Privacy Policy

Account information

Your name and email address, your login and security settings, optional profile details you choose to add (such as phone number, state, occupation and goals), your email preferences and your subscription status. If you sign in with Google, we receive your name and email address from Google. At signup we also record your confirmations that you are 18 or older and live in the United States, and each acceptance of our terms with its version.

Billing information

Payments are handled by Stripe, which collects your card details directly. We never receive or store your card number, security code or expiry date. From Stripe we receive only your customer and subscription identifiers, your subscription status and renewal date, and whether a payment method is on file.

Financial account data

When you connect a financial institution, the connection is made through our data provider, Quiltt, which works with MX and Finicity. You sign in to your bank inside their connection flow, so we never receive or store your bank login. Balances, transactions, accounts, holdings and liabilities stay with them. Lumen fetches this data only when your AI app asks for it or when you view your accounts on lumenmoney.io, and does not store it. We keep only the identifier that links your account to your Quiltt profile. See AI apps and data sharing and Financial data providers.

AI app approvals

When you approve an AI app, we record which app it is, the permissions you granted and when you approved or revoked it. We do not receive your conversations with that app; we see only the tool requests it sends to Lumen.

Your categories and labels

If you ask your AI app to set a category, subcategory or label on a transaction, we save that value along with a reference to the transaction so it applies every time the transaction is read. We save the words you chose, not the amount, date or merchant.

Your rules

If you ask your AI app to save a rule, such as one that labels purchases from a store you name, we save the rule as you set it: its name and settings, the conditions it matches on (such as text patterns, amount thresholds and which of your accounts), the categories, labels or other changes it applies, and when it was created and last changed. A pattern is kept exactly as you typed it, so it can include a store or a person's name, and an amount threshold is kept as you set it, so it can equal a real amount. A rule never contains a transaction or a balance. On the Personal plan a rule is applied each time your transactions are read, and nothing it produces is stored. You can ask your AI app to delete a rule, and Delete My Data removes all of your rules.

Usage and security records

Each time an AI app uses Lumen we record which tool it called, hashed identifiers for your account and your financial data connection, which app called it, whether it succeeded and how long it took. We also record technical details about the request: how long our financial data provider took and how many requests it needed, whether a recent result held in memory was reused, the size of the response, whether it was complete, a short code for any error or refusal, and the codes of any notices the answer carried, such as a note that a bank's data is out of date. Apart from the categories, labels and rules described above, we never record what a tool was asked or what it returned. From these records we build daily usage counts for your account and service wide totals, described under Data retention. We also keep records of security and account events, such as accepting our terms, approving or revoking an AI app, and deleting data, including your name, email address, IP address and browser details.

Device and abuse protection signals

When you visit lumenmoney.io, Google reCAPTCHA Enterprise collects information about your device and how you interact with the page so we can tell people from automated abuse. Our servers and network provider also receive your IP address and browser details with each request.

Support requests

If you contact support, we keep your messages along with your name, email address and the page you were on, so we can answer and follow up.

• Answer the requests your approved AI apps make on your behalf.
• Operate, secure and improve Lumen, including detecting abuse and diagnosing errors.
• Manage your subscription and billing.
• Send security alerts, such as when a new AI app is approved, service notices, and product updates if you opt in to them.
• Respond to support requests and inquiries.
• Meet our legal obligations and the requirements of our data providers, and enforce our terms.

We do not sell your information, share it for advertising, marketing or profiling, or use it to train AI models. Lumen runs no AI model of its own. We send marketing email only if you opt in. We do not analyze your categories, labels and rules for any purpose other than applying them and returning them to you.

Lumen does not run its own AI on your data and does not generate financial insights. You choose which AI app to use, such as Claude or ChatGPT, and you approve it through a standard OAuth approval on lumenmoney.io. We never send your data to an AI provider you did not approve.

When an approved app calls a Lumen tool, Lumen fetches the data that tool needs live from Quiltt and returns it to that app. The app's provider receives that data in its own right, at your direction, and does not handle it on Lumen's behalf. How it stores, uses or trains on your data is governed by its own privacy policy, so review it before you connect.

