Privacy Policy
Last Updated: August 7, 2026
Introduction
LUMATI LIFE ("Lumati," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you access or use our Services.
This Privacy Policy applies to the following:
-
Lumati websites, including lumati.com and shop.lumati.com
-
Lumati mobile applications for iOS and Android
-
Lumati Team administrative portal and Lumati Kiosk
-
Customer support services
-
Email, SMS, and push notifications
-
Wellness programs and practitioner tools
-
Our online store
Collectively, these are referred to as the "Services."
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Services.
We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, or privacy practices. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy and provide any additional notice required by applicable law.
The personal information we collect depends on how you interact with our Services. "Personal Information" means information that identifies, relates to, describes, or can reasonably be linked to an individual, as defined by applicable privacy laws.
Information You Provide
We collect personal information that you voluntarily provide when you use our Services, including:
-
Contact Information, such as your name, mailing address, email address, and telephone number.
-
Account Information, including your username, password, profile information, and security credentials.
-
Date of Birth, where necessary to verify eligibility or comply with legal requirements.
-
Order and Transaction Information, including billing and shipping addresses, order history, subscription information, returns, refunds, promotional codes, and payment confirmations.
-
Appointment Information, including appointments you schedule, session details, preferences, and related communications.
-
Practitioner Information, including the practitioner or clinic associated with your account.
-
Customer Support Information, including any information you choose to provide when contacting us.
Providing certain information may be necessary to access or use specific features of our Services. If you choose not to provide required information, some features may not function properly.
Wellness Information
Depending on the Services you use, we may collect wellness-related information necessary to provide the services requested by you or your practitioner, including:
-
Wellness assessments
-
Wellness plans
-
Appointment history
-
Recharge session history
-
Nutrition information
-
Test kit registration information and results
-
Wellness information and content you voluntarily submit
We use this information solely to provide and support the Services you request and retain it only for the period described in the Data Retention and Deletion section of this Privacy Policy.
Lumati provides wellness technology and educational tools. The Services do not provide medical advice, diagnosis, or treatment and do not create a physician-patient relationship.
Information Collected Automatically
When you use our Site, App, or other Services, we automatically collect certain information, including:
-
Device identifiers
-
IP address
-
Browser type and operating system
-
Device model and application version
-
Language settings
-
Mobile network information
-
Usage information, such as pages viewed, features used, and session duration
-
Diagnostic information, including crash reports, error logs, and performance data
-
Push notification tokens, where you enable notifications
We use this information to operate, secure, maintain, troubleshoot, and improve our Services.
Mobile App Permissions
Depending on the features you choose to use, our App may request permission to access:
-
Camera to scan QR codes, support meal analysis, and complete test kit workflows.
-
Photos to upload images you choose to share.
-
Notifications to deliver appointment reminders, wellness reminders, account alerts, and other notifications.
You may grant or revoke these permissions at any time through your device settings. Disabling certain permissions may limit the functionality of some features.
Information We Receive from Third Parties
We may receive personal information about you from third parties that support the operation of our Services, including:
-
Service providers
-
Payment processors
-
Practitioners and clinics
-
Business partners
-
Technologies used on our Site and App
This information may include details needed to process payments, fulfill orders, schedule appointments, authenticate users, provide wellness services, process assessments and test kit information, analyze usage, and maintain the security and operation of our Services.
We treat information received from third parties in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided by third parties or for their privacy practices.
-
We use your personal information to provide, maintain, improve, and protect our Services, communicate with you, fulfill our legal obligations, and operate our business.
Providing Our Services
We use your personal information to:
-
Create and manage your account.
-
Process payments and complete transactions.
-
Fulfill orders, including shipping, returns, and exchanges.
-
Schedule and manage appointments.
-
Deliver wellness services and support practitioner relationships.
-
Process test kit registrations and related services.
-
Provide customer support.
-
Communicate with you about your account, orders, appointments, and Services.
-
Send transactional communications, including order confirmations, shipping updates, appointment reminders, wellness reminders, test kit notifications, product recall notices, and security alerts.
