Privacy Policy

Lumixa is developed by Assemble Innovations. This policy explains what information Lumixa and its backend services collect, what they never collect, why, and how long anything is kept. It applies to the Lumixa app and the minimal backend it talks to - not to any other Assemble Innovations product.

Lumixa's core function - enhancing and upscaling images - runs through an on-device AI model. This is an architectural fact, not a policy promise: there is no server in Lumixa that receives, stores, or processes your image content. Our backend exists only to handle sign-in, your subscription, and downloading the AI models themselves.

The following never leave your device, under any circumstance:

• Source or output image bytes, thumbnails, or previews
• Filenames or local file paths
• Image hashes or perceptual fingerprints
• EXIF metadata blocks
• GPS or location data read from a photo
• Camera serial numbers
• Cropped tiles, embeddings, or any inferred description of an image

To run accounts, subscriptions and model delivery, we handle:

• Account data - your email or Google account identifier via Firebase Authentication, used to sign you in.
• Subscription data - your Lumixa Pro status and the transaction reference needed to verify a purchase through Google Play, plus renewal/expiry updates from Google.
• Usage counters - how many enhancements you've run on a given calendar day, so we can apply the free-tier daily limit. No image or file data is attached.
• Model delivery requests - downloading an AI model requires a signed-in session (Firebase ID token) and a device-attestation token (Firebase App Check / Play Integrity) to confirm the request comes from the genuine app. Both are verified and discarded, never logged or stored.
• Coarse product analytics - allowlisted, privacy-safe events such as which model was used, the scale factor, a megapixel bucket, and a duration bucket. Never raw metadata, never image-derived.
• Redacted crash diagnostics - typed error codes and coarse technical facts (tile size, execution provider) used to fix bugs. Filenames, file paths and tensor values are excluded.

Lumixa's backend is intentionally minimal and built on:

• Firebase Authentication - sign-in with email/password or Google.
• Firebase (Firestore & Cloud Functions) - stores your minimal account profile, subscription state and daily usage counters; verifies purchases and handles account cleanup.
• Google Play Billing - processes the Lumixa Pro subscription; Google handles your payment details, we never see them.
• Firebase App Check / Play Integrity - confirms a model-download request comes from a genuine, unmodified copy of the app.

None of these services are given image content, filenames, or image-derived metadata to process.

Lumixa asks for permissions only at the point they're needed, and explains why before asking:

• Photo/media read access, to let you select an image to enhance.
• Photo/media write access, to save an enhanced result back to your library.
• Notifications, only after explaining the benefit - declining never blocks image processing.

Lumixa does not request contacts, microphone, camera, precise location, or broad storage access.

• Daily usage counters: kept for the last 7 days, then discarded.
• Model-download rate-limit records: a salted, non-reversible hash of your account plus a daily byte count, kept for 3 days.
• Purchase-token ownership records: retained for as long as required for legal and anti-fraud purposes, even after account deletion.
• Temporary processing files created during enhancement: app-private, deleted after the job finishes, cancels, or fails - and never included in cloud backups.

• You can request deletion of your account from within the app, or from the web via our account deletion page. This removes your account profile and usage records, subject to the purchase-record retention above.
• Deleting your Lumixa account does not cancel an active App Store/Google Play subscription - cancel that separately from the store you subscribed through.
• Photos you've already saved from Lumixa remain on your device, fully under your control.
• For any privacy request our support team needs to help with directly, contact support@theassemble.in.

Lumixa is not directed at children and is not knowingly used to collect information from children under the age required by applicable local law (13 in most jurisdictions). If you believe a child has provided us information, contact us and we'll address it.

Account and subscription data is protected by Firebase's security rules (deny-by-default access), purchases are verified server-side rather than trusted from the client, and AI models are checksum-verified before use to prevent tampering. Because enhancement never leaves your device, there is no image data in transit or at rest on our servers to secure in the first place.

We may update this policy as Lumixa changes - for example, when we add a feature, launch on a new platform, or expand to a new jurisdiction with its own disclosure requirements. Material changes will be reflected on this page with an updated date above.

Questions about this policy or your data can go to support@theassemble.in.