Lumio Privacy Policy
1. Who we are and what this Policy covers
WANLIVE INTERACTIVE LIMITED (“WANLIVE,” “we,” “us,” or “our”) operates Lumio. This Policy explains how we handle personal information when you use the Lumio application and related services that link to this Policy.
For the processing described here, WANLIVE is the controller or equivalent responsible business where applicable law uses those concepts. Contact support@lumiagoo.com for privacy questions or rights requests.
Privacy questions and requests are handled through support@lumiagoo.com. We will direct your request to the responsible privacy contact.
2. Information we process
We limit personal information to what is needed for the purposes described below. Depending on the features you use and the information you provide, the relevant categories are:
Category |
Information and source |
Purpose |
|---|---|---|
Account and profile |
Login and profile information relevant to the method you choose, such as your email address, phone number or login-provider identifier, nickname, avatar, and Lumio user ID provided by you or your chosen login provider |
Create and secure your account and maintain your profile |
Music and drama activity |
Content selections, playback activity and progress, and items you choose to save generated by your use |
Deliver playback, restore progress, and provide any specifically disclosed personalization |
Creative requests and results |
Your text instructions, selected music or drama, generation options, task identifiers, and generated songs, stories, or videos. If a feature allows you to submit a file, the file you select is also processed for that feature |
Perform generation, show progress, store results, and handle support |
Purchases and credits |
Order identifiers, purchased products, transaction amounts and currencies, receipts or transaction confirmations, payment status, and Diamond balance and usage from you and payment providers |
Fulfil purchases, maintain balances, prevent fraud, and meet recordkeeping duties |
Technical and security information |
Connection and diagnostic information needed to operate the Service, such as IP address, app and operating-system version, error reports, access times, and security events from the app and relevant service providers |
Operate and secure the Service and investigate failures |
Support and rights requests |
Contact information, correspondence, relevant task or order details, and proportionate verification information |
Respond to questions, disputes, safety reports, and privacy requests |
Eligibility checks |
Age or eligibility information you provide, and limited additional information requested where necessary to investigate suspected underage use or establish eligibility |
Apply age restrictions and prevent ineligible use |
When you use a payment platform, that platform handles the payment information you submit through its payment interface under its own notice. Lumio processes the purchase and entitlement information needed to fulfil your order and address payment issues. Do not submit passwords, complete payment credentials, or unnecessary sensitive information in creative prompts or support messages.
If particular information is required for a feature, we will explain that at collection. Refusing optional information or permissions will not prevent unrelated functions that do not need it. Without the information necessary to perform a generation or process a purchase, we cannot provide that particular function.
3. Purposes and legal grounds
Where a legal basis is required, the basis depends on the particular processing:
- Providing requested services:account operation, playback, generation, and fulfilment of purchases where necessary to perform our contract with you.
- Security and support:proportionate fraud prevention, troubleshooting, and service protection based on our legitimate interests where recognized and not outweighed by your rights, or on another applicable lawful basis.
- Legal compliance:recordkeeping, lawful reporting, and responses to binding legal requirements.
- Optional activities:consent where required, including relevant optional permissions, non-essential tracking, and any separately offered use that requires consent. You may withdraw consent without affecting earlier lawful processing.
We will explain any additional processing purpose and its applicable lawful basis before introducing that processing, and obtain consent where required. Acceptance of our Terms is not blanket consent to all processing.
4. AI processing and creative content
When you request a generation, Lumio processes the relevant Inputs, selections, and generation settings. Information necessary for the task may be sent to an AI service provider. Generated results and task status may be returned to Lumio and stored so that you can access them.
Lumio uses OpenAI GPT services and VIDU services to support AI-assisted creation. We send only the task information needed for the relevant generation, such as creative instructions, selected story or song context, generation settings, and any media needed for the requested feature. We do not send your Diamond balance or payment credentials as part of the creative prompt.
OpenAI GPT and VIDU support the processing of creative requests. Which service receives information depends on the task. Information about the providers relevant to your request and applicable processing arrangements is available by contacting support@lumiagoo.com. Where more specific disclosures or consent are required before a transfer, we will provide them before that processing.