Improving Our Services
We use personal information to improve the performance, reliability, functionality, and security of our Services. This includes monitoring usage, analyzing trends, troubleshooting technical issues, conducting research and analytics, and developing new features and functionality.
Marketing and Personalization
Where permitted by law, we may use your personal information to:
-
Send promotional communications by email, SMS, or other permitted channels.
-
Inform you about products, services, promotions, and events.
-
Personalize your experience with our Services.
-
Measure the effectiveness of our marketing and advertising.
-
Display relevant advertisements on our Services and, where permitted, on third-party websites and platforms.
You may opt out of marketing communications at any time as described in the Communications section below.
Security and Fraud Prevention
We use personal information to protect our Services, users, practitioners, and business by:
-
Detecting, preventing, and investigating fraud, unauthorized access, and other illegal or malicious activity.
-
Verifying user identities and securing accounts.
-
Enforcing our Terms of Service and other agreements.
-
Protecting the rights, safety, security, and property of Lumati, our users, practitioners, and others.
You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you believe your account has been compromised.
Legal and Business Purposes
We may use personal information to:
-
Comply with applicable laws, regulations, court orders, and legal processes.
-
Meet tax, accounting, auditing, and reporting obligations.
-
Resolve disputes and enforce our legal rights.
-
Support business operations, including audits, corporate transactions, and internal administration.
-
Fulfill any other purpose disclosed at the time information is collected or with your consent where required by law.
-
We may communicate with you by email, SMS (text message), push notification, or other electronic means in connection with your account, orders, appointments, Services, and other interactions with Lumati.
Email and Other Communications
We may send you non-promotional communications that are necessary to provide and administer our Services, including:
-
Account verification and security alerts
-
Order confirmations and shipping updates
-
Appointment and recharge session reminders
-
Wellness reminders
-
Test kit notifications
-
Product recall notices
-
Customer support communications
-
Other messages related to your account or transactions
These communications are considered transactional or service-related and may continue even if you opt out of marketing communications.
Marketing Communications
Where permitted by law, we may send you promotional communications about Lumati products, services, events, and offers by email, SMS, or other permitted channels.
You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the email. You may also manage push notifications through your device settings.
Opting out of marketing communications does not affect your receipt of necessary non-promotional communications related to your account, appointments, orders, security, or Services.
SMS Messaging
If you provide your mobile number and consent where required by law, or where otherwise permitted based on your relationship with Lumati or a participating practitioner, we may send you SMS messages related to your account, appointments, orders, wellness services, and, where applicable, marketing.
SMS messages may include:
-
Account verification
-
Appointment and recharge session reminders
-
Wellness reminders
-
Order confirmations and shipping updates
-
Test kit notifications
-
Product recall notices
-
Customer support communications
-
Marketing and promotional messages, where permitted by law
Message frequency varies. Message and data rates may apply.
You may opt out of SMS messages at any time by replying STOP. Reply HELP for assistance.
Opting out of marketing SMS messages does not prevent us from sending necessary transactional or service-related messages where permitted by law.
We do not sell your mobile phone number or share it with third parties for their own independent marketing purposes.
-
We may use automated technologies and artificial intelligence ("AI") to enhance your experience with our Services. These technologies may be used to provide features such as wellness insights, personalized recommendations, meal analysis, educational content, summaries, and other wellness-related tools.
AI-generated content is intended to provide informational and educational support only. It is not medical advice, diagnosis, or treatment and should not be relied upon as a substitute for professional medical judgment. Where appropriate, you should consult a qualified healthcare professional before making health-related decisions.
Our AI features are designed to assist users and practitioners and are not used to make decisions that produce legal or similarly significant effects concerning you.
We do not use your personal information to train publicly available artificial intelligence models without your authorization or as otherwise permitted by applicable law.
We use cookies and similar technologies, including pixels, software development kits (SDKs), web beacons, and local storage technologies, to operate, secure, and improve our Services.
These technologies help us:
-
Provide core functionality and maintain the security of our Services.
-
Remember your preferences and account settings.
-
Keep you signed in to your account.
-
Maintain shopping cart functionality.
