This policy describes what information we collect, how we use it, and what control you have over it. The short version: your selfie is processed to analyze it and deleted as soon as the analysis is done. It is not sold, not used to train models, and no facial recognition is performed.
Data we collect
Email for your account, anonymous usage metrics (which screens are opened, which ritual steps are completed), and the selfie you capture when running a skin scan. Optionally, if you allow it, aggregated and anonymized analysis metrics to improve the product.
Face data
When you run a skin scan, the app captures a selfie and transmits it to Anthropic (Claude API) to perform the analysis. The image is not retained by Luma after the analysis completes. Per Anthropic's API terms, inputs are not used to train models and are retained only briefly for abuse monitoring (see Anthropic Commercial Terms).
No facial recognition or identification is performed: no biometric template is created or stored. The recipient of the image is Anthropic PBC (United States), acting as a data processor.
Retention
Selfies are deleted server-side immediately after the analysis response is returned. We do not archive them, do not use them to train models, and do not share them with third parties beyond the processing described above.
Third-party processors
We share data with the following processors, only to the extent necessary to run the service:
- Anthropic PBC (United States) — processes the selfie via Claude API to generate the skin analysis.
- PostHog — product analytics (anonymous usage events).
- Meta Pixel — web campaign measurement.
Cookies
This site uses functional cookies (session, preferences) and analytics cookies (PostHog, Meta Pixel). You can reject them from the cookie banner without losing functionality.
Your rights
You can request access, rectification or deletion of your data at any time by writing to privacidad@luma.ai. We comply with GDPR, CCPA and applicable data-protection laws.