Privacy

Your money data stays on your phone.

Lumo is built to show you your own money. That only works if the data stays yours. This page explains, in plain terms, what the app reads, what it never collects, and what happens to the email you give the waitlist.

Last updated 27 August 2026

What the app reads

With your permission, Lumo reads the transaction SMS your phone already receives — M-Pesa confirmations, bank alerts, till and paybill receipts. It looks for the amount, the date, and who the money moved to or from, so it can show you a picture you would otherwise have to assemble by hand.

This happens entirely on your device. The messages are processed where they already sit, and the result is stored in Lumo’s own storage on the same phone.

What Lumo does not read

• Personal messages. Lumo looks only at messages from the transaction senders it recognises, and ignores the rest.
• Your bank login. Lumo never asks for banking credentials and has no way to move money.
• Your contacts, photos, calendar, or location.

Anything you add yourself

Cash entries, voice notes, receipt photos and the labels you correct are stored the same way — on your device, under your control.

What leaves your phone

For the core experience, nothing. Lumo works offline, and reflection does not require a server.

Two exceptions, both of which you choose:

• The waitlist email on this website. Covered below. It is separate from the app and holds no money data.
• Anything you deliberately export or send. If you export a summary or contact support and attach something, that is you sending it, and only what you chose goes.

If a future feature would need to send your data anywhere, Lumo will ask first, explain what it sends and why, and work without it if you decline.

The waitlist email

When you join the waitlist, Lumo collects your email address and nothing else. No name, no phone number, no question about where you heard about it.

It is stored with Resend, an email service that holds the list and sends the messages. It is used for one thing: telling you when Lumo is ready, and occasional notes about progress before then. Every email has an unsubscribe link, and leaving removes your address.

There are no advertising trackers on this site, no analytics, and no third-party pixel on the signup form.

Your choices

• SMS permission is optional. Decline it and Lumo still works — you enter what you want to track. Grant it and you can withdraw it later in your phone settings; Lumo stops reading immediately.
• Delete everything. Because your data lives on your device, removing it is immediate and complete: clear Lumo’s data or uninstall the app.
• Leave the waitlist. Unsubscribe from any email, or write to privacy@lumaapp.dev and ask.

Children

Lumo is meant for adults managing their own money, and is not directed at children under 18.

Changes to this page

If what Lumo does with your data changes, this page changes with it and the date at the top moves. A change that affects the pledge above will be said plainly, not slipped in.

Getting in touch

Questions about anything here, or a request about your data, go to privacy@lumaapp.dev. If you are in Kenya and are not satisfied with the answer, you can raise it with the Office of the Data Protection Commissioner.