Privacy Policy

This policy explains what personal information we collect, why, where it is kept, who else handles it, and your rights over it. It covers the LumiSpend app (cash-flow software for New Zealand freelancers and small businesses), the LumiSpend Student app (a money app for students in New Zealand) and the lumispend.com website.

The apps and website are provided by Enovante LLC, 8 The Green STE 17050, Dover, DE 19901, United States ("we", "us"). We follow the New Zealand Privacy Act 2020, which applies to us because we provide these services in New Zealand. Questions or requests go to our Privacy Officer at privacy@enovante.com.

Our Terms of Use cover using the apps and website; this policy covers your personal information. Accepting the Terms isn't consent to anything optional, such as analytics or marketing messages: we ask for that separately.

The Short Version

We collect what you type into the apps, your sign-in details and your subscription status, because that is what the apps need to work.
Your app records are stored with Supabase in Sydney, Australia, protected so that only your account can read them.
We don't sell your information and don't use it for advertising.
You can export everything (Profile → Settings → Export All Data) and delete your account in the app at any time (Profile → Settings → Delete Account).
LumiSpend gives estimates, not tax or financial advice. Nothing you enter is sent to Inland Revenue or your bank.

1. What We Collect in the Apps

Information you give us

Email address and password (the password is stored only as a secure hash): to create your account, sign you in and send account emails such as password resets.
Your name: to personalise the app and, in LumiSpend, to sign invoice reminders you choose to send.
The records you enter (below): they are the app, so we store them to show them on any device you sign in on.
Messages you send us: to answer you.

LumiSpend records: business name, address and type (self-employed or company); region, currency and GST details (registration, rate, filing period); tax buffer; opening cash balance; transactions (amounts, dates, categories, descriptions, notes, GST); invoices (client name, invoice number, amounts, dates, status, notes); category budgets; and receipt photos you attach. Client names on invoices are personal information about other people, so please enter only what you need.

LumiSpend Student records: city, country of origin, university, course and course end date, visa expiry date and weekly work-hours limit, expenses and income, budgets, bills, savings goals and work hours. In Couple mode you choose which expenses to share with your partner's household, and your partner can see those.

Optional details (for example your address, university or visa dates) aren't required, but some features won't work without them.

Information collected automatically

Subscription details from Apple or Google (plan, status, renewal date and a store transaction ID): to give you access to what you've paid for. We never see your card or payment details.
Basic technical information (app version, device platform, and server logs with the time of a request and an IP address): to keep the service secure and fix problems. Logs are kept briefly by our hosting providers.
Push notification token, with the app version, device platform and language setting, only if you allow notifications: to send account messages (for example "your free trial ends in 2 days") and news you've opted into.
Your message preferences (Account Messages, News & Offers) and the in-app messages we send you, stored with your account: so we only send what you've chosen and you can read past messages.

Neither app has advertising, tracking across other apps or websites, or third-party analytics.

Kept only on your device: device notification and reminder settings, scheduled reminders (GST returns, invoices, bills, visa dates) and, in LumiSpend Student, an offline copy of your records. Signing out or deleting your account removes them.

2. What We Collect on lumispend.com

Contact form: your name, email, business or university (optional), topic and message. We also store the page you sent it from and any campaign tags in the link, a one-way hash of your IP address (salted with a value that changes daily, so the raw address is not stored by the website) and your browser's user-agent. We use these to answer you and to detect spam and abuse.
Spam protection: the contact form uses Cloudflare Turnstile, which checks browser and request signals to tell people from automated abuse.
Delivery and security: the website runs through Cloudflare, which processes your IP address and request details to deliver pages and block attacks. Our server keeps access logs for a short period.
Cookies: the website sets no advertising or analytics cookies. Cloudflare may set strictly necessary security cookies. If we add analytics later, we will ask for your consent first and update this policy.

3. How We Use It

We use your information only to:

run the apps and sync your records between your devices;
calculate the figures the apps show you (Safe To Spend, GST and tax estimates, budgets, reports), on your behalf and only for you;
manage your free trial and subscription and tell you about them, for example when a trial is ending;
send messages you've opted into (news and offers are off until you turn them on);
answer enquiries and support requests;
keep the services secure, prevent misuse and fix bugs; and
meet our legal obligations, such as tax records, and handle complaints or legal claims.

Where a law such as the GDPR asks for a legal basis, we rely on our contract with you to run the apps, on our legitimate interest in keeping the services secure and answering enquiries, on legal obligations, and on your consent for anything optional. You can withdraw consent at any time; that doesn't affect what we did before.

Every news or offers email has an unsubscribe link. Unsubscribing doesn't stop messages we need to send about your account, such as security notices. We keep a short record that you've opted out so we don't message you again.

We don't use your records to train AI models, build profiles for advertisers or make automated decisions about you.

We don't sell or rent personal information. We share it only with these service providers, who process it for us under their own security and privacy terms and only as far as they need:

Supabase (Sydney, Australia): app database, sign-in, file storage for receipt photos, and server functions.
Apple and Google (their own systems, worldwide): app distribution, in-app purchases and subscription billing. Their privacy policies apply to your store account.
Google Firebase Cloud Messaging (United States and other countries): delivers push notifications, if enabled.
Resend (Japan, Tokyo region): sends emails from the website and, once set up, the apps' account emails.
Cloudflare (worldwide network): website delivery and security, Turnstile, and email forwarding for our @lumispend.com addresses.
Our own server, a virtual server in Sydney, Australia: the website, its enquiry records, and the support and admin tools our staff use.

