Privacy Policy

Last updated 16 October 2026

This policy explains what the Lumi Pilates: Workout At Home app (“Lumi”, “the app”) collects, why, who processes it, and what you can do about it. Lumi is made by Mo Horizons LLC (“we”, “us”), a company registered in Wyoming, USA. If anything here is unclear, write to support@mohorizons.com.

The short version

• You can use Lumi without giving us your name or email.
• We collect what the app needs to plan your sessions, plus crash and usage data to fix and improve it.
• We don’t sell your data and there are no advertising SDKs in the app.
• Deleting your account in the app deletes your data.

Your account

When you open Lumi for the first time, it creates an anonymous account for you. It is identified by a random ID, not by your name, email or phone number. If you want to keep your plan across devices, you can choose to sign in with an email address. That email is then linked to your account and used only to sign you in and to answer you if you contact us.

What we collect

Onboarding answers

Your level, your goals, the days you want to practise, and any contraindications you tell us about (for example, pregnancy, a recent injury or a back condition). We use these to choose exercises that suit you and to leave out ones that don’t. Contraindications are health information, so we treat them with extra care: they are used only to shape your sessions and are never shared for any other purpose.

Session logs and feedback

Which sessions you start and finish, the exercises in them, and how each session felt to you (easy, about right or hard). We use this to adjust your next session and to show you your history.

Device and crash data

Device model, operating system and app version, how the app is used (for example, which screens are opened), and crash reports with technical details of what went wrong. We use this to fix bugs and to understand which parts of the app work and which don’t.

Purchases

Payments are handled by Apple. We never see your card details. We receive the status of your subscription (for example, active, in trial or expired) so the app knows what you have access to.

Who processes your data

We use a small number of service providers. Each one processes data only on our instructions.

• Supabase: database and sign-in, hosted in the US. Stores your account, onboarding answers and session logs.
• RevenueCat: subscription management. Receives your anonymous account ID and purchase status from Apple.
• PostHog: product analytics, hosted in the US. Receives usage events linked to your anonymous account ID.
• Sentry: crash reporting. Receives crash reports and device details.
• Apple: App Store payments and subscriptions, under Apple’s own privacy policy.

What we don’t do

• We don’t sell or rent your personal data, and we don’t “share” it for cross-context behavioural advertising.
• There are no advertising SDKs or ad trackers in the app.
• We don’t use your health information for marketing.

Retention and deletion

We keep your data while your account exists. You can delete your account at any time in the app, from the You tab. Deleting your account removes everything linked to it: your account, onboarding answers, session logs and feedback. Analytics and crash data linked to your account ID are deleted as well. This can’t be undone.

Deleting the app from your phone does not delete your account. Cancelling a subscription is separate too, and is done in your App Store settings.

Security

Data is encrypted in transit and stored with providers that encrypt it at rest. Access is limited to what is needed to run the app. No system is perfectly secure, but we take reasonable measures to protect your data.

If you are in the EU or UK (GDPR)

Mo Horizons LLC is the controller of your personal data. We rely on these legal bases:

• Contract: to provide the app, your plan and your subscription.
• Explicit consent: to process the health information you give us (contraindications). You can withdraw it at any time by removing it in the app or deleting your account.
• Legitimate interests: to keep the app working, fix crashes and improve it, in ways you would reasonably expect.

You have the right to:

• access the personal data we hold about you and get a copy of it;
• have it corrected if it is wrong;
• have it deleted;
• restrict or object to how we process it;
• receive it in a portable format;
• withdraw consent at any time, without affecting processing done before.

Your data is processed in the United States. Where we transfer data out of the EU or UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism. You can also complain to your local data protection authority.

If you are in the US (CCPA and state privacy laws)

Residents of California and other states with privacy laws (such as Colorado, Connecticut, Virginia and others) have the right to:

• know what personal information we collect, use and disclose;
• access and get a copy of it;
• correct it;
• delete it;
• opt out of the sale or sharing of personal information, and of targeted advertising. We don’t do either;
• limit the use of sensitive personal information. We only use health information to provide the app;
• not be discriminated against for exercising these rights.

Categories we collect: identifiers (anonymous account ID, and email if you sign in), health information you choose to give (contraindications), app activity (session logs and feedback), device information, and purchase status. Sources and purposes are described above. We disclose them only to the service providers listed above.

How to use your rights

You can delete your account and data yourself in the app. For any other request, email support@mohorizons.com. We may ask you to confirm the request from the app or from the email linked to your account, so we know it’s you. An authorised agent can make a request on your behalf with your signed permission. We reply within the time the law gives us, usually 30 days (45 days under US state laws). You can appeal a decision by replying to our answer.

Children

Lumi is not for anyone under 16. We don’t knowingly collect data from children under 16. If you believe a child has given us data, contact us and we will delete it.

This website

This website sets no cookies and runs no analytics. Our host, Vercel, keeps standard server logs (such as IP address and browser type) for security and operations.

Changes

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app.

Contact

Mo Horizons LLC
support@mohorizons.com