Lumina - AI Wellness Companion

Last Updated: Feb 16, 2026

Welcome to Lumina (the "App"), provided by Wellness at Work Pte. Ltd ("Company," "we," "us," or "our"). We are committed to protecting your privacy and being transparent about how we handle your information. At Lumina, privacy is built into our design. We are committed to transparency and to protecting your personal information while delivering a personalized, high‑quality experience. This Privacy Policy explains the types of information we collect, how it is used, stored, and shared when you use our App on Windows and macOS operating systems.

1. Scope of this Policy

This Policy applies to the Lumina application (Windows and macOS) and to our website at wellnessatwork.ai (and related domains). It describes our practices regarding the collection, use, and disclosure of information, including data derived from your computer's camera and other metrics generated by the App, as well as data collected through our website.

2. Data Minimization & Local Processing

Lumina is engineered to run primarily on your device. We do not save any video on the user's local laptop or on our servers. No videos or personal media are stored on your device or in the cloud during regular use. All videos are processed locally on your device, processed metrics are stored and backed up securely on the cloud.

3. Purpose of Data Collection

To personalize your app experience.
To improve the app performance and troubleshoot issues.
To communicate with you through emails and other channels.
To ensure continuity of service by securely backing up processed data and user history.
To monitor app health and performance for troubleshooting and improvements.
To comply with legal obligations and protect against abuse.

4. Information We Collect

Usage Metrics: We automatically collect aggregated, anonymized data (e.g., error logs, performance data, session durations) to monitor app performance and improve functionality.

Device Information: We may collect non‑identifiable technical details (e.g., operating system, device model, IP address) to help optimize the app for your environment.

Data Collected During Calibration: To tailor our Computer Vision model to your unique posture, we record short video clips during a calibration process. This video is stored on our servers to ensure our model performs optimally for your face and desk set-up. Outside of the calibration process, all video feeds are processed in real time on your device and are immediately deleted post processing.

User-Provided Information: Any personal data you voluntarily provide (e.g., name, email address, form responses) will be collected in accordance with this Policy, encrypted and stored as per security standards.

Website Data: When you use our website, we collect and store data in our systems, including: test results and questionnaire responses (e.g., from wellness assessments), account data if you sign in, and Firebase Auth identifiers. This data is stored in Firebase (Firestore) and is used to provide and improve our services.

5. Cookies and Similar Technologies

We use cookies and similar technologies to provide and improve our services.

Essential cookies: These are necessary for the website to function. They include Firebase Auth session cookies (for signed-in users) and theme preference stored in your browser (e.g., dark/light mode). These do not require your consent.

Optional cookies: If we add analytics (e.g., Firebase Analytics) in the future, we will load them only after you accept optional cookies via our cookie banner. You may decline optional cookies and still use the site.

Retention and management: Session cookies expire when you close your browser. Other cookies and stored preferences are retained as described when set. You can manage or delete cookies via your browser settings.

6. Data Storage, Transfer, and Security

Storage Location: Information we collect (including calibration videos, metrics, user inputs, and technical data) is stored on secure cloud servers managed by us or our trusted third-party service providers. These servers may be located in various countries.

Data Transfer: Your information will be transferred to and processed on these cloud servers. We take steps to ensure that data transfers comply with applicable data protection laws.

Security Measures: We implement reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These may include encryption (both in transit and at rest where feasible), access controls, and regular security assessments. However, please note that no internet transmission or electronic storage method is 100% secure.

7. Third‑Party Services and Data Sharing

No Unnecessary Sharing: We do not sell or share your personal data with third parties, except as required by law or to protect our rights.

External Integrations: Any third‑party tools used (e.g., for analytics) have their own privacy policies, and we only use such services in accordance with our standards.

Subprocessors: We use the following service providers to operate our services: Google (Firebase/GCP) for authentication, database, and hosting; Vercel for web hosting when applicable. These providers process data on our behalf under appropriate agreements.

8. User Control and Rights

Access, Deletion, and Portability: You have the right to access, correct, delete, or export your personal data. To exercise these rights, email us at contact@wellnessatwork.ai. We will respond within 30 days.

Data Retention: We retain your personal data only for as long as necessary to provide our services or as required by law.

9. Communications

We may contact you via email or in‑app notifications regarding your account, updates to our services, or changes to this Privacy Policy. You may opt out of non‑essential communications at any time by following the unsubscribe instructions in our messages.

10. Children's Privacy

The App is not intended for use by individuals under the age of 13 (or a higher applicable age threshold, e.g., 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it promptly.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this document and provide additional notice via the App if significant changes occur. Your continued use of the App constitutes your acceptance of the updated Policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: contact@wellnessatwork.ai