LUME

Privacy Policy

Last updated [SET PUBLISH DATE] 2026

This Privacy Policy explains how Kyle McQueen, trading as Spiel Labs ("we", "us", or "our"), handles your information when you use the Lume mobile application ("Lume" or the "App"). Lume is a voice-first health and nutrition logging app. We have written this policy to describe, in plain terms, exactly what the App does with your data.

The short version. Almost everything you log stays on your device. When you use a voice feature, the spoken audio is transcribed and only the resulting text is sent to our AI parsing service to turn it into a structured entry. Your body-scan photos are analysed entirely on your device and are never transmitted, unless you explicitly choose to generate an optional AI visualisation of your future self, in which case one photo is sent only after you've started a subscription. We do not run advertising and we do not sell your data. We use a single privacy-focused analytics tool that never collects personally identifying information, and we have no advertising or crash-reporting SDKs in the App. Health data read from Apple Health is used on your device and, with one narrow exception described below, is never transmitted off it.
Contents
  1. What information the App handles
  2. Voice input and speech transcription
  3. Apple Health (HealthKit) data
  4. Body scan and body composition estimates
  5. Future Self: optional AI-generated visualisations
  6. AI parsing service (Anthropic)
  7. Food data lookups (Open Food Facts)
  8. Analytics
  9. How we use information
  10. When information is shared
  11. Subscriptions and payments
  12. Data retention and deletion
  13. International processing
  14. Security
  15. Children
  16. Your privacy rights
  17. Australian privacy rights
  18. Changes to this policy
  19. Contact us

1. What information the App handles

The personal information involved in Lume falls into a small number of categories:

We do not collect your name, email address, contacts, or location, and the App contains no advertising or crash-reporting SDKs. We do not require you to create an account. Photos are only ever transmitted off your device if you explicitly choose the optional Future Self feature described in section 5 — the on-device body scan itself never transmits your photos anywhere.

2. Voice input and speech transcription

When you tap to log by voice, the App records audio through your device microphone and passes it to Apple's Speech framework to produce a text transcript.

How audio is handled. The audio is processed by Apple's speech recognition service to generate a transcript. Depending on your device and language, Apple may perform this recognition entirely on your device or may process the audio on Apple's servers, in line with Apple's Privacy Policy. Lume itself does not store your voice recordings and does not transmit the audio to us or to any third party. Only the resulting text transcript leaves the App, and only to our AI parsing service described in section 6.

You can revoke microphone and speech recognition permissions at any time in your device Settings. Doing so disables voice logging but does not affect manual entry.

3. Apple Health (HealthKit) data

If you grant permission, Lume integrates with Apple Health to read certain metrics and to write entries you log. This integration is optional; the App functions without it.

Data Lume reads from Apple Health

Used to display your daily activity and, where you choose, to pre-fill your profile:

Data Lume writes to Apple Health

When you log entries in the App, Lume writes the corresponding samples back to Apple Health so your data stays consistent across apps:

Editing or deleting an entry in Lume updates or removes the matching sample in Apple Health.

How Health data is used and protected. Health data is used solely to provide the App's features on your device. We never use Apple Health data for advertising or marketing, we never sell it, and we never share it with third parties for their own purposes. With the single, limited exception below, all Apple Health data read by Lume, including steps, active energy, height, body fat percentage, biological sex, and date of birth, remains on your device and is never transmitted off it.

The one Health value that may be transmitted

When you log by voice or text, the App includes your current body weight with the request it sends to our AI parsing service (see section 6), so that if the entry is a workout, the service can estimate the calories you burned. Because the parser works out what kind of entry you logged from your words, your weight is included with parsing requests generally, even though it is only ever used for workout calorie estimation. If you previously set your weight using the "Import from Health" option, that figure originated from Apple Health; if you entered it manually, it did not. In either case, the value sent is a single number (your weight in kilograms); no other Apple Health data is included. No height, body fat, sex, date of birth, step, or energy data is ever sent as part of a parsing request.

4. Body scan and body composition estimates

Lume offers an optional body scan feature that estimates your body fat percentage from two photos (front and side). This feature is available only to users who confirm they are 18 or older.

Your photos never leave your device for this feature. Body scan photos are analysed entirely on-device using Apple's Vision framework. The photos exist only in memory during the scan, are never written to disk, and are never transmitted to us or to any third party. Once the estimate is calculated, the photos are discarded. If you confirm the resulting estimate, only the numeric body-fat percentage — not the photos — is saved to your profile and, if you grant permission, to Apple Health.

The body scan is optional at every step. You can enter your body measurements manually or skip this step entirely without affecting any other part of the App.

5. Future Self: optional AI-generated visualisations

After completing a body scan, subscribers can optionally choose to see an AI-generated visualisation of what they might look like after a period of consistent training and nutrition ("Future Self"). This feature is available only to users who confirm they are 18 or older, and only after you've started a Lume+ trial or subscription.