-
Analyze how our Services are used and improve their performance.
-
Measure the effectiveness of our communications and marketing.
-
Personalize your experience and, where permitted by applicable law, deliver relevant advertising.
Types of Cookies We Use
Depending on the Services you use, we may use:
-
Essential Cookies – Required for the operation and security of our Services.
-
Functional Cookies – Remember your preferences and personalize your experience.
-
Authentication Cookies – Keep you signed in to your account.
-
Shopping Cart Cookies – Remember items you add to your cart.
-
Analytics Cookies – Help us understand how visitors interact with our Services so we can improve performance and usability.
-
Advertising Cookies – Help us measure advertising effectiveness and, where permitted by law, deliver relevant advertisements.
We may also allow trusted third-party service providers and business partners to use Cookies and similar technologies on our behalf to support analytics, communications, advertising, and other business operations.
Managing Cookies
Most web browsers automatically accept Cookies, but you can modify your browser or device settings to remove, reject, or limit their use. Where required by applicable law, you may also manage your cookie preferences through the controls provided on our Services.
Please note that disabling certain Cookies may affect the availability or functionality of some features of our Services.
-
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.
Our security measures may include:
-
Encryption of personal information in transit using Transport Layer Security (TLS) and, where appropriate, encryption of data at rest.
-
Secure authentication and role-based access controls to limit access to authorized personnel.
-
Continuous monitoring, logging, and security measures designed to detect and respond to unauthorized access or suspicious activity.
-
Regular software updates, vulnerability management, and security practices intended to maintain the integrity and availability of our Services.
-
Secure cloud infrastructure and trusted third-party service providers that are contractually required to protect personal information.
While we strive to protect your personal information, no method of transmitting or storing data is completely secure. As a result, we cannot guarantee the absolute security of your personal information.
You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you believe your account has been compromised.
-
We retain personal information only for as long as reasonably necessary to provide our Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and protect our business and users.
The length of time we retain personal information depends on the type of information, the purposes for which it was collected, and applicable legal, regulatory, tax, accounting, and business requirements.
How Long We Retain Personal Information
In general, we retain:
-
Account Information for as long as your account remains active and for a reasonable period afterward as necessary to comply with legal obligations, resolve disputes, or enforce our agreements.
-
Order and Transaction Information for the period required for tax, accounting, auditing, and legal compliance.
-
Payment Information only as necessary to process transactions. Payment card information is processed by our payment providers and is not stored by Lumati.
-
Wellness Information, including assessments, wellness plans, recharge sessions, and test kit information, for as long as necessary to provide the Services, support your relationship with Lumati or your practitioner, and comply with applicable law.
-
Customer Support Communications for as long as reasonably necessary to respond to inquiries, improve our Services, and maintain appropriate business records.
-
Usage, Analytics, and Diagnostic Information for as long as necessary to operate, secure, troubleshoot, and improve our Services.
-
Cookie and Similar Technology Data in accordance with the applicable retention or expiration period.
When personal information is no longer required, we will delete, anonymize, or securely dispose of it, unless we are required or permitted by law to retain it for a longer period.
Requesting Deletion of Your Personal Information
You may request deletion of your account and the personal information associated with it at any time through the App, on the web, or by contacting us by email or phone.
In the App: Settings → Account → Delete Account
On the Web: Lumati Account Deletion Request
By Email or Phone: support@lumati.com, info@lumati.com, or +1 (858) 888-2424
We will acknowledge your request within 10 business days and, subject to applicable law, complete the deletion within 30 days. If applicable law permits a longer period, we will notify you.
Deletion removes your account, profile, usage history, wellness session history, and marketing records, subject to the exceptions described below.
Information We May Retain After Deletion
We may retain a limited subset of information after a deletion request when retention is required by law or necessary for a legitimate purpose that overrides the request. This may include:
-
Completed order and transaction records for the applicable tax and accounting retention period.
-
Test kit and laboratory records for the period required by applicable law.
-
Suppression records necessary to honor your marketing and SMS opt-out preferences.
-
Records of fraudulent or abusive activity where necessary to prevent or investigate fraud, misuse, or security incidents.
