Privacy policy

Zero-knowledge by design

Lumiward is built so that we cannot read your data. Everything in your vault — passwords, passkeys, notes, documents — is encrypted on your own devices with keys derived from credentials only you hold, before it is ever sent to our servers. What our servers store is ciphertext they cannot decrypt.

What we store

To run the service, Lumiward’s servers keep the minimum they need: your account identity (the email address you signed up with and the cryptographic verifiers used to authenticate you — not your password, which never leaves your devices), your encrypted vault data, household membership and subscription state, and the short-lived operational records needed to sync your devices. When paid subscriptions go on sale, payments will be processed by a payment provider; Lumiward will not store your card details.

No advertising or third-party tracking

The Lumiward applications contain no advertising identifiers or third-party tracking. We do not use vault contents to build advertising or usage profiles. The service may produce content-free security and operational records needed to keep accounts and synchronization working.

This website

The website at lumiward.com serves static pages only. It sets no cookies, uses no analytics or tracking of any kind, loads nothing from third-party servers, and runs no scripts in your browser.

Sharing and disclosure

We do not sell or rent your information to anyone. We use infrastructure and service providers to operate Lumiward and, when paid subscriptions go on sale, a payment provider to process purchases. They receive only the information needed to provide those services. We may also disclose information when the law requires it. For your vault contents, what exists to share or disclose is ciphertext we cannot decrypt.

Your rights and choices

You can export your vault from the apps at any time. You may stop using Lumiward and request account closure by email. Some account, billing, consent, security, and operational records may be retained after closure when needed for service recovery, fraud prevention, dispute handling, or legal obligations. For access, correction, account-closure, or deletion requests, or any privacy question, email support@lumiward.com.

Changes to this policy

If we change this policy, we will post the updated version on this page with a new effective date. We will not weaken the zero-knowledge posture described above without asking for your explicit consent first.