Lumic

Privacy Policy

Effective date: 12 April 2026 · Lumic Private Limited · Delhi, India

This Privacy Policy explains how Lumic Private Limited ("Lumic", "we", "us") collects, uses, discloses, stores, and protects personal data when you use the Lumic mobile application, website at lumic.co.in, and related services (collectively, the "Services"). It is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules in India.

1. Who we are

Lumic Private Limited is a company incorporated in India with its operations based in Delhi. For privacy matters, you may contact us at kumarmohitsh218@gmail.com.

2. Scope

This Policy applies to personal data processed in connection with the Services. It does not apply to third-party websites, apps, or services that we do not control, including links opened from within the Services.

3. Personal data we collect

Depending on how you use the Services, we may collect:

  • Account and identity data: such as name, email address, phone number, or authentication identifiers when you create or access an account.
  • Usage and device data: such as app version, device type, operating system, language, coarse region (where enabled), feature usage, and diagnostics needed to operate and improve the Services.
  • Communications: messages you send to us (for example, support requests).
  • Optional content you choose to provide: such as saved items or preferences where those features exist in the product.

We minimise collection to what is necessary for stated purposes and keep data accurate and up to date where feasible.

4. Legal bases and purposes (DPDP alignment)

We process personal data for lawful purposes including:

  • Providing, maintaining, securing, and improving the Services;
  • Authenticating users and preventing fraud, abuse, and security incidents;
  • Communicating service-related notices and, where permitted, product updates;
  • Complying with legal obligations and responding to lawful requests from authorities;
  • Analytics in aggregated or de-identified form where appropriate.

Where consent is required under applicable law, we will seek it separately (for example, for certain notifications or marketing communications) and you may withdraw consent through available controls or by contacting us, subject to legal and contractual limitations.

5. Cookies and similar technologies (website)

Our website may use cookies or similar technologies to remember preferences, measure basic traffic, and improve performance. You can control cookies through your browser settings. Some features may not function correctly if cookies are disabled.

6. Notifications

If you enable push notifications, your device platform handles tokens and delivery. You can disable notifications through your device or in-app settings where available. We do not sell your personal data for push notification targeting.

7. Sharing and disclosure

We may share personal data with:

  • Service providers who assist hosting, analytics, customer support, email delivery, or security, under contracts that require appropriate safeguards;
  • Professional advisers where required (for example, lawyers or auditors);
  • Authorities when required by law or to protect rights, safety, and integrity of users and the Services.

We do not sell personal data in the conventional sense of exchanging data for money with data brokers.

8. International transfers

Our infrastructure or subprocessors may process data outside India. Where such transfers occur, we take steps consistent with applicable law to ensure appropriate safeguards and protections.

9. Retention

We retain personal data only as long as needed for the purposes described, including legal, accounting, and reporting requirements. When data is no longer required, we delete or anonymise it in line with our internal schedules, unless a longer period is required by law.

10. Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is completely secure; we continuously work to improve our safeguards.

11. Your rights (Data Principal)

Subject to applicable law, you may have rights to:

  • Request access to, and correction of, your personal data;
  • Request erasure or restriction in permitted circumstances;
  • Withdraw consent where processing is consent-based;
  • Nominate another person to exercise rights on your behalf, where permitted;
  • Appeal certain decisions through the process prescribed under the DPDP framework when applicable.

To exercise rights, email us at kumarmohitsh218@gmail.com. We may need to verify your identity before responding.

12. Children

The Services are not directed to children in a manner that requires knowing collection of their data without parental oversight. If you believe we have collected data from a child inappropriately, contact us and we will take appropriate steps.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. Where changes are material and consent is required, we will obtain consent as required by law.

14. Grievance officer

For privacy-related questions or complaints, contact our Grievance Officer at kumarmohitsh218@gmail.com. We will acknowledge and respond in line with applicable timelines under Indian law.