This page explains what information LumoSpot collects, why, and the choices you have about it.
When you search "near me" or allow location access, your coordinates are sent to our server to find sunny spots nearby. This is used only to answer that one search - it is not stored or linked to you afterwards.
Signing in is optional. If you choose to sign in with Google, we store your name, email address, and profile picture from your Google account, and any venues you choose to save as favorites - to identify your account and keep your saved venues available across visits. Sign-in itself is handled entirely by Google; we never see or store your Google password. A session cookie keeps you signed in between visits until you sign out. You can delete your account at any time from the account menu, which permanently removes your account and saved favorites.
You can delete your LumoSpot account and everything stored with it (your name, email address, profile picture, saved favorites and any photos you uploaded) at any time. In the app, open Profile and tap "Delete my account". On the website, sign in, open the account menu, choose "View my profile" and then "Delete my account" at the bottom of the page. Deletion is immediate and permanent: nothing linked to your account is kept. Anonymous usage statistics, if you allowed them, were never linked to your account and aren't affected. If you can no longer sign in, ask us through the contact form and we'll delete your account within 30 days.
If you upload a photo of a venue, we store the photo, which venue it is of, when you uploaded it, and that it came from your account, so we can review it and remove it on request. Location data and other information stored inside the photo file are removed when it is uploaded. If you choose to, your first name is shown with the photo; otherwise no one but us can see who took it. Deleting your account deletes all of your photos.
With your consent, we use an analytics service to understand how LumoSpot is used - which searches and filters are common, which features get used - so we can improve the app. This is tied to an anonymous identifier generated by your browser, not to your name or any account (LumoSpot doesn't have user accounts). Data is processed and stored within the EU. You can withdraw this consent at any time via "Cookies settings" at the bottom of the homepage - see the Cookies section below for what this actually controls.
If you send us a message, we use your name, email address, and message only to respond to you. If you report an issue with a venue (e.g. "wrong sun exposure" or "permanently closed"), we record which venue and what kind of issue was reported, to help us review and fix it - not any information that identifies you personally.
If you sign in, a session cookie keeps you signed in between visits - this is essential to the sign-in feature itself and isn't part of the analytics consent choice below. Beyond that, the only cookie/local- storage use is your analytics consent choice itself (so we remember it between visits), and, if you accept, the analytics service's own tracking. Declining analytics consent doesn't affect signing in - no analytics data is collected for your visit either way.
If you have questions about this policy or want to know what data we hold about you, reach out via the Contact page.