Privacy Policy
Last updated: March 10, 2026
LUMO AR ("we", "our", or "the app") is an augmented reality flashcard application developed by Alisher Mutaliyev as an individual developer. Your privacy matters, and this policy explains what information we collect, why, and how we handle it.
1. Information We Collect
| Data | Purpose | Storage |
|---|---|---|
| Email address | Account creation & authentication | Firebase Auth |
| Display name | Personalization (via Google Sign-In) | Firebase Auth |
| Flashcard content | Creating and studying flashcards | On-device only |
| Location (when in use) | Saving AR flashcard positions in the real world | On-device only |
| Camera feed | Rendering augmented reality experience | Not stored |
| AR world map data | Restoring AR card positions between sessions | On-device only |
We do not collect analytics, use advertising SDKs, or track you across
apps or websites. The app does not use Apple's Ad Tracking (IDFA) and
sets NSPrivacyTracking to false.
2. How We Use Your Information
- Authentication: Your email and name are used solely to create and manage your account via Firebase Authentication.
- AI-Generated Answers: When you use the "AI Generate" feature, the text of your flashcard question is sent to our secure server to generate an answer. Only the question text is transmitted — no personal data, device identifiers, or location data is included in this request.
- Location: Your GPS coordinates are used exclusively on-device to anchor flashcards in augmented reality. Location data is stored locally in Core Data on your device and is never transmitted to any server.
- Camera: The camera feed is processed in real-time by ARKit for augmented reality rendering. No images or video are recorded, stored, or transmitted.
3. Third-Party Services
The app uses the following third-party services:
| Service | Provider | What It Does | Their Privacy Policy |
|---|---|---|---|
| Firebase Authentication | Google LLC | User sign-up, login, and session management | firebase.google.com/support/privacy |
| Google Sign-In | Google LLC | OAuth-based authentication | policies.google.com/privacy |
| AI Answer Generation | OpenAI (via Azure Functions proxy) | Generates flashcard answers from question text | openai.com/policies/privacy-policy |
These services receive only the minimum data necessary for their function. We do not share your personal data with any other third parties for marketing, advertising, or data mining purposes.
4. Data Storage & Security
- On-device data (flashcards, decks, AR world maps, location coordinates) is stored locally using Core Data and is protected by iOS data protection.
- Authentication data (email, display name) is stored by Firebase Authentication in accordance with Google's security practices.
- All network communication uses HTTPS/TLS encryption.
- We do not maintain our own external database of user content.
5. Data Retention & Deletion
- On-device data: Deleted immediately when you delete the app or remove content within the app.
- Firebase Auth account: You can delete your account at any time through the Profile section in the app. This removes your authentication record from Firebase.
- AI requests: Flashcard text sent for AI generation is processed in real time and is not stored by our server. OpenAI's data retention policies apply to their processing; refer to their privacy policy linked above.
To request complete deletion of all data associated with your account, contact us at the email address listed in the Support section below.
6. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Delete your account and associated data at any time.
- Revoke camera or location permissions via iOS Settings at any time, without affecting the core flashcard functionality.
- Opt out of Google Sign-In and use email/password authentication instead.
If you are located in the European Economic Area (EEA), you may also exercise rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.
7. Children's Privacy
LUMO AR is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the app after changes constitutes acceptance of the revised policy.
9. Contact Us
Terms of Use
Last updated: March 10, 2026
By downloading or using LUMO AR, you agree to these terms. If you do not agree, please do not use the app.
1. Description of the App
LUMO AR is an augmented reality flashcard application that allows you to create study decks, generate AI-powered answers, and place flashcards in your physical environment using AR technology.
2. User Accounts
- You must create an account (via email/password or Google Sign-In) to use the app.
- You are responsible for maintaining the confidentiality of your account credentials.
- You must provide accurate information during registration.
3. Acceptable Use
You agree not to:
- Use the app for any unlawful purpose.
- Attempt to interfere with the app's functionality or security.
- Submit content that is offensive, harmful, or violates third-party rights.
- Reverse-engineer, decompile, or disassemble the app.
4. AI-Generated Content
The app includes an AI feature that generates flashcard answers. AI-generated content is provided "as is" and may not always be accurate. You should verify important information independently. We are not liable for decisions made based on AI-generated content.
5. Intellectual Property
The app, including its design, code, and branding, is the intellectual property of Alisher Mutaliyev. You retain ownership of the content (flashcards, decks) you create within the app.
6. AR Safety
When using augmented reality features, always be aware of your surroundings. Do not use the AR camera while walking, driving, or in situations that require your full attention. We are not responsible for any injury or damage resulting from inattentive use of AR features.
7. Limitation of Liability
The app is provided "as is" without warranties of any kind, express or implied. To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, or consequential damages arising from your use of the app.
8. Termination
We reserve the right to suspend or terminate your access to the app if you violate these terms. You may stop using the app and delete your account at any time.
9. Apple's Standard EULA
This app is also subject to Apple's Licensed Application End User License Agreement. In the event of a conflict between these terms and Apple's EULA, Apple's EULA shall prevail.
10. Governing Law
These terms are governed by and construed in accordance with the laws of the Republic of Kazakhstan, without regard to its conflict of law provisions.
11. Changes to Terms
We may modify these terms at any time. Continued use of the app after changes constitutes acceptance.
12. Contact
Developer: Alisher Mutaliyev
Support
We're here to help
Get in Touch
If you're experiencing issues with LUMO AR, have questions, or want to provide feedback, don't hesitate to reach out.
Email: alishermutaliyev.dev@outlook.com
We aim to respond within 48 hours.
Common Questions
How do I delete my account?
Open the app → go to the Profile tab → tap "Delete Account". This will remove your authentication data from Firebase. On-device data (flashcards, decks) is deleted when you uninstall the app.
The AR feature isn't working
Make sure you've granted camera and location permissions in Settings → LUMO AR. AR requires a device with an A12 chip or later running iOS 17.0+. Ensure you are in a well-lit environment.
Can I use the app without location access?
Yes. Location is only used for saving AR card positions. You can use all other features — creating decks, studying flashcards, AI generation, and quizzes — without granting location access.
Is my data sent to any server?
Only two things leave your device: (1) your email/name for authentication via Firebase, and (2) flashcard question text when you use the AI generate feature. Everything else — your flashcards, decks, AR data, and location — stays on your device.