Who we are
Lume (“Lume”, “we”, “us”) operates the Lume beauty-booking apps and website (lumebeauty.ch). We connect people (“Customers”) with beauty, spa, and barber businesses (“Salons”) to discover and book appointments.
Data controller: [COMPANY LEGAL NAME], [REGISTERED ADDRESS], [COUNTRY].
Contact for privacy: info@lumebeauty.ch
What we collect
You give us:
- Account: your name, and an email address and/or phone number (used to sign you in with a one-time code, or via Sign in with Apple / Google).
- Optional profile: date of birth (optional; used only for birthday perks), the languages you speak, and whether you want to browse women’s / men’s / wellness salons.
- Bookings & activity: appointments you make, salons and looks you save, reviews you write, and messages you send to salons.
- Payments: Lume does not currently process online payments; you pay the salon directly. If we add payments, we will update this policy and use a certified payment provider (we would never store full card numbers ourselves).
Collected automatically:
- Approximate location (only to show salons near you / set your city - you can deny this and still use the app).
- Device info and a push-notification token (to send booking reminders and updates).
- Basic usage/diagnostic data to keep the service working and secure.
How we use it
- To provide the service - show salons, make and manage bookings, save favourites, send messages, and write reviews.
- To connect you with a salon: when you book, we share your name and phone number with that salon so they can contact you about your appointment. This is essential to the booking.
- To send notifications you’d expect - booking confirmations, reminders, and (if you allow) offers.
- To secure, maintain, and improve the apps, and to prevent abuse.
- To meet legal and accounting obligations.
We do not sell your personal data.
Who we share it with
- The salon you book with (as above - name, phone, and your booking details).
- Service providers who process data on our behalf, only to run Lume: hosting & database (Railway), email delivery (Resend), image hosting (Cloudinary), sign-in (Apple, Google), text messages where used (Twilio), push notifications (Apple/Expo), and AI features such as in-app translation and the LUMIA assistant (Anthropic) - for AI features, the specific text being translated or the message is processed to produce the result.
- Authorities, if required by law.
Where your data is processed
Lume operates in Europe. Some providers process data in the EU and the US; where data leaves your country, we rely on appropriate safeguards (such as standard contractual clauses).
How long we keep it
We keep your data while your account is active and as needed to provide the service, then delete or anonymise it - except where we must keep records longer for legal or accounting reasons.
Your rights
Depending on where you live (EU GDPR / Swiss FADP and similar), you can access, correct, delete, export, or object to the use of your data, and withdraw consent. You can delete your account and data from inside the app (Settings → delete account), or email info@lumebeauty.ch. You may also complain to your data-protection authority.
Note: some information is fixed on purpose - for example, a date of birth, once set, cannot be changed (to keep birthday perks fair). You can still request deletion of your whole account.
Security
We protect your data with encryption in transit and at rest, access controls, and rate limiting on sign-in. No system is perfectly secure, but we take reasonable measures to keep your information safe.
Children
Lume is not intended for children. You must be at least 16 (or the minimum digital-consent age in your country) to use it.
Changes
We may update this policy; we’ll post the new version here and update the date above. Significant changes will be highlighted in the app.
Contact
Questions? Email info@lumebeauty.ch or write to [COMPANY LEGAL NAME], [REGISTERED ADDRESS].