• Access is read only, with two exceptions shown on the approval screen: setting your own categories, subcategories and labels on transactions, or saving rules that set them and similar markings for you, and asking Quiltt to refresh your connected institutions. Lumen cannot move money, open or close accounts, or see any institution you have not connected.
• You can revoke any AI app at any time from Connected AI apps on your profile, or within 48 hours with the link in the email we send when you first approve it. A revoked app loses access on its next request. Data the app already received stays with its provider, so remove it there too if you wish.

Please note: Answers you receive are written by your AI app, not by Lumen, and are not reviewed by financial professionals. They are informational only and are not financial advice.

Quiltt connects Lumen to your financial institutions using the data networks of MX Technologies and Finicity, a Mastercard company. When you connect an account you agree to their terms in the connection flow, and they hold your bank login and retrieve your data under their own policies: Quiltt, MX and Finicity. Lumen and these providers act independently of each other. The data they return comes from your institutions and is not an official record of your accounts.

Aggregated data. MX keeps a perpetual, irrevocable license to aggregated, anonymized data derived from the data of Lumen users, which continues after you delete your data or close your account and after our agreement with them ends. That data must not identify you, your household or any company. Finicity and Quiltt may likewise create and use deidentified, aggregated data for their own product and research work. Lumen does not create or sell such data, and we do not attempt to reidentify any deidentified data we receive.

You can disconnect an institution at any time from your profile. When you use Delete My Data or Delete My Account, we disconnect every institution and delete your Quiltt profile, which tells Quiltt to delete your data. Your banks and the providers keep their own records under their own rules, so you may also need to remove Lumen's access at your bank.

We share personal information only in the ways below, and never with anyone who would use it for their own marketing.

• The AI apps you approve, which receive the data their requests ask for, at your direction.
• Quiltt, MX and Finicity, to connect your institutions and retrieve your data, as described above.
• Stripe, to process payments. Stripe acts on our behalf for billing and as its own controller for fraud prevention and its legal obligations.
• Service providers that run Lumen for us: Google, for cloud hosting, Firebase Authentication, data storage, logging and monitoring, support email and reCAPTCHA Enterprise; Cloudflare, for our domain, network delivery and protection against attacks; and SMTP2GO, to deliver account and security email. They may use your information only to provide their service to us, except that Google also processes reCAPTCHA signals under its own privacy policy.
• Legal and safety: when the law requires it, to respond to valid legal process, or to protect the rights, property or safety of our users, Lumen or others, including reporting suspected abuse to a provider, regulator or law enforcement.
• Business transfers, as described under If Lumen changes hands or closes.

We have not sold personal information, we do not sell it, and there are no third parties to which we have sold or may sell it.

Lumen uses no advertising or analytics cookies, pixels or tracking tools, and does not track you across other websites. The cookies on lumenmoney.io are set by our security and payment providers:

• _GRECAPTCHA, set by Google reCAPTCHA Enterprise on every page, to protect against abuse. It lasts about six months.
• __stripe_mid and __stripe_sid, set by Stripe on checkout pages for fraud prevention. They last about one year and 30 minutes respectively.

Our site also keeps information in your browser's local storage so it works as expected, such as your sign in session, your theme and layout preferences, your Quiltt connection session and a cached copy of your profile name and email. The Quiltt connection window may set its own cookies. Because these are needed for Lumen to work and to keep it secure, we do not offer a setting to turn them off; you can clear them in your browser at any time.

Because we do not track you across sites or sell or share your information for advertising, there is nothing for a Do Not Track or Global Privacy Control signal to opt you out of. We treat either signal as a request not to be tracked, which is already how Lumen works.

Lumen handles information that can be nonpublic personal information under the Gramm Leach Bliley Act, and we maintain the safeguards the FTC Safeguards Rule and state law require. These include encryption in transit and at rest, access limited to the people and systems that need it, OAuth 2.1 for every AI app connection, and storing the long lived tokens AI apps use only as hashes. No system is perfectly secure, so please use a strong, unique password and review the AI apps you have approved.

If a security incident affects your information and the law requires us to tell you, we will notify you and the authorities as required.

