Lumien Lighting
Privacy Policy

2.1 Account Information

The App allows registration as either a Contractor or a Homeowner. Both roles provide the same types of account information, but project access rights differ (see Section 6).

2.2 Device and Project Data

You agree not to enter sensitive personal information in custom fixture names, project descriptions, or custom dates.

2.3 Location Information

3. Device Permissions

To provide certain features, the App may request the following system permissions when you use the related feature (only after you agree to this Privacy Policy, and only at the time of use). You can turn permissions off at any time in your device settings. Turning a permission off affects only the related feature.

Important notes: This version of the App does not request Bluetooth permissions (device setup uses Wi-Fi, not Bluetooth) and does not request push-notification permission (this version does not provide in-App push notifications; system notices are delivered by email).

4. Third-Party SDKs and Service Providers

We use the following third-party SDKs and service providers to operate the App. We require them to protect your information in accordance with their privacy policies. The App does not integrate advertising, analytics, or push-notification SDKs.

For Google ML Kit, barcode recognition is performed on your device by default. If your device uses Google Play Services barcode-scanning components, that processing is governed by Google's privacy policy. We review third-party SDKs on an ongoing basis and will update this section when the list changes.

5. Storage and Security

5.1 Where We Store Information

Your personal information is stored on our cloud servers (Supabase service instance, domain hyeco-smart.com). Server location: United States.

5.2 How Long We Keep Information

We keep personal information only as long as needed for the purposes described in this Privacy Policy:

• Account information: from registration until you delete your account;

• Project and device data: from creation until you delete the project or delete your account;

• Logs and diagnostic information: for as long as needed for troubleshooting, then deleted or de-identified;

• Longer retention where required by law.

After the retention period ends, we delete or de-identify the information.

5.3 Security Measures

We use safeguards designed to protect your personal information, including:

• Encrypted transmission (HTTPS/TLS) for passwords and data in transit;

• Account-based access controls so project data is visible only to authorized associated accounts;

• Access controls on cloud services so only authorized personnel can access data when needed.

No method of transmission or storage over the internet is 100% secure. If we become aware of a security incident affecting your personal information, we provide notice as required by applicable law.

6. Sharing, Sale, Transfer, and Disclosure

6.1 Disclosure

We do not disclose your personal information to third parties except in the following cases:

A. Service providers / SDKs. Processing by SDKs and providers needed to operate the App, as listed in Section 4.

B. Project collaboration visibility (part of the product). For example:

· When a Contractor creates a project and starts a handoff to you (Homeowner), the Contractor enters the email address you provided;

· In Contractor Management, invited Collaborating Contractors on a project can see one another's name, email address, phone number, and join date;

· After handoff, project data (project details, device status, fixture activity, and logs) is visible to the Homeowner, invited household members (with the same access as the Homeowner), and the Contractor (read-only after handoff, for warranty-period remote diagnostics);

· You can remove invited household members or Collaborating Contractors at any time in member management; after removal, they lose the related access.

C. Legal requirements. When required by applicable law, legal process, or government request.

6.2 Sale of Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your personal information for targeted advertising.

6.3 Transfer

We may transfer your personal information to another company, organization, or individual in connection with a merger, acquisition, reorganization, asset sale, or similar transaction.

6.4 Public Disclosure

We do not publicly disclose your personal information, except where required by applicable law or a valid government request.

7. Your Privacy Rights and Choices

Depending on where you live (including under applicable U.S. state privacy laws such as the California Consumer Privacy Act, as amended by the CPRA, and applicable Canadian privacy laws), you may have some or all of the following rights regarding your personal information.

7.1 Access and Portability

You can view your account profile, project information, device data, and logs in the App at any time. To request a copy of your personal information, contact us using the details in Section 9.

7.2 Correction

You can update your name, phone number, and password in App settings. You can edit project information in project management.

7.3 Deletion

You can delete projects you created in the App (deleting a project also removes associated transformers, fixtures, groups, and schedules and cannot be undone). To request deletion of other personal information, contact us using the details in Section 9.

7.4 Withdraw Consent / Manage Permissions

You may withdraw consent or limit collection by turning off permissions in your device settings (see Section 3) or by contacting us to withdraw consent to this Privacy Policy. After you withdraw consent, we will stop the related processing going forward. Withdrawal does not affect processing that already occurred based on prior consent. Some features depend on certain information or permissions and may no longer work after withdrawal.

7.5 Account Deletion

To delete your account, email the privacy contact listed in Section 9 (Privacy Contact Email). After we receive and verify your request, we will complete account deletion timely, generally within 15 business days. After account deletion, we will delete or de-identify your personal information, except where we are required to retain it by law. Account deletion permanently removes your account and all associated cloud projects, device configurations, and schedules. This cannot be undone.

7.6 How We Respond to Requests

To protect your account, we may need to verify your identity before fulfilling a request. We aim to respond within the time required by applicable law (and, where not otherwise specified, within 15 business days). If you are not satisfied with our response, you may contact us again using the channels in Section 9. Residents of certain U.S. states may also have the right to appeal our decision; if we deny your request, we will explain how to appeal where required.

8. Children's Privacy

The App is intended for adult users. We do not knowingly collect personal information from children under 13 years of age (or the equivalent age of digital consent in your jurisdiction). If you are under 13, please do not register for or use the App or provide any personal information to us.

If we are notified that we have collected personal information from a child under 13 without verifiable parental consent where required, we will delete that information as soon as reasonably practicable. If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us using the details in Section 9.

9. How to Contact Us

If you have questions, comments, requests, or complaints about this Privacy Policy or our handling of personal information, contact us at:

• Privacy contact email: sales@lumienlighting.com

• Phone: 770-485-9002

• Mailing address: 1488 Bells Ferry Rd, Marietta, GA 30066

After we receive your message and verify your identity where needed, we will respond within 15 business days (or sooner if required by applicable law).

10. Appendix: Features, Permissions, and Data