← Back to home

Privacy Policy

Last updated October 8, 2026

1. Introduction

Luminary ("we," "us," or "our") operates the Luminary mobile application and the ailuminary.app website (collectively, the "Service"). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have regarding your information. By using Luminary, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information to provide Luminary, support your account and improve its features. This includes:

  • Account information: Your email address, provided when you sign up or create an account.
  • Game data: Your Genshin Impact UID, character roster (including levels, constellations, weapons, artifacts, and talent levels), Adventure Rank, server region, and account details such as resin, expeditions and daily commissions accessed through HoYoLab. Some of this information requires authenticated access.
  • HoYoLab session cookies: When you connect HoYoLab, Luminary receives session cookies that authorize account access. We store them encrypted and use them for account sync and features you enable, such as daily check-in.
  • Purchase records: Subscription status, product and transaction identifiers, and Ink purchases used to verify and deliver purchases. We do not receive your payment card number.
  • Chat messages: Messages you send to our AI companion, along with the AI-generated responses. These are stored to provide conversation history and to improve the quality of recommendations.
  • Feedback: Bug reports, feature requests, answer ratings and corrections you choose to send. Reports include your contact preference, app version, platform and language. Feedback is linked to your account or a temporary guest session; answer ratings are linked to the answer you rate.
  • Usage analytics: App interactions, feature usage patterns, session duration, screens visited, and error logs used to improve the Service.
  • Device information: Device type, model, operating system version, app version, unique device identifiers, and crash diagnostics.

We do NOT collect: HoYoverse or HoYoLab account passwords, payment card numbers (all payment processing is handled securely by the Apple App Store and Google Play Store), or private in-game messages.

3. How We Use Your Data

Your data is used to provide and improve the Service:

  • AI-powered game advice: Your roster data, chat messages, and game context are sent to our AI models to generate personalized team compositions, build reviews, pull planning, and gameplay recommendations.
  • Personalization: We use your game data and usage patterns to tailor the experience to your account, including relevant character suggestions, farming routes, and content recommendations.
  • Feedback and support: We use your reports and ratings to investigate problems, consider feature requests and improve answers. We may follow up about a report if you allow contact.
  • Analytics and improvement: Usage analytics and crash reports help us understand usage patterns, identify bugs, optimize performance, and prioritize features. Some records are linked to your app account.
  • Advertising: We display ads to free-tier users through Google AdMob. AdMob may use device identifiers and usage data to serve relevant ads. You can opt out of personalized ads through your device settings. Paid subscribers do not see ads.
  • App Tracking Transparency (iOS): On iOS, we request your permission via Apple's App Tracking Transparency framework before accessing your device's advertising identifier (IDFA). You can change this permission at any time in your device's Settings. If you deny tracking, you will still see ads, but they will not be personalized based on cross-app data.
  • Communications: We send product announcements, service notifications, and important updates. You can unsubscribe from non-essential communications at any time.
  • No data sales: We never sell, rent, or trade your personal data to third parties for their own marketing purposes.

4. Third-Party Services

We use third-party services to operate Luminary, including those below. Each service has its own privacy policy governing data it processes:

  • AI and search providers: We send your messages and relevant game or conversation context to the AI provider configured for the feature you use. Supported services include Google Gemini and models accessed through OpenRouter. When an answer needs web research, we send search queries to search providers such as Brave Search. The providers involved depend on the feature and service configuration.
  • Firebase Analytics & Crashlytics (Google): Used for app usage analytics, crash reporting, and performance monitoring. Data includes device type, OS version, app interactions, crash stack traces, and your app account identifier. Crashlytics may also receive your Genshin Impact nickname.
  • Google AdMob: Serves ads to free-tier users. AdMob may collect device identifiers, IP address, and interaction data to deliver and measure ads. You can opt out of personalized advertising in your device's privacy settings.
  • Supabase: Provides our database, user authentication, and file storage infrastructure. Your account data, game data, and chat history are stored in Supabase's secure PostgreSQL database. Authentication is handled via Supabase Auth (GoTrue).
  • RevenueCat: Manages in-app subscriptions and purchase verification. RevenueCat receives your app user identifier and purchase data to manage subscription status across platforms.
  • Sentry: Provides error monitoring and performance tracking. Sentry receives error reports, stack traces, and limited device context to help us identify and fix bugs.
  • HoYoverse (HoYoLab): Luminary uses your session cookies to request account data and perform features you enable, such as daily check-in. HoYoLab handles your sign-in; Luminary does not receive or store your HoYoLab password.

