Privacy Policy for Lumio

Effective Date: January 5, 2026

1. Introduction

Lumio ("we", "our", or "us") is a productivity workspace designed to organize your browser tabs and integrate with your digital life. We respect your privacy and prioritize local-first data processing.

2. Data We Collect & Store

A. Local Data (Default)

By default, all your workspaces, collections, and settings are stored locally on your device (chrome.storage.local). This data never leaves your browser unless you explicitly enable Cloud Sync.

B. Cloud Sync (Optional)

If you enable Cloud Sync, we store the following data on our secure servers (Supabase):

• Tab URLs and Titles
• Collection Names
• Workspace Settings

This allows you to access your workspace across multiple devices. You can delete this cloud data at any time via the "Factory Reset" or "Delete Account" options.

C. Google Workspace Data

Lumio integrates with Google APIs to enhance your dashboard. We access:

• Google Calendar: To display upcoming meetings.
• Google Drive: To show recent files for quick access.
• Basic Profile: To display your name/avatar.

3. Data Sharing & Third Parties

• We do not sell your data.
• We do not use tracking cookies or analytics pixels.
• Google APIs: Lumio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Security

• Encryption: All data syncing to our cloud is transmitted over SSL/TLS.
• Authentication: We use secure OAuth2 for Google and Supabase authentication.