Privacy Policy

1. Information We Collect

Depending on how you use Lux, we may collect:

• Account information: email address, optional name, and a hashed password. If you sign in with Google or Apple, we receive the identifier and email those providers share with us. We also store your representation that you are at least 13, and, for web Stripe checkout, the time you agreed to the Terms.
• Lux companion conversations: standard conversations are stored on our servers, including messages, titles, summaries, and retrieval records, so you can reopen them and (when enabled) use your own prior chats for continuity. You can delete a conversation or turn off cross-chat recall in chat settings. Saved companion conversations expire after 30 days without a new message. Expired chats are removed from history and recall, with permanent deletion when conversation cleanup runs. Browser storage may also hold chat interface state on that device.
• Community chat and admin chat: messages are stored on our servers so they can be shown to other participants and moderated. Admin chat messages may be visible to the user and support administrators. Community content can be reported, blocked, or moderated on the web.
• Prayer: some prayer replies use the same AI processing as companion chat; some gated replies do not call the model. Prayer UI state may stay in memory on that page and is not a separate saved transcript unless you use a mode that stores messages (such as Friend Lab).
• Study and usage data: reader position, notes or highlights when you use those features, suggestions, bug reports, and AI usage counts.
• Lux Create: when you use image creation, we store the request or prompt and job details such as status, provider, timing, and generated-media references so the feature can run and we can troubleshoot it. A generated image may remain in your private gallery until you delete or hide it; related job telemetry may remain in the account records. When Lux Create or image-editing uses a third-party AI provider such as OpenAI, your image prompts, requested changes, and any reference image you submit for editing may be transmitted to that provider to complete the request.
• Payment information: web payments are processed by Stripe (we do not store full card numbers). Apple and Google Play process mobile subscriptions; we store purchase status, product identifiers, and tokens needed to verify the subscription — not payment card details.
• Technical and security data: IP address, browser or app version, device information, session identifiers, and device signals used to protect accounts and prevent fraud or abuse. We may store the IP used at registration.
• Notifications: if you opt in, a push subscription so we can send a daily verse or similar service notices. You can turn this off in Account settings.
• On-device preferences: bookmarks, voice, and playback speed may be stored in your browser or app and are not always copied to our servers.
• Voice input (optional): Chat voice typing is optional and, when offered, asks for your permission each time before the microphone is used. On supported browsers, Lux may use the browser or operating system speech recognition service (for example the Web Speech API). In that mode, speech processing is handled by your browser or OS provider; Lux does not upload a microphone recording to Lux servers for that path. Where server transcription is enabled for the product and available on your device, Lux may record a short clip (up to about 60 seconds), transmit that audio securely to Lux servers, and send it to OpenAI solely to create a text transcript for your Chat draft. That transcript is placed in the draft and is not sent as a chat message until you press Send. You can cancel before or during capture or upload. You may also decline the per-use prompt and continue typing instead.
• AI usage and internal accounting records: When enabled, Lux may keep account-linked information about AI requests, such as the provider or model used, usage amounts, request outcome, and estimated processing cost to operate the service and maintain internal accounting and security records. These records do not contain chat transcripts, uploaded media bytes, or payment card numbers. Access is restricted to authorized administrators.

2. How We Use Your Information

• Provide and operate Lux (reading, listen-aloud, AI companion, optional voice typing, music, community, accounts)
• Process payments and manage subscriptions
• Send service email (password reset, verification, important notices)
• Prevent fraud and abuse
• Understand site traffic in aggregate (first-party page views; Google Analytics only if configured)
• Comply with legal obligations

HRB does not use your chat content to train public foundation models. Standard chat processing runs on HRB-operated infrastructure; when the Premium/OpenAI route is enabled and used, chat content is sent to OpenAI as described below.

3. Data Storage and Security

Passwords are hashed (bcrypt). We use HTTPS for data in transit. No method of transmission or storage is 100% secure. Account sessions may be limited to one active login at a time.

4. Data Sharing

We do not sell your personal information. We share data only as needed with:

• Payment processors: Stripe (web), Apple (App Store), and Google Play (Android), under their privacy policies.
• Sign-in providers: Google and/or Apple if you choose those sign-in methods.
• HRB-operated AI and speech services: the Lux companion runs on infrastructure we operate. Lux may use HRB-hosted speech synthesis; some app versions may use device-native speech services. Public-domain KJV audio may be cached (keyed to verse text and voice, not to your account) so playback is faster. Chat listen-aloud audio may also be cached for about 14 days. That cache is content-addressed (a hash of the spoken text and voice), not keyed by user ID, but it can contain personal phrasing from a chat.
• OpenAI: when the Premium chat route is enabled and used, the chat content and any attached image sent with the request are processed by OpenAI to generate a response. The request asks the API not to store the response, but OpenAI processes the request under its own service terms and operational policies; Lux does not control any provider-side retention. Separately, when optional server voice transcription is enabled and you choose to use it, a short microphone recording you submit is transmitted to Lux and then to OpenAI’s audio transcription API to produce draft text. Lux holds that audio in memory for the transcription request and does not write the recording to Lux disk storage as a permanent archive; Lux zeros the in-memory copy after the request finishes. OpenAI still processes the audio under its own service terms and operational policies, and Lux does not control or guarantee any fixed provider retention period.
• Email: account verification and welcome messages are sent with Resend. Password-reset messages are sent with IONOS SMTP.
• Analytics: first-party traffic counts (page-view beacons to our servers). Google Analytics loads only if a real measurement ID is configured; placeholder IDs are treated as unset.
• Error monitoring: if Sentry is enabled, it may receive diagnostic data. Session Replay, if turned on, can record a masked view of the page around errors (text is masked; this is not a full chat archive).
• Legal requirements: when required by law or to protect our rights or users.