Some providers, such as Apple and Google, also use information for their own purposes, for example fraud prevention or running their stores; their own privacy policies cover that.

We may also disclose information where the law requires it (for example a court order), to protect someone's safety or rights, or to our professional advisers or insurers when we need advice or to resolve a claim. If we sell or restructure our business, information may pass to the buyer under confidentiality safeguards; this policy continues to apply, and the change doesn't allow new uses you haven't been told about.

Sending information overseas. Your app records are stored in Australia, and some providers above are in other countries. Under information privacy principle 12 we only use providers that are subject to privacy laws comparable to New Zealand's, or that are bound by contract to protect your information in a comparable way. For information from the EU or UK, we rely on our providers' Standard Contractual Clauses (or the UK equivalent) or, for US providers certified under it, the EU–US Data Privacy Framework. Ask us if you'd like details of these safeguards.

5. How Long We Keep It

While you have an account, we keep your records so the apps can show them.
If your subscription or trial ends, your records stay. You can still view and export them, and pick up where you left off if you subscribe later.
When you delete your account, your profile, records and receipt photos are deleted straight away. Copies may remain in encrypted backups for up to 7 days before they're overwritten. In LumiSpend Student Couple mode, your own records are deleted, including expenses you shared; your partner keeps the household, its budgets, bills and goals, and their own records.
Subscription records may be kept for up to 7 years where the law requires (for example tax records) or to resolve a billing dispute, and only the minimum needed.
Website enquiries are kept for 24 months after our last contact with you, then deleted. Ask us and we'll delete yours sooner. Messages our checks identify as spam are discarded, not stored.
Server logs are kept by our hosting providers for a short period, usually days, then deleted, unless we need a specific log as evidence of a security incident.

Information waiting to be overwritten in a backup isn't used for anything else. If we ever have to restore a backup, we delete again anything you'd already asked us to delete. When we say information is anonymised, we mean it can no longer reasonably identify you; swapping a name for an ID number isn't enough.

Deleting your account doesn't cancel a subscription, because Apple or Google bills it. Cancel it in your store account first: on an iPhone or iPad, Settings → your name → Subscriptions; on Android, Google Play Store → your profile picture → Payments & Subscriptions → Subscriptions.

6. How We Protect It

Data is encrypted in transit (HTTPS, with HSTS on lumispend.com) and at rest, including backups.
Database rules make sure each account can read and change only its own records. Receipt photos are stored privately and shown only through short-lived links.
The apps use a public key that can't bypass those rules; privileged keys stay on our servers.
Staff access is limited to support and running the service. It needs two-factor sign-in, and every action is recorded in an audit log.
The website's admin uses named staff accounts with role-based permissions, locks an account after repeated failed sign-ins, and signs people out after a short time. Changes there are recorded in an audit log.
A web application firewall and bot protection run at the network edge, and we keep software and dependencies up to date.

No system is perfectly secure. We investigate suspected incidents, and if a privacy breach is likely to cause you serious harm, we'll tell you and the Privacy Commissioner, as the Privacy Act requires (and other regulators where their law requires it). If you think there's been a security or privacy problem, email privacy@enovante.com, and don't include passwords in the report.

7. Your Rights

Under the Privacy Act you can:

access your information: Profile → Settings → Export All Data gives you every record as a spreadsheet, or email us for anything else we hold;
correct it: edit it in the app, or ask us;
delete it: Profile → Settings → Delete Account, or ask us (including for website enquiries); and
turn off messages: the notification switches in Settings, or your device's notification settings.

We'll respond within 20 working days. We may ask for enough information to confirm it's you, but no more than we need. Someone you authorise can make a request for you. If the law lets us extend the time, refuse a request or charge a fee, we'll explain why and what you can do next. We won't treat you differently for using your privacy rights.

If you're unhappy with how we've handled your information, please tell us first; that doesn't stop you complaining to a regulator at any time. In New Zealand that's the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909.

8. If You Live Outside New Zealand

The apps are designed for New Zealand, but the law where you live may give you extra rights.

European Union and United Kingdom: you may also have rights to restrict or object to how we use your information (including for direct marketing) and to receive your records in a portable format, which Export All Data provides. You can complain to your local data protection authority or the UK Information Commissioner. We haven't appointed an EU or UK representative, because our handling of information about people there is occasional and small in scale; our Privacy Officer handles every request.
United States: state privacy laws may give you rights to access, correct, delete and port your information, and to appeal our decision. We don't sell personal information or share it for targeted advertising, and the apps and website contain no advertising tags, so there's nothing to opt out of. If that ever changes, we'll update this policy first and honour Global Privacy Control signals.

9. Children and Sensitive Information

LumiSpend is for adults running a business, and LumiSpend Student is for students aged 16 and over; the website isn't aimed at children under 16 either. Neither app is designed for children, and we don't knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we'll delete it.

The apps aren't designed for sensitive information such as health details, passwords or bank logins, so please don't put them in notes or descriptions.

10. Changes to This Policy

We update this policy when what we do or the law changes. For an important change, we'll tell you in the app or by email before it takes effect, unless an urgent legal or security change needs shorter notice. Where a new use needs your consent, we'll ask for it; carrying on using the apps doesn't count as consent. Changes never reduce rights the law gives you. The date at the top shows when this policy was last updated; earlier versions are available on request.

Contact

Enovante LLC, 8 The Green STE 17050, Dover, DE 19901, United States. Privacy Officer: privacy@enovante.com. Post sent to this address is forwarded to the Privacy Officer, but email is faster.