You can decline Future Self at the point it's offered, or close the feature at any time, without affecting your subscription or any other part of the App.

6. AI parsing service (Anthropic)

Lume's core feature turns a free-text description into a structured entry using an artificial intelligence model. To do this, the App sends the relevant text to a parsing service we operate, which forwards it to our AI provider, Anthropic, for processing. Requests are routed through a proxy we run on Cloudflare's global edge network, which lets us keep our provider credentials secure and apply rate limits.

What is sent in a parsing request:

No name, email, account identifier, location, photo, or other profile or Health data is included in these requests. Your input and the AI output are processed by Anthropic to provide this feature. You can review Anthropic's practices in their privacy policy. You must not use the AI features in any way that violates the terms or policies of our AI provider.

7. Food data lookups (Open Food Facts)

When you search for a packaged or branded food, Lume may look up nutrition data from Open Food Facts, an open food-product database, via a proxy we operate. Only your search text and the on-device device identifier are sent for this purpose — no name, email, or other personal information is included. You can review Open Food Facts' practices at openfoodfacts.org.

8. Analytics

We use TelemetryDeck, a privacy-focused analytics provider, to understand how people use the App so we can improve it — for example, which onboarding steps people complete, or whether a particular screen was shown.

What TelemetryDeck does and does not collect. TelemetryDeck assigns your device an identifier that is salted and hashed before it ever reaches TelemetryDeck's servers, so it cannot be traced back to you, linked to your name or email, or used to identify you personally. It does not use cookies, does not track you across other apps or websites, and we do not send it your name, email, entries, photos, or Health data. It records only feature-usage events (such as which screen or onboarding step was reached) and basic device metadata (such as app version and device model).

We have no advertising or crash-reporting SDKs in the App, and we do not use TelemetryDeck or any other tool to build advertising profiles or to sell your data.

9. How we use information

We process this information because it is necessary to provide the service you have requested, to pursue our legitimate interest in operating and securing the App, and, where required, with your consent (for example, microphone, camera, Apple Health, and Future Self permissions, which you grant explicitly and can withdraw at any time).

10. When information is shared

We do not sell your personal information and we do not share it for advertising. We rely on a small number of service providers strictly to operate the App:

ProviderPurposeWhat it receives
AnthropicAI parsing of your entriesThe entry text, saved meal names, and your body weight (used only for workout calorie estimation)
Google (Vertex AI)Future Self image generation (optional, subscribers only)One body-scan photo — only if you opt in and have an active trial or subscription
Open Food FactsBranded/packaged food lookupsYour search text and device identifier
TelemetryDeckPrivacy-focused product analyticsAn anonymised, salted device identifier and feature-usage events — no personal information
CloudflareEdge proxy and rate limiting for requests to the providers aboveRequest traffic, including the data described above and the device identifier
AppleSpeech transcription; subscription billing; Apple HealthVoice audio for transcription; payment details (which we never see); Health data on your device

We may also disclose information if required by law, or in connection with a sale or transfer of our business, in which case we will continue to protect it under this policy.

11. Subscriptions and payments

Lume offers an optional auto-renewable subscription, Lume+, which may include a free trial period. All purchases, billing, and renewals are handled by Apple through the App Store. We do not collect or store your payment instrument; we receive only your subscription entitlement status so the App can unlock paid features. Subscription terms, pricing, trial eligibility, and cancellation are managed in your Apple account settings and are governed by Apple's Standard End User License Agreement.

12. Data retention and deletion

To delete the data Lume holds on your device, delete entries within the App or uninstall it. To remove samples written to Apple Health, use the Apple Health app.

13. International processing

We are based in Australia. Our service providers, including Anthropic, Google, Open Food Facts, TelemetryDeck, Cloudflare, and Apple, may process data on infrastructure located in the United States and other countries. Where data is transferred internationally, we rely on the safeguards offered by these providers, including standard contractual clauses where applicable, to protect your information consistent with this policy.

14. Security

We use reasonable technical and organisational measures to protect your information, including transport encryption for network requests, signed and rate-limited API requests, and storing the device identifier in the device keychain. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and limit what is collected in the first place.

15. Children

Lume is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us and we will delete it.

Body scan and Future Self (sections 4–5) require you to confirm you are 18 or older. These features are hidden from users who have not made this confirmation and are not available to anyone under 18.

16. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Because most of your information is stored only on your device, you can exercise many of these rights directly: by editing or deleting entries, by managing permissions in your device Settings, and by uninstalling the App. For anything else, or to make a formal request, contact us using the details in section 19. We will respond in accordance with applicable law and will not discriminate against you for exercising your rights.

17. Australian privacy rights

We handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles. You may request access to or correction of your personal information by contacting us. If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with the Office of the Australian Information Commissioner.

18. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. If we make material changes, we will provide a more prominent notice. We encourage you to review this policy periodically.

19. Contact us

If you have questions about this policy or your information, contact:

Kyle McQueen, trading as Spiel Labs
Email: privacy@lume.fitness