How does Lumoria protect my data?

Everything you make in Lumoria is encrypted on your iPhone before it goes anywhere. Encrypted means scrambled: what reaches our servers is unreadable text. The key that unscrambles it is made on your phone and stays with you, so nobody at Lumoria can read your tickets, your Memories, your notes or your moods.

Where your key lives

Your phone makes one key for your account, the first time you save something, and keeps it in the iCloud Keychain, the password store built into iOS. It syncs to your other Apple devices, so your Memories open there too. It never reaches us. The method is called AES-256. The name matters less than the place the key sits, which is with you.

That is also the limit of what we can do for you. We never hold your key, so we can never open your content, and we can never recover it for you either. Keep iCloud Keychain switched on for the Apple Account you use with Lumoria.

What is encrypted

Ticket details: routes, venues, seats, times, and the photo on a ticket that carries one.
Memory names, emoji, colours, date ranges and covers.
Notes, moods, voice memo transcripts, saved weather and pinned stations.
The music you pin: stored as the title, the artist and a link, never your listening history.
Your profile picture. We hold the scrambled copy, not the image.

What never leaves your phone

Photos and videos in a Memory of your own. Lumoria keeps a reference to the item in your photo library and reads the original each time. “How do I add photos and videos to a Memory?” covers what that means day to day.
Voice memo recordings. The sound file stays on the phone that recorded it; only the transcript syncs, encrypted.
The transcription itself. Your iPhone writes out what you said with Apple’s built-in speech model, so the audio is never sent anywhere to be read.
Your location. Lumoria never asks for GPS. The only coordinates that exist are places you typed into a ticket, and they are encrypted with the rest of it.

What a shared Memory changes

One thing does leave the device there. Photos, videos and voice recordings you add to a shared Memory are uploaded, because the other members have to see and hear them. They are encrypted first, with a key only the members of that Memory hold, and the app says so before it happens: “Your photos and videos leave this device for the first time.” “Can I make an existing Memory collaborative?” walks through that switch, and “What can my friends see about me?” covers who sees what.

What we can see

Encryption hides what you make, not that you made it. We can see your email address, because that is how you sign in, along with your display name and your @username. We can see when things were created and changed, which design a ticket uses, which Memory holds which ticket, and who your friends are. The notifications in your list are stored as ordinary text, names included.

Lumoria also measures how the app is used (which screens are opened, which actions are taken) under an anonymous identifier, with no content attached and no IP address recorded. Settings → Privacy Policy has the whole account of it, service by service.

Tickets built on the website

Those work differently, and it is worth knowing how. A ticket you build on getlumoria.app is encrypted too, but its key comes from the 8-digit code the site gives you rather than from your phone. Our server only ever stores a fingerprint of that code, never the code itself. The ticket waits an hour at most, the code works once, and the stored copy is deleted the moment you use it.

Said plainly: eight digits is a small number next to a real key. That makes a stolen copy much harder to open than plain storage, but it is not the same promise as a key that never leaves your phone. Once the ticket lands in the app it is re-encrypted with your own key, like everything else. “How do I bring in a ticket from the website?” walks through the import.

And when you want all of it gone, one tap removes it from our servers. “What happens to my data if I delete my account?” says exactly what goes and what stays.