Privacy Policy
Scope and contact
Nova Tech AI Limited operates LumaSignal: AI Face Wellness (Android com.lumasignal.aiface). This policy covers the app and its supporting services, not just this website. For privacy requests contact developer@novatechai.xyz. The app is intended for adults aged 18 and older.
On your device
Profile choices, accepted pulse estimates, signal-quality details, sleep observations, meal reports and access state are stored locally. Face and finger camera frames and sleep audio/motion are processed locally; no face photo, face video or sleep recording is sent to our AI service. Camera and microphone permissions are requested for the relevant checks and can be revoked in Android settings. No Health Connect data is currently read.
Optional meal-photo analysis
After your explicit confirmation, a compressed meal photo and analysis context are sent over HTTPS through our backend to Google Gemini for food and calorie estimates. Our image-analysis backend processes the image in memory, without writing the photo to image storage. The app removes its temporary photo after the request, including failure. Structured results remain locally until deleted. Photos can contain sensitive information: avoid faces, documents and other identifying details; only upload content you are entitled to share.
Google Gemini processing
Google receives the submitted image, request context and generated response. Our deletion of a temporary file does not delete records held by Google. Provider retention, security processing and any service-improvement use depend on the applicable API terms and service configuration; we do not promise zero provider retention. Read our AI Data Processing explanation and Google’s own privacy policy and Gemini API terms linked below. Those official documents, not this summary, govern Google’s processing.
Firebase and technical information
Release builds use Firebase Analytics, Crashlytics and Performance Monitoring for usage analysis, troubleshooting and reliability. These SDKs may collect screen interactions, installation identifiers, device/OS information, approximate location derived from IP addresses, crash logs and network/performance diagnostics. We do not intentionally include raw wellness measurements, photos or audio in custom analytics events. Debug and independent experience builds differ from production collection. See Firebase privacy information below.
Purchases and operations
Google Play handles payment and subscriptions. The app receives purchase status and purchase identifiers/tokens, not full payment-card information. Our services and hosting providers receive IP addresses and request metadata needed for authentication, rate limiting and security. Operational logs can include request identifiers, feature names and errors. We do not sell personal information or use health results for advertising.
Providers and international processing
Google, Firebase, Google Play and hosting providers process information needed for their respective services. Processing may occur outside your country. We may disclose information when required by law or necessary to protect users and the service. We do not claim that all information remains in Hong Kong or on our server.
Retention and choices
Settings → Delete local data clears local profile/history and consent. Uninstalling removes app-local data subject to device backup settings. Neither action cancels a Google Play subscription or deletes provider records. Provider diagnostics, transaction records and security data follow their own retention policies. You may decline meal upload, revoke device permissions, or contact developer@novatechai.xyz for access, correction or deletion of information we control. We may need to identify a request and retain legally required or security records. Do not email medical records or photos.
Security and changes
HTTPS and reasonable safeguards reduce risks but cannot guarantee absolute security. We do not claim clinical certification, universal encryption at rest or zero data retention. We will revise this page and provide additional notice where required when processing changes. Privacy acknowledgements do not replace consent needed for optional photo uploads.
Optional result reports and feedback
Only after you confirm, result reports send the selected reason, optional comment, language and any meal-report text you explicitly choose to attach to the developer. No photo, video, raw signal, profile, purchase token or device identifier is attached. Avoid personal or medical information. Reports are stored in a restricted developer inbox for review and service safety for up to 30 days with hourly expiry cleanup; they are not sent to Gemini. For earlier deletion email developer@novatechai.xyz with the receipt identifier, which is not linked to an app account. Hosting and security request metadata is handled separately as described above.
Contact：developer@novatechai.xyz