The retention schedule below governs Lumio-controlled systems. Provider-side storage and safety logs are subject to the applicable service arrangements and legal obligations; we remain responsible for meeting the obligations that apply to our disclosure and use of providers. Do not interpret deletion from Lumio as a guarantee that a provider has immediately deleted every record.
Training and improvement:Requesting a generation does not grant WANLIVE unrestricted permission to use your personal information or private creations for general model training. Any use for a separate training purpose requires an appropriate lawful basis, specific notice, and any consent required by law. Processing to complete your task, detect abuse, or resolve an error is distinct from general model training. Contact support@lumiagoo.com for information about the provider terms applicable to your task.
Access and publication:Generation does not by itself authorize WANLIVE to publicly publish your creations. Authorized personnel and providers may access relevant content where necessary to deliver the service, investigate a problem, protect safety, or comply with law. Any public sharing feature must explain the intended audience before publication. Your instructions can contain personal information, even if a prompt is primarily creative.
Outputs are generated creative material, not verified factual statements about identifiable people. Contact us if an Output improperly discloses your personal information.
5. Recipients and service providers
We disclose relevant information only where needed for the stated purpose and permitted by law. Recipients may include hosting and storage providers, OpenAI GPT and VIDU service providers, and any payment or login provider you use. Providers supporting security or support may receive the information necessary for that function.
We require providers acting on our behalf to process information for the authorized purposes and apply appropriate protections. You can request information about recipients of your personal information at support@lumiagoo.com. We will make any additional provider-specific disclosure required by law at the relevant point of collection or processing.
Some providers act on our instructions; others, such as certain payment or identity providers, may independently determine how they process information for their own services. Their separate privacy notices apply to that independent processing; this does not remove our obligations for information we collect or disclose.
We may disclose information in response to valid legal requirements, to protect legal rights or safety where permitted, or in connection with a corporate transaction with appropriate protections and legally required notices. These circumstances do not authorize unrestricted disclosure.
Advertising choices:This Policy does not authorize the sale of your personal information or disclosure of your private creative requests for targeted advertising. Before introducing processing that qualifies as a sale, sharing for cross-context behavioral advertising, or targeted advertising under applicable law, we will provide the required specific notice, choices, and consent mechanism. You may contact support@lumiagoo.com to exercise any applicable opt-out right.
6. Permissions, analytics, and tracking
Device permissions:If a feature needs access protected by a device permission, we will explain the purpose and request access when needed. Permission requests are limited to the feature you choose. Refusing optional access may prevent that feature from working, but will not prevent unrelated functionality.
You can manage device permissions in your operating-system settings. Revoking a permission prevents future access through that permission but does not automatically delete information previously collected; use the deletion process where appropriate.
Analytics and tracking:Technical information used to diagnose errors, secure accounts, or complete requests is subject to the purposes and retention limits in this Policy. We will not treat acceptance of these Terms or this Policy as consent to non-essential tracking. Where non-essential tracking is offered, we will provide the required information and choice before activation, allow withdrawal, and honor legally applicable opt-out signals.
7. International processing
Providing the Service may involve processing outside your country of residence, including by AI and infrastructure providers. Processing abroad may involve laws different from those in your home country.
We will make a restricted international transfer only when the legal requirements for that transfer are met. Where required, this involves a recognized adequacy decision or appropriate safeguards, such as approved contractual clauses, together with any necessary supplementary protections. These mechanisms are used only where applicable; a reference to them here is not a claim that all transfers use the same mechanism. You may request information about relevant safeguards at support@lumiagoo.com, subject to appropriate redactions.
Your use of Lumio is not treated as blanket consent to an otherwise unlawful international transfer.
