Back to Home

Privacy Policy

Last updated: August 28, 2026

This Privacy Policy explains how the Lumora app (“Lumora,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our AI image and video generation service (the “App”).

By using Lumora, you agree to the collection and use of information in accordance with this Privacy Policy.

Lumora is developed and operated by GORDES ZEOLIT MADENCILIK SANAYI VE TICARET ANONIM SIRKETI (“we,” “us,” or “our”).

Key Points

  • Lumora does not require account registration, login, or email addresses to use the App.
  • We collect only the minimum data necessary: the photos you choose to upload, your generation prompts, and limited technical data.
  • We use third-party analytics, advertising, and attribution services to help us operate the App and, where permitted, to show and measure ads.
  • Submitted content may be temporarily retained for service delivery. AtlasCloud Standard Services may retain Customer Content for up to seven (7) days, and downstream providers’ own retention and deletion practices may also apply.
  • We use BytePlus directly for AI generation models made available through BytePlus and AtlasCloud to route requests to OpenAI, Kling AI, and PixVerse. Provider-specific retention and data-use practices apply as described below.
  • We do not sell your photos, facial data, or any personal information to third parties.

1. Information We Collect

Lumora is designed to collect the minimum information necessary to provide our service. We do not require account registration or login, and we do not collect names, email addresses, or passwords to use the App.

Photos You Upload

Images you choose to upload for the purpose of generating AI images or videos. These photos may contain your face or the faces of other people you choose to include. We obtain only the specific images you choose to modify; we do not access your entire camera roll or media library — even if you grant the App access to it. Uploaded content is transmitted using encrypted HTTPS/TLS connections.

While we do not require or request any metadata attached to the images you upload, metadata (e.g., geotags) may be associated with your media by default. We take steps to remove any metadata that may be present in the files you provide.

Generation Requests

The prompts, style selections, or other instructions you provide alongside your uploaded photo to generate AI content.

Device Data

Limited technical information automatically generated by your device that may be necessary for the App to function and to diagnose technical issues, including:

  • Device model and operating system version
  • App version and installation date
  • Language settings
  • Screen resolution
  • IP address (and the associated country in which you are located)
  • Advertising identifier (IDFA), where you have granted tracking permission via Apple’s App Tracking Transparency framework

Online Activity Data

Information about your use of the App, including pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, access times, and length of access. This information may be collected using cookies, browser web storage, and similar technologies.

Advertising, Analytics, and Attribution Data

We use third-party analytics, advertising, and attribution services to help us understand how the App is used, measure the effectiveness of our marketing, and, where applicable, deliver ads. These services may collect information such as your device’s advertising identifier (IDFA), general app usage data, and install/attribution data.

On iOS, we request your permission via Apple’s App Tracking Transparency (“ATT”) framework before accessing your advertising identifier for these purposes. You can grant or revoke this permission at any time in your device’s Settings.

What We Do Not Collect

We do not collect names, email addresses, passwords, payment information, or any personally identifiable information beyond what is described above.

2. Face Data — Collection, Use, and Third-Party Processing

When you upload a photo to generate an AI image or video, that photo — including any facial imagery it contains — is used solely to fulfill your generation request.

Why We Store Face Data Temporarily

The App uses advanced AI (including neural networks) to generate AI images, create animated photos, and apply unique art styles to your media. Face data is temporarily stored solely to allow you to make AI-based generations within the App.

How Long Face Data Is Stored

Face data and other submitted Customer Content may be temporarily retained as necessary to fulfill the generation request and operate the service. AtlasCloud Standard Services may retain Customer Content for up to seven (7) days before it is scheduled for deletion from AtlasCloud-controlled systems. Content processed directly by BytePlus or routed by AtlasCloud to OpenAI, Kling AI, or PixVerse is also subject to the applicable provider’s retention, deletion, security, and data-use practices. Lumora does not claim that these services operate under Zero Data Retention.

Who We Share It With

To generate your requested content, your images, videos, prompts, and generation settings may be sent to the following third-party AI service providers:

