1. Information We Collect
Depending on how you use Lux, we may collect:
- Account information: email address, optional name, and a hashed password. If you sign in with Google or Apple, we receive the identifier and email those providers share with us. We also store your representation that you are at least 13, and, for web Stripe checkout, the time you agreed to the Terms.
- Main Lux companion chat: messages are processed on our servers to generate a reply. We do not keep a normal server-side transcript of that conversation. In the browser, the thread may be stored in localStorage on that device.
- Friend Lab: conversations and messages are stored on our servers.
- Community chat and admin chat: messages are stored on our servers so they can be shown to other participants and moderated (report, block, and ban on the web). There is no automatic objectionable-content filter.
- Explore: a limited no-account preview. We do not keep an Explore chat transcript. We store a cookie and a device fingerprint (including IP address and user agent, plus a hash) so the 24-hour / 5-message limit cannot be endlessly reset.
- Prayer: some prayer replies use the same AI processing as companion chat; some gated replies do not call the model. Prayer UI state may stay in memory on that page and is not a separate saved transcript unless you use a mode that stores messages (such as Friend Lab).
- Study and usage data: reader position, notes or highlights when you use those features, suggestions, bug reports, and AI usage counts.
- Payment information: web payments are processed by Stripe (we do not store full card numbers). Apple and Google Play process mobile subscriptions; we store purchase status, product identifiers, and tokens needed to verify the subscription — not payment card details.
- Technical and security data: IP address, browser or app version, device information, session identifiers, and device signals used to prevent fraud, trial abuse, and Explore-pass abuse. Device fingerprints may include a hash plus plaintext IP address and user agent. We may store the IP used at registration.
- Notifications: if you opt in, a push subscription so we can send a daily verse or similar service notices. You can turn this off in Account settings.
- On-device preferences: bookmarks, voice, and playback speed may be stored in your browser or app and are not always copied to our servers.
2. How We Use Your Information
- Provide and operate Lux (reading, listen-aloud, AI companion, music, community, accounts)
- Process payments and manage subscriptions and trials
- Send service email (password reset, verification, important notices)
- Prevent fraud, abuse, and overlapping trials
- Understand site traffic in aggregate (first-party page views; Google Analytics only if configured)
- Comply with legal obligations
We do not use your chat content to train public third-party foundation models. The Lux companion runs on HRB-operated servers.
3. Data Storage and Security
Passwords are hashed (bcrypt). We use HTTPS for data in transit. No method of transmission or storage is 100% secure. Account sessions may be limited to one active login at a time.
4. Data Sharing
We do not sell your personal information. We share data only as needed with:
- Payment processors: Stripe (web), Apple (App Store), and Google Play (Android), under their privacy policies.
- Sign-in providers: Google and/or Apple if you choose those sign-in methods.
- HRB-operated AI and speech services: the Lux companion runs on infrastructure we operate. Lux may use HRB-hosted speech synthesis; some app versions may use device-native speech services. Public-domain KJV audio may be cached (keyed to verse text and voice, not to your account) so playback is faster. Chat listen-aloud audio may also be cached for about 14 days. That cache is content-addressed (a hash of the spoken text and voice), not keyed by user ID, but it can contain personal phrasing from a chat.
- Email: account verification and welcome messages are sent with Resend. Password-reset messages are sent with IONOS SMTP.
- Analytics: first-party traffic counts (page-view beacons to our servers). Google Analytics loads only if a real measurement ID is configured; placeholder IDs are treated as unset.
- Error monitoring: if Sentry is enabled, it may receive diagnostic data. Session Replay, if turned on, can record a masked view of the page around errors (text is masked; this is not a full chat archive).
- Legal requirements: when required by law or to protect our rights or users.
5. Cookies and Similar Technologies
We use cookies and similar storage to keep you signed in, remember Explore-pass status, store a visitor id for first-party traffic counts, and remember preferences. Blocking cookies may prevent login or Explore from working. Voice input, where offered, is handled by your browser or operating system, not by uploading a recording to Lux for transcription.
6. Your Rights
Subject to applicable law, you may:
- Access or correct account information
- Request deletion of your account and associated personal data
- Request a copy of personal data we hold (we do not currently offer a self-serve export button)
- Opt out of optional notifications such as the daily verse
If you are signed in, you can delete your account from Account on the website. iOS and Android app versions that include the Delete account control can do the same in-app. You can also email support@hrblux.com or use the public delete-account page. Deletion removes the server account and associated personal data we control. It cannot wipe data stored only on your device (for example local chat, bookmarks, or voice settings), Apple or Google Play billing records, or shared Scripture audio caches. We aim to complete deletion or data requests within 30 days, except where we must retain records for legal, security, or fraud-prevention purposes.
7. Children's Privacy
Lux is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it. At signup we require a representation that you are at least 13; that is not an identity check. Users 13–17 should use Lux with a parent or guardian’s consent, as described in the Terms of Service.
8. Data Retention
We keep account data while the account is active. After a verified deletion request, we delete or anonymize personal data within 30 days except where retention is required. Cached Scripture audio is not personal data. Chat listen-aloud cache files are kept for about 14 days. Explore-pass records are kept long enough to enforce the 24-hour / 5-message limit.
9. International Data Transfers
Your data may be processed in the United States or other countries where we or our processors (Stripe, Apple, Google, Resend, IONOS, and Sentry if enabled) operate. By using the Service, you understand that your information may be transferred to those locations.
10. Changes to This Policy
We may update this Privacy Policy. The “Last updated” date shows when it changed. For significant changes we will notify you by email or in the Service when practical.
11. Contact Us
Privacy questions: support@hrblux.com.