8. Retention and deletion
We retain information for the period necessary for its stated purpose, subject to applicable legal obligations and proportionate dispute or security needs. Earlier deletion or a different period applies where required by law. Our retention schedule is:
Information |
Retention period or criterion |
|---|---|
Account and profile |
While your account remains open and needed to provide the account; delete from active systems within 30 days after closure, subject to the limited exceptions below. |
Generation Inputs and transient processing files |
Delete within 30 days after the task completes or is finally marked unsuccessful, unless you expressly save them as part of a creation. Necessary billing metadata is retained separately without retaining the full prompt or media. |
Saved creations and any expressly saved creative settings |
Keep while you choose to store them in an open account. Delete from active systems within 30 days after your deletion request or account closure. |
Operational task status records |
Up to 90 days after a task completes or is finally marked unsuccessful; keep only the minimal transaction evidence separately where needed for billing records. |
Purchase and tax records |
Five years after the transaction subject to a documented requirement for a different period under the relevant accounting, tax, consumer, or other applicable law. Limit these records to information needed for those purposes. |
Technical, security, and analytics logs |
Up to 90 days from collection for ordinary technical and security logs. Retain incident-specific evidence longer only where necessary for an identified investigation or legal requirement. Information processed on our behalf is subject to the applicable retention instructions. |
Support and rights requests |
Up to two years after resolution to document the response and handle related disputes; remove unnecessary attachments earlier. Retain longer only for a specific legal obligation or ongoing claim. |
Eligibility verification material |
If additional verification is necessary, delete raw verification material within 30 days after the decision, or sooner where it is no longer needed. Keep only the minimum eligibility result while the account remains open, then apply the account deletion period. We limit any provider processing to the applicable purpose and retention requirements. |
Backups |
Remove deleted information through a rolling backup overwrite or deletion cycle within 90 days after deletion from active systems. Backups are restricted to recovery purposes; if restored, reapply deletion instructions before ordinary processing resumes. |
If information must be retained after a deletion request for a lawful reason, we limit it to that reason and explain the relevant exception where required. We communicate applicable deletion instructions to providers processing on our behalf. Deleted information may remain in restricted backups until the overwrite period ends, or be retained under a specific lawful exception.
9. Your choices and rights
Depending on your location and the applicable conditions, you may have rights to access, obtain a copy of, correct, delete, or port personal information; restrict or object to processing; withdraw consent; and opt out of particular advertising, sale, or sharing activities. Relevant laws may also protect you from solely automated decisions with legal or similarly significant effects.
Submit a request at support@lumiagoo.com to request account deletion or exercise another privacy right. We may request proportionate information to verify identity or authority. We respond within the legally required timeframe and explain any permitted extension or refusal. Exercising a protected privacy right will not result in unlawful discrimination.
Where applicable, an authorized agent may act for you after appropriate verification, and you may appeal a refusal through support@lumiagoo.com; identify the request and explain why you seek a review. You may complain to the competent data protection or privacy authority; you do not have to contact us first where the law permits a direct complaint.
Automated processing:AI generation processes your instructions to create a result. If an automated restriction affects your access, task, or account, you can request an explanation and human review at support@lumiagoo.com. We will provide the information and safeguards required by law for any solely automated decision with legal or similarly significant effects.
10. Children and underage use
Lumio is intended for adults aged 18 or over and is not offered to people under 18. We do not intentionally solicit personal information from underage users for ordinary account use. An age restriction does not remove our obligations when we become aware of underage use or where other child-protection requirements apply.
If you believe an underage person has provided information, contact support@lumiagoo.com. We will investigate, restrict ineligible access where appropriate, and delete information that we have no lawful basis or obligation to retain. See our Children’s Privacy and Safety Policy for details.
11. Security and incidents
We use safeguards appropriate to the nature of the information and the risks of processing. Access is limited to authorized personnel and providers who need it for their work. No service can guarantee absolute security. Where an incident triggers a legal notification obligation, we will notify the relevant authority and affected people as required.
12. Changes and contact
We will update this Policy when material practices change and provide appropriate notice. Where a new purpose requires further consent or another legal step, publication of a revised Policy alone does not substitute for that requirement.
WANLIVE INTERACTIVE LIMITED