When you choose to fetch local sky and atmospheric conditions:

• User-initiated — requests occur only when you explicitly tap to refresh sky conditions.
• Coarse cell rounding — coordinates are rounded to 0.1° resolution (~11 km grid) before transmission. The request includes only the coarse coordinate cell and requested weather metrics.
• Third-party logging — requests connect directly to Open-Meteo. Open-Meteo may retain web-server logs (containing IP addresses and requested coordinates); its terms state that logs are deleted after 90 days. See Open-Meteo’s terms.

2. Space Weather (NOAA)

When you tap Request or Refresh in the space weather view, Lumina retrieves public geomagnetic activity and solar flux observations from NOAA.

• These requests fetch fixed, public observations and contain zero app-supplied location, profile, question, or device identifiers.
• NOAA receives only standard HTTP connection metadata (such as IP address and user-agent) necessary to deliver the public feed under the NWS / NOAA Privacy Policy.

Permissions

The permissions declared in the application manifest and when they are requested:

Lumina declares no contacts, microphone, or broad storage/media permissions. Saving, exporting, and sharing use Android’s system document picker and system share sheet.

Stored data, caches & backup

Lumina stores data in Android's private app sandbox:

• Profiles — names and native-script names, dates/times, birth and current places, profile labels, and optional personal inputs;
• Saved reading history — readings you save—and cast readings saved automatically—enter local history (including rendered outputs, question text when included in a reading, timestamps, reading coordinates, cast metadata, citations, and optional reflection notes);
• Preferences — appearance themes, time-format, reminder schedules, favorite traditions, and filter settings;
• Caches — one local weather cache and one space-weather cache (usable for 24 hours, retained locally until refreshed or cleared);
• Installation entropy — a local random seed generated locally on first cast and retained for that installation to make casts reproducible.

Ephemeral data (never stored) — ephemeral dream text, mood check-ins, digit measurements, raw camera frames, pulse estimates, and transient reflections are not written to Lumina's own storage. Personal derivation inputs such as mother's maiden name are reduced in memory to a single numerological value (mothers_name_number); the name itself is never written to storage. (On older installations, any legacy mothers_maiden_name key is actively deleted by migrateLegacyData). Unfinished question drafts use Android Compose saved-instance state ephemerally so active text survives system activity recreation, but questions are not written to Lumina's own persistent storage until cast.

Cloud backup disabled — Android cloud backup and automatic device-to-device transfer are explicitly disabled (allowBackup="false"). Lumina data remains strictly local to your device until you choose to export or erase it.

Saves, exports & shares

You maintain full ownership of your divination records and can explicitly export or share them:

• Save a copy of my data — writes an unencrypted plain-text copy (line-based key: value format) of all stored profile and reading data to a storage location or document provider you select via Android's document picker.
• Save reading image — renders and saves a high-resolution reading card directly to your chosen file location or cloud drive.
• Share reading image — grants temporary read access to the receiving app you select via Android’s Sharesheet.
• Private-data-free share filename — reading share image filenames are deliberately generated without personal or querent data (such as profile names or question text), formatted strictly as lumina-[tradition].png. This ensures personal names and questions do not leak into operating system file listings or chat application message previews when shared.
• Horary question text — horary reading cards render the reader's question text as part of the chart; saving or sharing a horary image includes that question in the exported image.
• Share cache — the share cache directory (shared-readings/) retains only the latest generated reading image, which is overwritten by subsequent shares or cleared during in-app data deletion, Android system cache clearing, or app uninstallation.
• External destinations — once data is saved or shared outside Lumina, the selected destination app or cloud provider governs its retention.

Google Play Data safety

Declarations matching our Google Play Data Safety submission:

The website, and emailing us

omniomniomni.com is a static site: no client-side cookies, analytics scripts, or tracking pixels, and no tracking forms. It is hosted on Cloudflare Pages, which processes standard HTTP request information (such as IP address, routing data, request timestamp, and browser metadata) to deliver and protect the site under Cloudflare’s privacy policy.

If you email us, Omniscience and its email service provider process and store your message and email address solely to reply. Correspondence is retained for ongoing support (up to two years) or deleted sooner upon request. We never sell email addresses or use them for marketing.

Security & diagnostics

• Lumina does not transmit application logs or crash reports to Omniscience or any third-party analytics SDK.
• Android may retain local system logs and, where the device owner has enabled usage and diagnostics sharing in Android system settings, provide platform diagnostics to Google.
• All remote network queries (Open-Meteo and NOAA) use strict HTTPS encryption.
• Divination records and personal profiles are stored exclusively within Android's sandboxed private storage.

Kids

Lumina is not directed toward children under 13. Creating a personal chart requires a name and birth date, which are stored locally and are not transmitted except through an explicit data export initiated by the user. Lumina creates no online account.

Your rights & deletion

To manage or delete your data across each layer:

• In-app deletion — individual profiles, saved readings, and favorites can be deleted directly within Lumina’s screens, or wiped completely via the in-app “Delete everything” control.
• Complete local wipe — clear all data via the in-app “Delete everything” button, Android Settings > Apps > Lumina > Storage > Clear Data, or by uninstalling the app.
• Exported files — manage or delete exported plain-text archives and reading card images directly through your device file manager or cloud drive.
• Open-Meteo logs — server access logs are deleted by Open-Meteo after 90 days per their operational terms.
• Email correspondence — if you email us, you may request deletion of past email threads at any time.

Regional disclosures (EEA, UK & California)

Depending on your location, you may have specific statutory rights under the General Data Protection Regulation (GDPR), UK GDPR, or California Consumer Privacy Act (CCPA/CPRA):

• Data Controller — Omniscience, based in New York, NY, United States. Contact: omni@omniomniomni.com.
• Legal Basis (EEA / UK) — We process local data on-device solely to perform requested application functionality. Optional weather queries are processed based on your explicit request (consent / performance of service).
• Access & Erasure — You have the direct right to access all data (using the in-app "Save a copy of my data" export) and the right to erasure (using the in-app "Delete everything" control or Android app settings). Because we operate no central databases, data deletion on your device is instantaneous and complete.
• Do Not Sell or Share (California CCPA/CPRA) — We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration, nor do we share personal data for cross-context behavioral advertising. We have not sold or shared any personal data in the preceding 12 months.

Changes

When the application or privacy practices are updated, this document will be revised with an updated effective date.

Reaching us

For any privacy inquiries regarding Lumina: