Privacy Policy
Trust & Security
Your biological data is the most sensitive data you own. We treat it with medical-grade security.
1. Our Core Privacy Promise
LumonOS is built on a simple principle: You are the only owner of your Bio-Digital Twin.
- We do not sell your health data to advertisers.
- We do not share your twin profile with insurance companies.
- You can export or delete your entire history at any time.
2. Data We Collect
To build your Bio-Digital Twin and power the Safety Engine, we collect:
Essential Biological Data
- Age, biological sex, and weight
- Medical conditions (e.g., hypertension, asthma)
- Family history risks
- Current medications & supplements
Integration Data (Optional)
- Sleep stages & HRV (via Apple Health/Oura)
- Lab results (blood panels)
- Genetic raw data (if uploaded)
3. How We Secure Your Data
We use industry-standard encryption and security architecture:
- 🔒Row-Level Security (RLS)Our database architecture ensures that your data rows are cryptographically strictly accessible only by your authenticated user ID. Even our internal admin dashboards cannot view your raw health data without your explicit consent for support.
- 🛡️Encryption EverywhereData is encrypted at rest (AES-256) and in transit (TLS 1.3).
4. AI Processor Disclosure
LumonOS uses Large Language Models (LLMs) to analyze your data and research studies.
Zero-Retention Policy: When we send data to our AI partners (e.g., OpenAI) for analysis, it is done via an enterprise API with a strict zero-retention policy. Your health data is never used to train their models.
5. Contact Us
For privacy concerns or data deletion requests, email us at:
privacy@lumonos.app
Last updated: December 1, 2025