Lumina Home

Privacy Policy

Last updated: August 31, 2026

1. Introduction

Lumina Home ("we," "us," or "our") is a smart home control platform that connects to your Home Assistant instance to give you a unified dashboard for managing your devices. This Privacy Policy explains how we collect, use, and protect your information when you use our web application and related services.

By using Lumina Home, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and display name. If you sign in via Google OAuth, we receive your Google profile information (name, email, profile photo) as authorized by you.

2.2 Home Assistant Connection

Lumina Home stores your Home Assistant URL and a long-lived access token to communicate with your instance. This token is encrypted at rest using Supabase Vault (AES-256-GCM) and is only decrypted server-side when needed to relay commands. We never transmit your Home Assistant token to third parties.

2.3 Device & Usage Data

We synchronize device states (on/off, temperature, sensor readings, etc.) from your Home Assistant instance in real time. This data is stored temporarily in your browser and, when relevant, in your Supabase database row. We do not sell or share this data with advertisers or analytics providers.

2.4 Push Notification Tokens

If you enable push notifications, your browser's push subscription endpoint is stored to deliver alerts (e.g., motion detected, security events). You may disable notifications at any time from Settings.

3. How We Use Your Information

  • To authenticate you and provide access to your dashboard.
  • To relay device commands between your browser and Home Assistant.
  • To deliver push notifications you have opted into.
  • To maintain and improve the reliability and security of the service.
  • To communicate with you about account or security matters.

4. Data Storage & Security

All data is stored in Supabase (PostgreSQL) with Row-Level Security (RLS) policies ensuring that each user can only access their own rows. Sensitive credentials (Home Assistant tokens, service role keys) are encrypted in the database using Supabase Vault and are never exposed to client-side code.

Data is transmitted over TLS/HTTPS. We follow industry best practices for key management and rotate credentials where applicable.

5. Data Retention

We retain your account data for as long as your account is active. You may delete your account at any time from Settings, which will permanently remove your email, Home Assistant credentials, and device associations from our database. Motion event history and push notification logs are automatically purged after 30 days.

6. Third-Party Services

We use the following third-party services to operate Lumina Home:

  • Supabase — Authentication, database, and encrypted vault.
  • Vercel — Application hosting and edge deployment.
  • Resend — Transactional email delivery (OTP codes).
  • Google OAuth — Optional social sign-in.

These services process data solely on our behalf and under strict data processing agreements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Data portability — export your data in a machine-readable format.

To exercise these rights, contact us at the email address below.

8. Children's Privacy

Lumina Home is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Last updated" date above reflects the most recent revision.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@luminahome.app