-
Information required to establish, exercise, or defend legal claims.
Retained information will not be used for other purposes except as necessary to satisfy the applicable legal or legitimate retention purpose.
We may also retain information in backup or disaster-recovery systems for a limited period until those systems are routinely overwritten or securely deleted.
-
Depending on where you live, you may have some or all of the rights described below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and may be subject to exceptions and limitations under applicable law.
Right to Access / Know
You may have the right to request access to the personal information we hold about you, including information about how we collect, use, and disclose it.
Right to Delete
You may have the right to request deletion of personal information we maintain about you, subject to applicable exceptions. See Requesting Deletion of Your Personal Information in the Data Retention and Deletion section above.
Right to Correct
You may have the right to request that we correct inaccurate or incomplete personal information we maintain about you.
Right to Portability
You may have the right to receive a copy of your personal information in a portable format and, in certain circumstances, request that we transfer it to another organization.
Restriction of Processing
Where provided by applicable law, you may have the right to request that we restrict or limit certain processing of your personal information.
Withdrawal of Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before you withdrew your consent.
Appeal
Where provided by applicable law, you may have the right to appeal our decision if we decline to process your privacy request. You may submit an appeal by replying to our response or contacting us using the information in the Contact Us section.
Managing Communication Preferences
You may opt out of promotional emails at any time by using the unsubscribe link included in those emails.
You may opt out of SMS messages by replying STOP. You may also manage push notifications through your device settings.
Opting out of marketing communications does not prevent us from sending necessary non-promotional communications, including messages about your account, appointments, orders, security, or other transactions.
Exercising Your Privacy Rights
You may exercise applicable privacy rights through the controls provided on our Site or App or by contacting us using the information provided in the Contact Us section.
We will not discriminate against you for exercising your privacy rights.
To protect your personal information, we may need to verify your identity before processing your request.
We may request information such as your email address, account information, or other information reasonably necessary to verify your identity.
Where permitted by law, you may designate an authorized agent to submit a request on your behalf. Before processing a request submitted by an authorized agent, we may require proof that you authorized the agent to act on your behalf and may require you to verify your identity directly with us.
We will respond to privacy requests within the timeframes required by applicable law.
Complaints
If you have concerns or complaints about how we process your personal information, please contact us using the information in the Contact Us section. If you are not satisfied with our response, you may have the right, depending on where you live, to appeal our decision or lodge a complaint with your local data protection or privacy authority.
Applicable Privacy Laws
Where applicable, Lumati honors privacy rights available under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), the General Data Protection Regulation (GDPR), and other applicable privacy laws.
Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent where required by applicable law.
If you are a parent or legal guardian and believe that your child has provided us with personal information in violation of this Privacy Policy, please contact us using the information provided in the Contact Us section. If we become aware that we have collected personal information from a child without the required consent, we will take reasonable steps to delete that information as required by applicable law.
If a higher minimum age applies in your jurisdiction, we will comply with the applicable legal requirements.
Because Lumati may serve users in multiple countries, your personal information may be transferred to, stored, and processed in countries other than the one in which you reside.
Where required by applicable law, we implement appropriate safeguards to protect personal information transferred internationally, including contractual protections and other legally recognized transfer mechanisms.
By using our Services, where permitted by applicable law, you acknowledge that your personal information may be transferred to and processed in countries that may have different data protection laws than those in your jurisdiction.
We may update this Privacy Policy from time to time to reflect changes in our Services, business practices, legal requirements, or other operational needs.
When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy and provide additional notice where required by applicable law.
Your continued use of the Services after an updated Privacy Policy becomes effective constitutes your acceptance of the revised Privacy Policy, to the extent permitted by applicable law.
If you have questions about this Privacy Policy, our privacy practices, or would like to exercise your privacy rights, please contact us:
Phone: +1 (858) 888-2424
Email: support@lumati.com or info@lumati.com
Mail:
613 Westlake Street, Suite 126
Encinitas, CA 92024
United States
If you are submitting a request regarding your personal information, please include sufficient information for us to verify your identity and process your request.