5. HoYoLab Integration

Connecting HoYoLab lets Luminary sync your roster and account details for personalized recommendations. You sign in with HoYoLab, then the app sends the resulting session cookies to Luminary's backend for encrypted storage. Session cookies are credentials: they authorize requests to HoYoLab without sending your password to Luminary.

This integration includes authenticated access, not just public profile data. It also supports actions you enable, including claiming daily check-in rewards. Delete your Luminary account to remove the linked cookies and synced data from the active account database. See the account deletion guide for retained-record and backup limitations.

6. Data Storage & Security

We take the security of your data seriously and employ industry-standard measures to protect it:

  • All data is stored on secure, encrypted servers with access restricted to essential personnel only.
  • All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
  • Authentication tokens (JWT) are used for API access and expire regularly to limit exposure.
  • Database access is restricted via connection pooling with minimal permissions, and all queries use parameterized inputs to prevent injection attacks.

7. Data Retention & Deletion

We retain your data only for as long as your account is active or as needed to provide the Service:

  • Account deletion: Use Settings > Delete Account in the app, or contact support. Successful deletion removes your profile, synced game data, chats and stored HoYoLab cookies from the active account database. The app does not offer an account-recovery period. See our account deletion guide for instructions.
  • Retained records: We retain purchase and financial audit records, with the account link removed where supported. We also retain a deletion record containing your account identifier, email when available, and deletion time to enforce the 30-day account re-creation cooldown. The cooldown does not mean these records are automatically erased after 30 days.
  • Chat messages: Retention varies by chat feature. Clearing supported chat history or deleting your account removes it from the active account database; this does not guarantee immediate removal of backup or service-provider copies.
  • Feedback: Signed-in reports and answer ratings are scheduled for removal after 180 days; updating a rating restarts its retention period. Guest reports expire with their 30-day guest session. Periodic cleanup removes expired feedback. Deleting your account removes feedback linked to that account; guest feedback is separate. Minimal submission receipts remain longer to prevent duplicate submissions. Contact support about deleting a report.
  • Backups and service providers: Copies may remain after deletion from the active account database. Contact us for information about retained copies and the status of your deletion request.
  • Aggregate analytics: Statistics that do not identify you may remain after account deletion.

8. Your Rights (GDPR & Global Privacy)

Regardless of where you live, we provide all users with the following data rights. If you are in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection laws, these rights are guaranteed under applicable law:

Legal basis for processing (GDPR): We process your data based on: (a) your consent when you create an account and connect your game data; (b) contractual necessity to provide the Service you requested; (c) legitimate interests in improving the Service and preventing abuse, balanced against your privacy rights.

  • Right to access: You can request a copy of all personal data we hold about you. Contact us and we will provide a data export within 30 days.
  • Right to deletion: You can request permanent deletion of your personal data. Use Settings > Delete Account in the app, or contact us directly. The retention limits and exceptions above apply to account deletion.
  • Right to rectification: You can request correction of any inaccurate personal data we hold about you.
  • Right to data portability: You can request your data in a structured, machine-readable format (JSON export).
  • Right to object: You can object to data processing based on legitimate interests, including opting out of personalized advertising.
  • Disconnect HoYoLab: Revoke Luminary's access to your game data at any time. All synced game data is wiped from our servers instantly upon disconnection.
  • Unsubscribe from communications: Opt out of marketing emails and non-essential notifications at any time using the unsubscribe link in our emails or through your account settings.

To exercise any of these rights, contact us at support@ailuminary.app. We will respond within 30 days.

9. Cookies & Analytics

  • Our website uses minimal cookies for essential functionality (e.g., remembering preferences). We do not use third-party advertising trackers on the website.
  • The mobile app uses Firebase Analytics for usage analytics and Crashlytics for crash reporting. This data can be linked to your app account.

10. Children's Privacy

Luminary is intended for users aged 13 and older. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child under 13 has provided us with personal data, please contact us at support@ailuminary.app and we will promptly delete the information from our systems. Users between the ages of 13 and 18 should have parental or guardian consent before using the Service.

11. International Data Transfers

Your data may be processed in countries other than your country of residence, including the United States and Singapore, where our servers and third-party service providers are located. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable data protection laws, including standard contractual clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you by email or through a prominent notice within the app. We encourage you to review this page periodically for the latest information on our privacy practices. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: