Back to Home

Privacy Policy

Last Updated: May 18, 2026

1.Introduction

Lumara is committed to protecting your financial data. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Lumara, you agree to the practices described here.

2.Information We Collect

  • Account info: email, display name, country, preferred currency, password hash.
  • Financial data via Plaid: account balances, transactions (read-only), institution name, account type.
  • Usage data: device, locale, app interactions, error logs (never financial details in logs).

3.How We Use Your Information

  • To provide the service: show accounts, transactions, budgets, and Momentum Score.
  • To deliver behavioral insights and AI-powered recommendations.
  • To power Pack features — shared budgets, accountability, and group reporting.
  • To operate, secure, and improve the service.

4.How We Share Your Information

We do not sell your data. We only share information with:

  • Plaid — to securely connect your bank accounts.
  • Stripe — to process subscription payments.
  • Service providers — hosting, analytics, and infrastructure partners under strict confidentiality.

5.Plaid Integration

Bank credentials are handled exclusively by Plaid. Lumara never sees, stores, or transmits your bank login credentials. Plaid uses bank-grade encryption and is trusted by thousands of financial apps.

Learn more at plaid.com/legal.

6.Data Security

  • TLS 1.3 encryption in transit.
  • AES-256 encryption at rest for sensitive data including Plaid access tokens.
  • No storage of bank login credentials — ever.
  • Row-level security and least-privilege access on all databases.

7.Your Rights

You have the right to:

  • Access and export your data.
  • Correct inaccurate information.
  • Delete your account and all associated data.
  • Disconnect any linked bank account at any time.

Manage these from your profile.

8.Data Retention

When you delete your account, all your data is permanently removed within 30 days. Backup snapshots are purged on a rolling 30-day cycle.

9.Children's Privacy

Lumara is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

10.Contact

Questions about this policy? Email support@wolfpackfinance.app.