Privacy Policy

Lumvex Labs, Inc. ("Company," "we," "us," or "our") operates the ExpenseLens mobile application and web application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account or use our Service, we may collect:

• Account Information: Name, email address, and password
• Profile Information: Profile photo (optional)
• Financial Data: Expense records, receipt images, transaction details, merchant names, dates, amounts, and expense categories you create or select

1.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Features used, actions taken, time and duration of use, and interaction patterns
• Log Data: IP address, browser type, pages visited, and access times
• Location Data: General location based on IP address (we do not collect precise GPS location)

1.3 Information from Third Parties

• App Store Platforms: Purchase and subscription information from Apple App Store or Google Play Store via RevenueCat
• Authentication Providers: If you sign in using a third-party service, we receive basic profile information from that provider

2. How We Use Your Information

We use the information we collect to:

• Provide and Maintain the Service: Process your receipts, track expenses, generate reports, and sync data between mobile and web applications
• Process Receipts Using AI: Your receipt images are processed using cloud-based artificial intelligence services to extract text, amounts, dates, merchant information, and categorize expenses automatically
• Manage Subscriptions: Process payments, manage your subscription status, and provide access to premium features
• Improve the Service: Analyze usage patterns, diagnose technical issues, and develop new features
• Communicate with You: Send service-related notifications, respond to inquiries, and provide customer support
• Ensure Security: Detect, prevent, and address fraud, unauthorized access, and other illegal activities
• Comply with Legal Obligations: Meet applicable legal requirements and respond to lawful requests

3. AI and Automated Processing

3.1 Receipt Processing

ExpenseLens uses Amazon Web Services (AWS), including AWS AI services, to process your receipts and automatically extract expense information such as merchant names, dates, amounts, and line items.

3.2 What Data Is Sent

When you scan a receipt:

• Your receipt image is securely uploaded to AWS
• AWS AI services process text and categorize your expense
• Processed data is stored in your account

3.3 Third-Party Data Protection

Amazon Web Services (AWS) provides the same or equal protection of your data as required by app store guidelines and industry standards:

• AWS is SOC 2, ISO 27001, and GDPR compliant
• AWS does not use your data to train AI models
• Data is transmitted securely via TLS encryption

For more information: AWS Data Privacy FAQ

3.4 Consent and Withdrawal

• You will be asked to consent to AI data processing before your first receipt scan
• You can withdraw consent at any time in Account settings
• If you withdraw consent, receipt scanning will be disabled but your existing data remains accessible
• You can delete all your data using the "Delete All Data" feature in Account settings, or by contacting support@lumvexlabs.com

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud Infrastructure and AI Services: Amazon Web Services (AWS) for data storage, processing, and AI-powered receipt analysis
• Payment Processing: RevenueCat for subscription management; Apple and Google for in-app purchases
• Analytics: Service usage analytics providers

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. You may request deletion of your account and associated data at any time by contacting us at support@lumvexlabs.com.

After account deletion:

• Personal data is deleted within 30 days
• Anonymized, aggregated data may be retained for analytics purposes
• Some data may be retained as required by law or for legitimate business purposes (e.g., fraud prevention)

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 Access and Portability

You can access your expense data and export it from within the Service.

7.2 Correction

You can update your account information and expense records through the Service.

7.3 Deletion

You can delete individual expenses, receipt images, or request complete account deletion.

7.4 California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of personal information we have collected
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at support@lumvexlabs.com.

7.5 Virginia Residents

Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have rights to access, correct, delete, and obtain a copy of their personal data. Contact us at support@lumvexlabs.com to exercise these rights.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@lumvexlabs.com, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

This Privacy Policy is governed by the laws of the Commonwealth of Virginia, United States.