Luma
Privacy Policy
Last updated: 3 September 2026
The short version. Luma has no accounts and no tracking. We do not collect your name, email, contacts, or location. Menu photos are used once to read the menu and are not stored. Everything Luma remembers stays on your phone.
Who we are
Luma is a mobile app that reads restaurant menus and explains what the dishes are. This policy describes what happens to information when you use it.
What we do not collect
- No account, sign-up, name, or email address.
- No location data.
- No contacts, calendar, microphone, or health data.
- No advertising identifiers, and no third-party analytics or advertising SDKs.
- No behavioural profile, and nothing sold or shared with data brokers.
Menu photos
When you scan a menu, the photo is sent over an encrypted connection to our processing service, which uses it once to identify the text and dishes on the menu. The photo is not saved — not on our servers, and not in the app after the scan completes. Only the extracted text (dish names, prices, and menu descriptions) is kept, and only on your device so you can reopen a past scan.
Photos are only ever captured or read when you actively tap to scan or choose an image.
Dish information
When you tap a dish, Luma sends the dish name and any description printed on the menu — as text — to generate the explanation. No image and no information about you is included.
What is stored on your device
The following is saved in the app's private storage on your phone, and nowhere else:
- Your scan history (restaurant name, dish names, prices, descriptions).
- Dishes you saved and dishes you recently viewed.
- A daily count of how many scans and questions you have used, so limits reset each day.
You can delete any individual scan, delete all scans, or erase everything at any time under You → Privacy and data. Deleting the app also removes all of it.
Service providers
Two providers process data on our behalf in order to make scanning work. Neither is given any information that identifies you.
- Supabase — hosts the secure function that receives a scan request.
- Anthropic — provides the AI that reads the menu and describes dishes. Anthropic does not train its models on data submitted through its API.
Children
Luma is not directed at children under 13, and we do not knowingly collect information from them. Because the app collects no personal information from anyone, it holds no such data.
Your rights
Privacy laws including the GDPR and CCPA give you rights to access, correct, and delete personal data held about you. Luma does not hold personal data about you on any server — the data the app keeps lives on your own device and is under your direct control, deletable at any time from within the app. We do not sell or share personal information.
Accuracy of dish information
Dish explanations, nutrition figures, and allergen notes are AI-generated estimates, not restaurant-verified facts. Recipes and preparation vary between restaurants. If you have a serious food allergy or dietary restriction, always confirm ingredients directly with restaurant staff. Luma is a guide and is not medical or dietary advice.
Changes to this policy
If this policy changes, the date at the top of this page is updated. Material changes will be noted in the app.
Contact
Questions about privacy or this policy: hello@lumascan.app