Privacy policy
Last updated: 29 September 2026Lumette: Skincare Routine ("Lumette", "the app") is made by Quick Flash ("we", "us"). Lumette has no account and no servers of its own: your routines, diary and photos stay on your phone. This policy explains what that means in detail, and what the third-party services inside the app collect.
1. What stays on your phone
Everything you put into Lumette is stored only on your device, in the app's private storage. We never receive it.
- Routines and progress: your morning and evening steps, ticks, streaks and reminders.
- Your shelf: products, how full they are, opening dates and restock lists.
- Skin diary: ratings, tags and notes.
- Photos: product photos and progress photos. Background removal for product photos runs on your phone with Google's on-device ML Kit; photos are not uploaded. Photos are never saved to your gallery.
- App lock: if you turn it on, Android checks your fingerprint, face or screen lock. Lumette never sees or stores biometric data.
- Backups: if you choose to back up, Lumette writes a file to a place you pick. That file is yours and does not include photos. Lumette's data is excluded from Android's automatic cloud backup.
2. Information collected
Lumette itself collects nothing about you. The third-party services listed in section 4 collect the following automatically when the app runs:
| Information | Collected by | Purpose |
|---|---|---|
| Device and app information (model, OS version, language, app version) | AdMob, Firebase Analytics, Firebase Crashlytics | Ads, analytics, crash diagnosis |
| Advertising ID | AdMob | Showing and measuring ads, fraud prevention |
| App instance ID and usage events (for example app opens, screens viewed, session length) | Firebase Analytics | Understanding which features are used |
| Crash reports (stack traces, device state at the time of a crash) | Firebase Crashlytics | Finding and fixing bugs |
| IP address (used for approximate location, not stored by us) | AdMob, Firebase | Ad relevance, regional statistics, consent rules |
| Ad interactions (impressions, taps) | AdMob | Ad measurement and billing |
None of these services receive your routines, product names, diary entries, notes or photos.
3. How information is used
- To show ads in the free version of the app, and to measure them.
- To understand, in aggregate, which parts of Lumette are used, so we can improve them.
- To find and fix crashes.
- To prevent fraud and abuse of ads.
We do not sell your information, and we do not use it to identify you.
4. Third-party services
Google AdMob
Serves the ads in the free version. How Google uses information from apps that use its services
Google Analytics for Firebase
Aggregate usage statistics. Firebase privacy and security
Firebase Crashlytics
Crash reports. Firebase privacy and security
Google Play services and Google Play Billing
On-device image processing (ML Kit), and the one-time "Remove ads" purchase. Payments are handled entirely by Google Play; we never receive your payment details. Google Privacy Policy
5. Consent and your choices
- Consent: where the law requires it (for example in the UK, the EEA and some US states), Lumette shows Google's consent message before any ad is requested. You can change your choice at any time in Settings > Ad privacy choices.
- Personalised ads: you can opt out of ads personalisation, or reset or delete your advertising ID, in your phone's settings (Settings > Privacy > Ads on most Android phones).
- No ads: the one-time "Remove ads" purchase stops ads, and with them AdMob's ad requests.
- Notifications: reminders and restock alerts are off until you turn them on, and are scheduled on your phone.
6. Children's privacy
Lumette is intended for adults and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect information from children. If you believe a child has used the app and information was collected by the services above, contact us and we will help.
7. Data retention
- On your phone: kept until you delete it in the app, clear the app's storage, or uninstall Lumette.
- Firebase Analytics: user-level event data is kept for up to 14 months, then deleted; aggregate reports may be kept longer.
- Firebase Crashlytics: crash reports are kept for 90 days.
- AdMob: retained according to Google's policies, linked above.
8. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or US state laws), you may have the right to access, correct, delete or restrict the use of your personal information, and to object to its use for personalised advertising.
- Your app content is already under your control: delete it in the app or uninstall Lumette.
- For analytics and crash data, contact us with your request. Because this data isn't linked to your name, email or account, we may not be able to find the records that relate to you, but we will do what we can.
- For advertising data, use the controls in section 5 and Google's My Ad Center.
9. Security
Your data lives in Lumette's private app storage, which other apps cannot read. Private screens (diary and photos) can be locked, and are hidden from screenshots and the app switcher. The third-party services above send data over encrypted (HTTPS) connections. No method of storage or transmission is perfectly secure, but we have designed Lumette so that your personal content never needs to leave your phone.
10. Changes to this policy
If this policy changes, we will update this page and the date at the top.
11. Contact
Questions or requests about privacy: flashdev95@gmail.com
Developer: Quick Flash