Data Retention and Data Requests
This page lists how long each Lumina service keeps data, and how we handle requests to access, export, share or delete data under the GDPR and the EU Data Act.
1. Retention schedule
At the end of each period, data is deleted automatically or irreversibly anonymised. Backups are overwritten within 35 days after that. FIX-12
| Service | Data | Retention | Reason |
|---|---|---|---|
| Software updates | Update check records (hashed serial number, installation ID, version, result, time, IP) | 90 days | Troubleshooting failed updates |
| Latest record per device (serial number, model, firmware version) | Support period + 12 months | Targeting security updates, warranty | |
| Activation / DRM | Chip ID, serial number, certificate request, first-connection date | Support period + 12 months | Warranty, DRM, counterfeit prevention |
| App Store | Request logs | 90 days | Operation and security |
| Install records (package, version, size, installation ID) | 24 months, then aggregated counts only | Download statistics, app compatibility | |
| Diagnostics | Diagnostic report file | 30 days after upload, or earlier on request with the ticket number | Investigating the reported problem |
| Ticket: description, contact details, analysis notes, without the report | 12 months after the ticket is closed | Follow-up questions, quality statistics | |
| LuminaHome | Device configuration record (installation ID, partner, model, country, last seen) | 13 months after last use | Delivering the correct home screen layout |
| Usage statistics and crash reports (Firebase, only with consent) | 14 months | Product improvement | |
| Error counters (no identifiers) | 30 days | Automatic fallback when a configuration fails | |
| LuminaAura | Weather requests (only with consent) | Not stored; in-memory cache 30 minutes | — |
| LuminaVoice | Audio and recognised text | Not stored after the reply | — |
| Usage counters (installation ID, feature, duration) | 13 months | Capacity and cost planning | |
| Lumina Go | App statistics | 90 days | Connection quality |
| AI assistant answer ratings | 30 days | Improving answers | |
| Cloud link records (installation ID, tokens, linked assistant account ID, last state) | Deleted at once when unlinked or switched off (backups within 35 days); tokens expire after 30 days without use | Providing the voice-assistant link | |
| All services | Web server and security logs (IP, time, request, result) | 30 days (security incidents: until resolved, max. 12 months) | Operation and protection against misuse |
| Support | Email correspondence | 24 months after the last message | Handling follow-up requests and legal claims |
| Consent | Consent receipts (installation ID, purpose, policy version, time, screen) | 3 years after the consent ends | Proof of consent (GDPR Art. 7(1)) |
| Requests | Record of privacy and data requests and our answer | 3 years | Proof of compliance |
The support period is stated in the EU Data Act Information.
2. How to make a request
- On the projector (fastest): Settings › Privacy offers Export my data and Delete server data. Requests made there are signed with the projector's own key, so no further proof is needed. In Lumina Go: Settings › Privacy › Delete account and data. FIX-12
- By email to privacy@luminago.app. Include:
- the installation ID (Settings › Privacy) or the serial number (Settings › About); for Lumina Go, the projector ID shown in the app;
- what you want: access, export, deletion, correction, restriction, objection, or sharing with a third party (name and contact of the recipient);
- proof of purchase or a photo of the label on the projector, so we can check that the device is yours.
You can also authorise someone to make the request for you.
3. How we handle requests
| Step | What we do | Time |
|---|---|---|
| Acknowledgement | Confirm receipt and request missing information | Within 3 business days |
| Verification | Match the serial number with the proof of purchase or device label. We ask only for what we need to verify you. | — |
| Search | Our identity service keeps a register of which services hold records for an installation ID or hashed serial number. It forwards the request to every service listed (updates, store, diagnostics, voice, relay, statistics, activation) and collects the answers. FIX-12 | — |
| Answer | Access/export: a ZIP with one JSON file per service and a summary, available on the projector as a QR code and one-time link valid 7 days, or by email. Deletion: confirmation and a list of what was deleted and what we must keep, with the reason. Sharing: transfer to the recipient in JSON. | Within 30 days. Up to 2 more months for complex requests, in which case we tell you why within the first month. |
Requests are free. We may refuse or charge a reasonable fee only for manifestly unfounded or excessive requests, and we will explain why.
4. What deletion means
- We delete the records of all services linked to the device or to you. To keep sending security updates, the projector will create a new update record the next time it checks for updates.
- Deleting data does not void the warranty and does not stop security updates. Warranty claims may need proof of purchase if the activation record was deleted.
- Data we must keep for legal reasons, such as invoices, is kept only for that purpose and only for the legal period.
- For linked voice-assistant accounts, also unlink the skill or action in the Amazon Alexa or Google Home app; Amazon and Google keep their own data under their policies.
5. Complaints
If you are not satisfied with our answer, you can complain to your data protection authority or, for Data Act matters, to the competent authority listed in the EU Data Act Information.