  • BytePlus — receives requests directly from Lumora for AI generation models made available through BytePlus. Models may change as the App is updated and currently include, without limitation, Seedance 2.0, Seedance 2.0 Fast, Seedance 2.0 Mini, and Seedance 2.5. BytePlus handles submitted content under its applicable privacy and service terms. Privacy policy: https://docs.byteplus.com/en/docs/legal/docs-privacy-policy
  • AtlasCloud (operated by ATLAS CLOUD AI INC., United States) — acts as an AI model aggregation and routing platform for the OpenAI, Kling AI, and PixVerse services listed below. Under AtlasCloud’s Standard Services, Customer Content may be retained for up to seven (7) days. Lumora does not currently use AtlasCloud’s Enterprise Zero Data Retention configuration. Privacy and terms: https://www.atlascloud.ai/privacy — Retention policy: https://www.atlascloud.ai/zh/data-retention — Deletion policy: https://www.atlascloud.ai/zh/data-deletion-policy
  • OpenAI — accessed through AtlasCloud for AI image generation. OpenAI’s practices may apply when AtlasCloud routes a request to OpenAI. Privacy policy: https://openai.com/policies/privacy-policy/
  • Kling AI (operated by Beijing Kuaishou Technology Co., Ltd. and its affiliates) — accessed through AtlasCloud for Kling O3 video generation. Kling AI’s policy states that securely de-identified data and corresponding generated content may be used for model optimization. Privacy policy: https://klingai.com/docs/privacy-policy
  • PixVerse (operated by AIVORA PTE. LTD.) — accessed through AtlasCloud for AI image and video generation. Privacy policy: https://pixverse.ai/en/privacy-policy

AtlasCloud routes certain requests to downstream model providers. Each downstream provider’s own retention, deletion, security, privacy, and data-use practices may apply. Lumora therefore does not represent that every provider follows the same retention period or model-improvement practices.

Before an applicable generation request proceeds, Lumora displays an in-app consent prompt explaining what content will be sent and identifying BytePlus and ATLAS CLOUD AI INC. (AtlasCloud) as direct recipients. It also explains that, depending on the selected model, AtlasCloud may route the content to OpenAI, Kling AI, or PixVerse. The prompt describes possible processing outside the user’s country or region and links to this Privacy Policy for provider details, processing locations, and retention information.

Retention on Our Servers

Uploaded photos and AI-generated results may be temporarily retained on Lumora-controlled hosting and storage systems as necessary to provide the requested generation service. This content is scheduled for deletion within seven (7) days after generation, except where a longer period is required for security, legal compliance, dispute resolution, or the completion of an applicable backup cycle. We do not use your uploaded photos to train our own AI models.

We do not sell your facial data, your photos, or any other information you provide to any third party.

3. How We Use Your Information

We use the information described above only for the following purposes:

To Operate and Provide the App

  • Process your photo and generate the AI image or video you requested
  • Enable you to use the App’s features
  • Provide technical support and maintenance for the App
  • Perform statistical analysis about use of the App

To Ensure Security and Prevent Fraud

  • Detect, prevent, and respond to security incidents, fraud, and illegal activity
  • Protect the rights, privacy, safety, or property of Lumora, our users, or others
  • Enforce the terms and conditions that govern the App

To Comply with Law

  • Comply with applicable laws, lawful requests, and legal process

To Create Anonymous, Aggregated Data

We may create anonymous, aggregated, or de-identified data from your personal information by removing information that makes the data personally identifiable to you. We may use and share this anonymous data for our lawful business purposes.

We do not use your information for advertising, profiling, targeted marketing, or any purpose unrelated to providing the generation service you requested.

4. How We Share Your Information

We do not disclose user images or videos to third parties, except where necessary to provide the AI image and video generation features of the App.

AI Processing Partners

Your submitted images, videos, prompts, and generation settings are transmitted to BytePlus or AtlasCloud as described in Section 2 solely to process the AI output you request. AtlasCloud may route that content to OpenAI, Kling AI, or PixVerse. The relevant provider policies govern those providers’ processing, retention, deletion, security, and data-use practices.

Service Providers

We may share your non-image information with service providers that perform services on our behalf or help us operate the App (such as customer support, hosting, analytics, advertising, and attribution services). These third parties may use your personal information only as directed or authorized by us and in a manner consistent with this Privacy Policy, and are prohibited from using or disclosing your information for any other purpose.

Lumora uses Amazon Web Services (AWS), including Amazon S3 infrastructure in the Asia Pacific (Tokyo) Region, to temporarily receive and store media selected by users for generation. AWS processes this content as a hosting and storage provider on Lumora’s behalf. AWS Privacy Notice: https://aws.amazon.com/privacy/

Compliance, Fraud Prevention, and Safety

We may share your personal information where we believe it is necessary to: (a) protect our, your, or others’ rights, privacy, safety, or property; (b) enforce the terms and conditions that govern the App; or (c) protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.

Business Transfers

We may sell, transfer, or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction such as a merger, consolidation, acquisition, reorganization, or sale of assets, or in the event of bankruptcy or dissolution.

Where applicable, our legal basis for processing your photo and generating AI content is your consent, which you provide via the in-app prompt before your first upload.

For non-image data, our legal basis is our legitimate interest in operating, maintaining, and improving the App, and complying with applicable laws.

6. Cross-Border Data Transfers

We store information on our own servers and use third-party AI infrastructure located outside some users’ states, provinces, or countries. Depending on the selected model and routing, submitted content may be processed in the United States, Singapore, China, or other locations disclosed by the applicable provider.

