Your state is personal. The data boundary should be clear.

Who is responsible

Lumenshore Limited is the controller of personal information processed for LumenApexflow. It is registered in England and Wales under company number 09607326and has its registered office at Windsor House, Troon Way Business Centre, Humberstone Lane, Leicester, England, LE4 9HA.

Privacy and account-deletion requests may be made through the in-app Privacy Center where available. A written request may also be sent to the registered office above. We may need to verify that the requester controls the relevant account before acting.

Information kept on your device

Apexflow is local-first. The following information is stored on the device so the app can play rituals, remember choices, and work offline:

• Ritual preferences, onboarding choices, history, ratings, notes, saved rituals, and personalisation settings.
• Downloaded soundscape files and playback state needed for offline use.
• On-device privacy choices, including personalisation and optional product-signal settings.

You can clear eligible local data in the Privacy Center. Removing the app also removes its local container, subject to the device and backup settings you control through Apple.

Google sign-in

Google sign-in is optional. If you choose it, Google sends basic identity information to Clerk, our authentication provider, so we can create or recognise your Apexflow account:

• A Google account identifier used to recognise the account securely.
• The email address and basic profile information Google makes available for sign-in, such as name and profile image.

We use this information only to authenticate you, protect the account, display its basic identity, and connect the optional account features described below. Apexflow does not request access to Gmail, Google Drive, Google Calendar, contacts, or other Google services, and does not use Google identity information for advertising.

Information sent when account features are used

An account is optional for local rituals. When you sign in and use sync, chat, support, or deletion features, the relevant information is sent to Lumenshore's authenticated service:

• Account identity supplied through Clerk, including an identity identifier, email address, and optional profile information.
• Ritual-session details, such as the chosen soundscape, duration, completion state, and fit rating, when authenticated sync is used.
• Chats and messages that a signed-in person chooses to create.
• Support-report text and limited app or screen context that a signed-in person chooses to submit; optional diagnostics are attached only when allowed.
• A record of an authenticated product-data deletion request and its processing status.
• For Royal, the opaque Clerk account identifier and normalized App Store subscription events, including product, entitlement, environment, purchase and expiry dates, renewal state, and transaction reference. Email, name, and profile details are not sent to RevenueCat.

We process this information to provide the feature you chose, maintain account security, respond to support and deletion requests, prevent abuse, and keep the service reliable. We do not sell personal information or use it for behavioural advertising.

Royal requires a signed-in account so purchase access can follow the right person across devices. Apexflow sends RevenueCat only the opaque Clerk user identifier—not the account email, name, profile image, or other Clerk profile fields. Apple remains the payment processor; Lumenshore receives subscription state and transaction references, not full card details.

Service providers and sharing

We disclose only the information needed for providers to perform services for Apexflow. They process information under their own security and privacy obligations. We may also disclose information where required by law, to protect people or the service, or as part of a corporate transaction subject to appropriate safeguards.

Website analytics and performance

The website uses Vercel Web Analytics to measure page views and Vercel Speed Insights to measure Core Web Vitals and related real-user performance. Web Analytics may process the page path, referrer, approximate location, browser, operating system, and device type. Vercel states that Web Analytics does not use cookies and does not tie these measurements to a person or IP address. We use the resulting aggregate reports to understand site usage and improve reliability, not for advertising or cross-site tracking.

Information we do not request

The current native product does not request location, health, contacts, calendar, microphone, or advertising identifiers. It is not designed to infer medical, athletic, productivity, or emotional outcomes. The website contains no account form, waitlist form, subscription checkout, advertising script, or behavioural advertising integration, and it does not collect payment details. Hosting providers may still process ordinary request and security logs.

Retention and deletion

Local information remains until you clear it, remove the app, or the device removes it. Account identity and synced product data are retained while needed to provide and secure the account, meet legal obligations, resolve disputes, and prevent abuse.

The in-app synced-data request places an authenticated request in the Apexflow privacy queue. Completing it removes the Apexflow product profile and its ritual sessions, ratings, chats, messages, bug reports, local Royal mirror, and identity links to normalized webhook records. Identity-free immutable billing events may remain so Lumenshore can evidence purchases and preserve the integrity of its billing ledger. Before the request is marked complete, an authorised operator must also request deletion of the corresponding RevenueCat customer profile. Apple, RevenueCat, and Lumenshore may retain limited transaction, tax, fraud-prevention, dispute, and legal records where required or permitted by law. The request record keeps a one-way subject digest, limited status, and app-version information so the deletion can be evidenced. This product deletion does not automatically delete the separate Clerk authentication account; request that separately through the contact route above. Residual copies may remain temporarily in protected backups before they are overwritten in the ordinary backup cycle.

Deleting Apexflow data or a Lumenshore account does not cancel an Apple subscription. Manage or cancel Royal separately in Apple's subscription settings to stop future renewal.

Your choices and rights

You can use Apexflow locally without Google sign-in, sign out at any time, choose Apple or email-code sign-in instead, clear eligible local information, and request deletion of synced Apexflow data. Depending on where you live, you may also have rights to access, correct, restrict, object to, or receive a copy of personal information and to complain to a data-protection authority.

See the Terms of Service for the service rules and the Support page for in-app help routes.