• Financial account data is never written to storage. Our servers keep recent results in memory for a short time so a follow up question is fast, and your browser keeps what it displays until you close the page.
• Your account and profile information is kept while your account is open. When you delete your data or your account, it is deleted as described under Your rights and choices.
• Your categories and labels, your rules and the daily usage counts for your account are kept until you delete them. Disconnecting a bank does not remove your categories, labels or rules; Delete My Data does.
• We also keep service wide usage totals indefinitely, such as daily tool call counts, error rates and response times across all accounts. They are broken down by tool and by AI app connection, and each AI app you approve has its own connection, so a total can be traced back to your account. They are not anonymous and we do not describe them that way. Deleting your data or your account does not remove them, though the usage counts tied to your account are deleted. They never include balances, transactions or what a tool returned.
• Operational logs are kept in Google Cloud Logging for about 30 days and then deleted automatically. Security and audit logs, which hold your account identifier, pseudonymous identifiers derived from your account and IP address, and service account activity but not your account contents, are kept for up to 400 days, including after account deletion.
• Security, consent and account event records, and a minimal deletion marker that lets us finish removing your data and stops a deleted account from being recreated, are kept for at least six years after you delete your data or your account, because the law and our data providers require these records. They contain your name, email address, IP address, browser details and identifiers for your Stripe and Quiltt records, but never balances or transactions.
• Support requests are kept after you delete your data or your account, so we keep a record of what we were asked and answered.
• Our database backups expire after 45 days, so deleted information can remain in a backup until then.
• Stripe retains billing records under its own policy.

A deletion request does not reach records we must keep for legal, tax, audit, security or claim defense reasons, or that a provider requires us to keep, and never reaches balances or transactions, because we never keep them.

You can do the following yourself, from Data & Privacy on your profile:

• Delete My Data disconnects your institutions, deletes your Quiltt profile and erases your categories and labels, your rules, the daily usage counts for your account and the personal details you added to your profile, such as your first and last name, phone, occupation and goals. Your email, login, subscription and approved AI apps remain. The records described under Data retention, including the service wide usage totals, are kept.
• Delete My Account does all of that, revokes every AI app, cancels your subscription and removes your account and login. The records described under Data retention are kept.
• Disconnect a single institution from your accounts, or revoke a single AI app from Connected AI apps.
• Update your name, profile details and email preferences from your profile, and unsubscribe from marketing email with the link in any message.

To ask for a copy of the personal information we hold about you, to correct it, or for help with any of the above, email support@lumenmoney.io from the address on your account. We may need to confirm your identity before acting, and we respond within 45 days. We offer these choices to every user wherever you live in the United States, and we will not treat you differently for using them.

This section is our notice under the Gramm Leach Bliley Act and Regulation P.

• What we collect: the information you give us at signup and on your profile, your subscription status from Stripe, and the account, balance, transaction, holding and liability data we retrieve live from your institutions through Quiltt, MX and Finicity at your request.
• What we share: we do not disclose nonpublic personal information about you to anyone, except as the law permits: to the AI apps you direct us to, to the service providers that run Lumen for us, with your consent, and when the law requires.
• Your choices: because we share only as the law permits without an opt out, there is no sharing for you to opt out of. If that changes, we will tell you first and give you the choice the law requires.
• How we protect it: access is limited to those who need it to run Lumen, under the safeguards described in Security.

Lumen is only for people who are 18 or older and live in the United States. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we close it and delete their information as described in this policy. If you believe a minor has signed up, contact us at support@lumenmoney.io.

If Lumen is acquired or merges with another company, your information may transfer to the new owner, who must honor this policy or let you delete your information first.

If we stop offering Lumen, we will email you at least 30 days beforehand, tell Quiltt to end its access, and delete or deidentify the personal information we hold within 30 days of the end, except the records described under Data retention. If we change data providers, data the previous provider holds stays under its terms, so you may need to ask it directly to delete it.

We may update this policy from time to time, and the date at the top shows when it last changed. If we make a significant change, we will tell you by email before it takes effect and with a notice on lumenmoney.io. We will not use information we have already collected in a materially different way without asking for your consent.

For questions, requests or concerns about your privacy, contact Shifty LLC, doing business as Lumen Money, at support@lumenmoney.io.