These transfers are necessary to fulfill the generation request and are made on the basis described in Section 5, subject to applicable law. The provider policies linked in Section 2 contain additional information about their processing practices. Users should review this information before consenting to AI processing.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

Access and Deletion

  • Request confirmation of whether we hold data relating to you
  • Request deletion of any uploaded photo or generated content still on our servers
  • Lodge a complaint with your local data protection authority

Since Lumora does not use accounts, submitted content is associated with a device-scoped generation task rather than a registered user account and is handled under the retention rules described in Sections 2 and 8. If you have any privacy-related question or deletion request, contact us using the details in Section 15.

You can withdraw your consent to third-party AI processing at any time in the App’s Settings. Withdrawing consent will prevent further AI generation requests from being processed until consent is granted again.

Device Permissions

You may revoke any permissions you previously granted to us, such as permission to access your camera or camera roll, through the settings on your mobile device.

Cookies and Browser Web Storage

Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Please note that if you set your browser to disable cookies, the App may not work properly.

GDPR Rights (EU/UK/EEA Users)

If you are located in the EU, UK, or EEA, you have additional rights under the General Data Protection Regulation (GDPR), including:

  • The right to access your personal data
  • The right to rectification of inaccurate data
  • The right to erasure (“right to be forgotten”)
  • The right to restrict processing
  • The right to data portability
  • The right to object to processing
  • The right to withdraw consent at any time

CCPA Rights (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

  • The right to know what personal information we collect, use, disclose, and sell or share
  • The right to request deletion of your personal information
  • The right to opt out of the sale or sharing of your personal information (including sharing with advertising partners for personalized advertising)
  • The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at feedback@officialirony.com.

8. Data Retention

  • Uploaded photos (on Lumora-controlled hosting and storage systems): May be temporarily retained for service delivery and are scheduled for deletion within seven (7) days after generation, subject to applicable security, legal, dispute-resolution, and backup requirements
  • Generated images/videos (on Lumora-controlled hosting and storage systems): May be temporarily retained for service delivery and are scheduled for deletion within seven (7) days after generation, subject to applicable security, legal, dispute-resolution, and backup requirements
  • Content sent directly to BytePlus: Retained and processed under BytePlus’s applicable privacy and service terms
  • Content routed through AtlasCloud Standard Services: May be retained by AtlasCloud for up to seven (7) days unless otherwise specified; Lumora does not currently use Enterprise Zero Data Retention
  • Content sent by AtlasCloud to OpenAI, Kling AI, or PixVerse: Subject to the selected downstream provider’s own retention, deletion, privacy, and data-use practices
  • Device and usage data: Retained only for as long as necessary to fulfill the purposes described in this Privacy Policy

Third-Party AI Service Provider Retention

AtlasCloud’s Standard Services may retain Customer Content for up to seven (7) days before it is scheduled for deletion from AtlasCloud-controlled systems. Deleted data may remain in backups until the applicable backup cycle expires. AtlasCloud also states that a downstream model provider’s own practices may apply. Provider policy links are listed in Section 2.

9. Children’s Privacy

Lumora is intended for users who are at least 17 years old, consistent with its App Store rating. We do not knowingly collect personally identifiable information from children under 17 years of age. In the case we discover that a child under 17 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do the necessary actions.

10. Security

We use commercially reasonable security practices to help keep the information collected through the App secure. Uploaded images and other submitted content are transmitted using encrypted HTTPS/TLS connections. We also use access controls and other safeguards appropriate to the nature of the service.

However, no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security. Please do your part to help us — you are responsible for maintaining the confidentiality of your device and for controlling access to communications between you and the App.

The App may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party websites, mobile applications, or online services, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications, and online services you use.

12. Compliance with Law

We may be required to use and share your personal information to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

13. California Residents

This section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”) and applies only to “personal information” that is subject to these laws.

Personal Information We Collect

We collect the following categories of personal information directly from California consumers: visual information (photos and videos you upload), internet or other electronic network activity information (app usage data), and geolocation information (approximate location derived from IP address).

Your Rights

California residents have the right to:

  • Know the categories and specific pieces of personal information we collect, use, disclose, and sell or share about you
  • Delete the personal information we have collected from you
  • Opt out of the sale or sharing of your personal information. We do not sell personal information for money, but our use of advertising and attribution services may constitute “sharing” under the CCPA/CPRA. You can opt out at any time by disabling tracking permission for the App in your device’s Settings, or by contacting us
  • Non-discrimination for exercising your privacy rights

To exercise any of the above rights, please email us at feedback@officialirony.com. We may need to request additional information from you to verify your identity or understand the scope of your request.

14. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on this page. We may, and if required by law will, provide notification of changes in another way that we believe is reasonably likely to reach you, such as through the App.

Any modifications to this Privacy Policy will be effective upon our posting the new terms. In all cases, your continued use of the App after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy.

15. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at feedback@officialirony.com.