Sensitive information you choose to share: Lux supports discussion of faith, prayers, personal struggles, relationships, and other potentially sensitive topics. Details you submit in chat, community messages, uploads, or support requests may reveal religious beliefs, health concerns, or other private information. Please share only what you are comfortable processing through Lux and the service providers disclosed here. Public community posts may be seen by others.

Third-party data retention: When you use features that involve providers such as OpenAI, Stripe, Apple, Google, email delivery services, hosting services, or optional monitoring and speech providers, those providers may process or keep records under their own privacy policies, service terms, legal obligations, and retention practices. Lux cannot control or guarantee their independent retention schedules, logs, backups, or deletion processes. Deleting data from Lux does not necessarily delete copies that a third-party provider is permitted or required to retain. We remain responsible for handling the information we share and requests we receive as required by applicable law.

5. Cookies and Similar Technologies

We use cookies and similar storage to keep you signed in, store a visitor id for first-party traffic counts, and remember preferences. Blocking cookies may prevent login. Lux does not currently respond differently to browser Do Not Track signals. When optional third-party analytics or monitoring are enabled, providers may collect technical activity data and may use cookies or similar identifiers across websites or services, subject to their own policies and your applicable choices. We do not claim that Lux itself can control tracking performed independently by those providers. Voice input is separate from cookies: browser or OS speech recognition (when used) is handled by that provider, while optional server transcription (when enabled and you consent for that use) uploads a short recording to Lux for OpenAI transcription as described in Sections 1 and 4.

6. Your Rights

Subject to applicable law, you may:

• Access or correct account information
• Request deletion of your account and associated personal data
• Request a copy of personal data we hold (we do not currently offer a self-serve export button)
• Opt out of optional notifications such as the daily verse
• Ask about applicable state privacy rights, including restrictions on certain uses of sensitive personal information where the law applies

If you are signed in, you can delete your account from Account on the website. iOS and Android app versions that include the Delete account control can do the same in-app. You can also email support@hrblux.com or use the public delete-account page. Self-serve deletion removes the server account and database records related through that account. The current deletion handler does not itself remove separately stored files, such as generated Create media. It cannot wipe data stored only on your device (for example local chat, bookmarks, or voice settings), Apple or Google Play billing records, shared Scripture audio caches, or copies held in backups and operational systems. Contact support for other data requests; to make a privacy request, email support@hrblux.com with the account email and the nature of your request. We may verify that you control the account before disclosing or deleting personal information, and will respond within time limits required by applicable law. We will not discriminate against you for exercising rights protected by law. Some records may need to be retained for legal, security, billing, or fraud-prevention purposes.

7. Children's Privacy

Lux is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it. At signup we require a representation that you are at least 13; that is not an identity check. Users 13–17 should use Lux with a parent or guardian’s consent, as described in the Terms of Service.

8. Data Retention

Standard saved conversations and their transcripts, summaries, and retrieval records expire after 30 days without a new message. Expired conversations are excluded from history and recall immediately, then hard-deleted with their related records when cleanup runs on chat-history access, such as when the conversation list loads. This does not promise deletion exactly at the 30-day mark. New messages reset that window. Turning off cross-chat recall prevents future retrieval from prior chats but does not delete stored conversations. Account deletion removes the account and database records linked to it through the account relationships, but does not itself delete separately stored files. If a legacy conversation ledger was imported, its source file is left in operational storage separately from database chat history; that legacy file ledger remains under its existing policy until explicit review, with no automatic deletion period defined here. We may retain limited records when needed for security, abuse prevention, legal obligations, or backups and operational recovery. Security and abuse-prevention records include signals such as IP address, user agent, registration IP, and device identifiers; these help protect accounts and enforce usage limits. Operational and error-monitoring logs may also contain request diagnostics, subject to the services and logging configuration enabled. The application does not define a general retention period for account records, security and abuse records, analytics, or backups; those durations depend on operational configuration and owner policy. Cached Scripture audio is shared content and is not tied to an account. Chat listen-aloud cache files are kept for about 14 days. Optional server voice-transcription audio is processed for the request and is not kept by Lux as a permanent recording file; Lux does not promise that every intermediate copy in transit, logs, backups, or a transcription provider’s systems is erased on a fixed schedule. Resulting draft text follows ordinary Chat draft and conversation storage rules once you send a message.

When internal AI usage and cost record retention is enabled, account-linked detail records are scheduled for deletion after 90 days and may be summarized into monthly totals without account identifiers, retained for up to 12 full calendar months. Separate purchase, charge, security, support, and operational records follow their own retention rules. Backup and recovery copies may remain until their normal lifecycle ends; provider-side retention is governed by the provider.

9. International Data Transfers

Your data may be processed in the United States or other countries where we or our processors (Stripe, Apple, Google, Resend, IONOS, OpenAI when Premium chat or optional server voice transcription is used, and Sentry if enabled) operate. By using the Service, you understand that your information may be transferred to those locations.

10. Changes to This Policy

We may update this Privacy Policy. The “Last updated” date shows when it changed. For significant changes we will notify you by email or in the Service when practical.

11. Contact Us

Privacy questions: support@hrblux.com.