Effective date: July 26, 2026
Last updated: July 26, 2026
Business: Lummly
Contact: support@lummly.com
1. Introduction
Lummly (“we,” “our,” or “us”) is committed to protecting your privacy and the personal data you entrust to us. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Lummly mobile application, website, and related services (“Services”).
By accessing or using Lummly, you acknowledge that you have read and understood the practices described in this policy. If you do not agree, please do not use our Services.
2. Information We Collect
2.1 Personal and contact information
- Name, email address, phone number, date of birth, and profile photo.
- Account credentials, including encrypted passwords.
2.2 Health and pregnancy data
- Pregnancy logs, trimester, due date, symptoms, and fetal development notes.
- Blood pressure, weight, blood sugar, fetal kick counts, heart rate, and similar health metrics.
- Fertility and menstrual cycle data.
- Mood logs, sleep patterns, and wellness journal entries.
2.3 Doctor and appointment data
- Doctor profiles you view, bookmark, or interact with.
- Clinic appointment history and scheduled visit details.
2.4 Transaction and payment data
- Payment details processed securely via Razorpay. Lummly does not store full card numbers.
- Subscription status, purchase history, and billing records.
2.5 Device and usage information
- Device type, operating system, IP address, usage patterns, and crash logs.
- Cookies and similar technologies when using our website.
3. How We Use Your Information
- Provide pregnancy tracking, vital logging, appointment booking, and other core functionality.
- Personalize content, insights, and product recommendations.
- Process payments and manage subscriptions through Razorpay.
- Send health reminders, appointment notifications, and account updates.
- Improve performance, security, and user experience.
- Meet legal obligations and protect our users and rights.
We do not sell personal data or health information to third parties for advertising.
4. Data Sharing and Disclosure
- Service providers: Trusted vendors such as payment processors, cloud hosting providers, and analytics services that are contractually bound to protect your data.
- Healthcare providers: Only when you explicitly choose to share reports or health logs with a doctor through the app.
- Legal compliance: When required by law, court order, or to protect safety, rights, or property.
- Business transfers: In connection with a merger, acquisition, or asset sale, subject to confidentiality obligations.
5. Data Security
- Encryption: Data encrypted in transit using TLS 1.2+ and at rest using AES-256.
- Access controls: Role-based internal access to user data.
- Secure infrastructure: SOC 2-compliant cloud hosting and regular security reviews.
- Anonymization: Aggregated and anonymized data for analytics and product improvement.
No internet transmission or electronic storage method is completely secure. Users should choose strong passwords and protect their credentials.
6. Data Retention
We retain personal and health data only as long as needed for the purposes described here or as required by law. Following account deletion, we aim to erase personal data within 30 days, except where continued retention is required for legal, regulatory, security, or fraud-prevention purposes.
7. Digital Personal Data Protection Act, 2023
7.1 Lawful basis
We process personal data based on explicit, informed, and freely given consent provided during registration and when enabling data-dependent features.
7.2 Consent management
You may withdraw consent through in-app privacy settings or by emailing support@lummly.com. Withdrawal may limit features requiring that processing. We aim to stop processing for the withdrawn purpose within seven business days.
7.3 Your rights
- Access the personal data we hold about you.
- Correct inaccurate, misleading, or incomplete information.
- Request deletion, subject to applicable legal exceptions.
- Use our grievance redressal process and approach the Data Protection Board of India where applicable.
- Nominate another person to exercise rights in the event of death or incapacity.
7.4 Data Protection Officer
Email: support@lummly.com. We acknowledge DPDP-related requests within 48 hours and aim to resolve them within 30 days.
7.5 Cross-border transfers
Where data is transferred outside India, we apply appropriate safeguards and assess the receiving organization’s data-protection standards.
8. Children’s Privacy
Lummly is intended for users aged 18 and older. We do not knowingly collect personal data from minors. If such data is identified, we will delete it promptly.
9. Third-Party Links and Services
Our Services may link to doctor clinics, retailers, and other third parties. Their own privacy policies govern their handling of your information.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email or in-app notice at least 15 days before they take effect.
11. Contact Us
Lummly
Email: support@lummly.com