Privacy Policy

Effective September 30, 2026

What we collect

• Your account: name, email address, password (stored only in scrambled, one-way form, so no one can read it) and time zone. If you turn on Face ID or fingerprint sign-in, we store a public key from your device. Your fingerprint and face never leave your device.
• What you share: messages, photos, captions, comments, reactions, events and answers (Going, Maybe, Can't go), notes, lists and sign-ups.
• Your spheres: which spheres you're in, your role, and invites, including the email address or phone number of the person invited.
• Notifications: if you turn them on, an address from your phone's notification service so we can reach that device.
• Security basics: sign-in records and IP addresses, used to keep accounts safe and stop abuse, and kept only briefly.

We use one cookie, to keep you signed in. There are no advertising or analytics trackers.

Who can see what

• Content in a sphere is visible only to the people in that sphere. Private messages are visible only to the people in that conversation.
• Nothing on Luxsphera is public or searchable on the internet.
• Before a photo is uploaded, your phone shrinks it and removes hidden details such as the location where it was taken.
• Luxsphera's administrator can technically access stored information, as with most apps. We look at it only to keep Luxsphera running, to review reports, or when the law requires it. Messages are not end-to-end encrypted yet; we'll say so here if that changes.

Companies that help run Luxsphera

We share information only with these services, only for these purposes:

• Cloudflare: hosting, storage for messages and photos, security, the sign-up bot check (Turnstile) and automatic checks of photos against known child sexual abuse images.
• Resend: sending sign-in codes and invite emails.
• Apple, Google or Mozilla: delivering notifications to your device. Notification contents are encrypted so they can't read them.

When the law requires it

If we find material that sexually exploits children, we report it to the National Center for Missing & Exploited Children (NCMEC), as US law requires, and keep the related information as the law directs. We respond to valid legal requests, and we may share information when needed to protect someone from serious harm.

How long we keep things

We keep your content until you or a sphere manager deletes it, or until your account is closed. Deleted information may stay in backups for up to 30 days before it's gone for good.

Your choices

• Delete your own messages, photos, comments, events and cards at any time.
• Choose which spheres notify you, set quiet hours, or turn notifications off in your profile.
• Reset your private calendar link if you think someone else has it.
• To get a copy of your information or close your account, email hello@luxsphera.com from the address on your account.

Children

You need to be at least 13 to have your own account. Accounts for younger children will be available only through a parent or guardian, with the guardian's consent and controls, when that feature arrives.

Changes

If this policy changes in a way that matters, we'll tell you in the app before it takes effect.

Questions

Email hello@luxsphera.com. Also see our Terms of Use.