Privacy policy

The data controller is Luminay Tecnologia LTDA, CNPJ 48.421.970/0001-97, headquartered in Piraquara, Paraná, Brazil.

For any privacy matter, write to luminaytecnologia@gmail.com. As a small-scale processing agent, Luminay relies on the exemption from appointing a data protection officer set out in article 11 of ANPD Resolution CD/ANPD No. 2/2022, and this e-mail address is the channel for data subjects.

The luminay.app website has no sign-up, forms, audience analytics or advertising, and Luminay does not use cookies. Fonts and images are served by the site itself, with no calls to third-party services.

The site is hosted on Cloudflare. To deliver the pages and protect the site against attacks, Cloudflare processes technical data from each visit, such as IP address, browser and time, according to Cloudflare's privacy policy. Cloudflare may set technical security cookies. Luminay does not use this data to identify visitors. The legal basis is the legitimate interest in keeping the site secure and working (LGPD, art. 7, IX).

When you write to Luminay, we receive your e-mail address, your name (if it appears in the message) and whatever you write. We use this data only to reply and, where applicable, to discuss the project or service you asked about.

Messages are stored in the company's e-mail account, on Gmail (Google). We keep messages for as long as they are needed for the conversation and for legal, tax or contractual obligations, and we delete them when you ask, unless the law requires us to keep them.

The legal bases are: for replying to general enquiries, legitimate interest (LGPD, art. 7, IX); for conversations about projects, proposals and contracts, preliminary procedures and performance of a contract (art. 7, V); and for keeping tax and contractual records, compliance with a legal obligation (art. 7, II).

Each app published by Luminay will have its own section in this policy stating what data it collects, why, with whom it is shared and how long it is kept. This information will also appear in the "Data safety" section of the app's Google Play page.

As of this version, Luminay has not yet published apps under its own brand.

Luminay does not sell or rent personal data. We share data only with the providers needed to operate (Cloudflare, for hosting, and Google, for e-mail) and with authorities, when required by law or court order.

These providers may store data outside Brazil, according to their own privacy policies: Cloudflare and Google.

Under Brazil's General Data Protection Law (Law No. 13,709/2018, art. 18), you may ask at any time for:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• data portability;
• information about whom the data was shared with;
• withdrawal of consent, where consent is the basis for processing;
• objection to processing carried out on another legal basis, in case of non-compliance with the law (art. 18, § 2).

We answer requests for confirmation and access within 15 days, as provided in article 19 of the LGPD.

To exercise any right, write to luminaytecnologia@gmail.com. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

The site works only over an encrypted connection (HTTPS). Access to the company's e-mail and hosting accounts is restricted to the people responsible for Luminay.

This site is not directed at children and does not collect data from them. If a Luminay app is intended for children, its section in this policy will explain how parental consent is obtained.

When this policy changes, the new version will be published on this page with the updated effective date at the top.