Skip to main content

Privacy Policy

How Lumatch handles account details, reference photos, AI providers, and your data rights

Scope and contact

This policy explains data processing by Lumatch at lumatch.app. Contact support@lumatch.app for privacy questions or requests. It applies alongside our Terms of Service.

Data we process and why

  • Account data: your name, email, profile image where provided, login sessions, and a password hash for password accounts. Google sign-in supplies the basic profile and verified email you authorize; we do not receive your Google password. We use this data to create and secure your account.
  • Photos and requests: reference images, selected scene or editing tool, and generated results are processed to perform the requested generation or review. Reference photos are sent to the AI provider described below. We do not build a separate facial-recognition identity database.
  • Saved photos: successful generations and edits are automatically saved in your private account library, along with the scene/tool, model, creation time, job status, and any credits actually charged. Original reference selfies are not saved to this library.
  • Operational data: request and error information, browser/network information available to our infrastructure, and an IP-based daily counter for the free review tool. These support reliability, abuse prevention, and usage limits; the review counter expires after one day.
  • Transactions and support: if you purchase a package or contact us, we process order information, payment status, and your correspondence to deliver service, handle refunds, investigate reports, and meet legal obligations. Full payment-card details are handled by the checkout provider, not stored by this application.

Where applicable, the bases for processing are providing the service you request, legitimate interests in security and support, legal obligations, and consent for processing that requires it. We do not sell your personal data or use your uploaded photos in our advertising. Lumatch does not use your reference photos to train its own AI model.

Service providers and photos

Cloudflare provides hosting, account/database storage, file storage, caching, and service email. Google provides optional sign-in. Image generation and editing use OpenAI GPT Image 2.5 Flare (openai/gpt-image-2.5-flare) through OpenRouter. Your portrait, optional scene reference, and task instructions/preferences are sent over HTTPS to OpenRouter and OpenAI. Generated image bytes are saved to private Cloudflare R2 storage for your library. The separate photo-review feature continues to use Doubao Seed 2.1 Turbo through ByteDance's Volcengine Ark. Only inputs needed for your selected feature are sent to its provider.

Waffo.com Limited is our payment reseller and Merchant of Record. To open an authenticated checkout, we send your account identifier, email, selected product, currency, and order reference to Waffo. Waffo collects the payment and billing details entered on its checkout, processes receipts and refunds, and sends payment status back so we can add or reverse credits. We do not send your photos to the payment provider. See Waffo privacy information.

These transfers are necessary to run the selected feature and are not a public gallery. Providers operate under their own applicable terms, safety requirements, and retention practices; temporary download-link expiry is not a promise that all provider logs or copies are erased at that moment. Provider processing may occur outside your country, including China for our current Ark endpoint. We also disclose information when legally required or needed to investigate abuse. Contact support with questions about these transfers.

Storage and retention

To finish generation even after you leave the page, the generator temporarily stores your portrait, optional scene reference, preferences and request in a private Cloudflare background task. These temporary inputs are removed when the task completes or fails; they are not added to your photo library or used to train our models. The browser also holds a local copy until you remove it, leave, or reload. Saved generated photos remain available in My photos until you delete them or close your account. Access is restricted to the owning account; downloading again does not consume credits. Generated files are saved without public provider links. For older jobs that used temporary provider links, a failed save may retain the link for a storage retry; successful saving removes it. Older results whose temporary links expired before the library launched cannot be recovered.

Account data is retained while the account is active. Account deletion removes saved generated photos, their history, and login/account records, and ends access. For older file uploads or support-related records, request deletion through the contact below; we process eligible requests within 30 calendar days after necessary identity checks. Records that must be retained for tax, fraud prevention, disputes, or another legal requirement may be kept for the applicable period, with access restricted and the reason explained. We cannot delete copies you or others have saved on external devices or services.

Your data rights

You can use these paths without a paid subscription:

  • View purchases: Credits & orders shows your balance and recent orders. Deleting a photo does not delete the associated credit debit or restore spent credits.
  • View and correct: sign in and open Settings → Profile to view and edit supported profile fields. Email support for other corrections or a copy of your personal data, including an available machine-readable export.
  • View, download, and delete photos: use My photos, or ask support to locate and delete data associated with your account.
  • Close your account: open Settings → Security and select Delete Account, then confirm. Save anything you need first. If you cannot sign in or need help removing remaining data, email support from your registered address.
  • Other applicable rights: request restriction of processing, object to applicable processing, or withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing. You may complain to your local data-protection authority.

Send requests to support@lumatch.app, identifying the account and requested action. We may ask for proportionate information to verify ownership; never send your password. We respond and complete eligible requests within 30 calendar days after receiving the necessary verification. If local law requires a shorter period, that period applies. If a lawful extension or refusal is necessary, we explain the reason, next steps, and timing within the initial period.

Cookies and security

We use login/session cookies and a language-preference cookie, plus browser preferences such as theme. See the Cookie Policy. HTTPS, password hashing, access controls, and server-side secret storage protect the service, but no system eliminates all risk.

Children and updates

The service is for adults aged 18 or older. Do not upload photos of minors. Report suspected child data or unsafe content to support so we can investigate and take appropriate action.

We update the date on this page when the policy changes and communicate material changes on the site or by account email where appropriate.