LumiPhone - Privacy Policy

Effective Date: May 8, 2026

Welcome to LumiPhone. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how our mobile application (LumiPhone) collects, uses, shares, and protects your information, as well as the device permissions required for the app to function properly.

1. Information We Collect

In order to provide our Voice over IP (VoIP), messaging, and communication services, LumiPhone processes certain data directly on your device and, when necessary, transmits it through our servers or third-party infrastructure.

Device & Network Data

We require network access to connect your device to our SIP (Session Initiation Protocol) servers. To optimize connection stability and deliver push notifications, we generate and use Firebase device tokens.

Media & Communications

Audio and video data generated during calls are transmitted securely over the internet to the recipient. We do not record, store, or monitor your private voice/video calls or instant messages on our servers unless specifically requested via explicit app features (e.g., local call recording stored on your device).

2. Required Device Permissions

LumiPhone requires specific Android permissions to function as a fully featured communication app. Below is a detailed breakdown of what permissions we request and exactly why they are needed:

Microphone (RECORD_AUDIO)

Why we need it: Essential for voice calls, video calls, and voice messages. Without this permission, the app cannot capture your voice to transmit to the other party.

Camera (CAMERA)

Why we need it: Required to capture video during video calls. This permission is only actively used when you initiate or answer a video call.

Contacts (READ_CONTACTS)

Why we need it: To display your local address book within the app and to match incoming phone numbers/SIP addresses with names in your contacts. We do not upload your entire contact list to our servers. Contact matching is done locally on your device.

Notifications (POST_NOTIFICATIONS)

Why we need it: To alert you of incoming calls, new chat messages, and missed events, even when the app is running in the background or closed.

Phone & Calling (MANAGE_OWN_CALLS)

Why we need it: To integrate seamlessly with the native Android telecom system, allowing LumiPhone calls to be handled properly alongside regular cellular calls (e.g., pausing an internet call when a cellular call comes in).

Background Services & Auto-Start

Why we need it: We use Foreground Services and RECEIVE_BOOT_COMPLETED to keep the app alive in the background. This ensures you never miss an incoming call or message, even if your device is rebooted or network conditions change.

3. Third-Party Services

We use trusted third-party services to ensure reliable delivery of calls and messages, and to monitor app stability:

Google Firebase Cloud Messaging (FCM): Used to wake up the app and deliver push notifications for incoming calls and messages securely.
Firebase Crashlytics: Used strictly to collect anonymous crash reports if the app unexpectedly closes, helping our developers fix bugs and improve stability.

4. Data Security

We implement industry-standard encryption protocols (such as TLS/SRTP) to secure your communications in transit. We take appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, or destruction.

5. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

6. Contact Us

If you have any questions or suggestions about our Privacy Policy or data handling practices, do not hesitate to contact our support team.