Privacy Policy

1. Data controller

Controller: Stilltouch (sole proprietorship, Japan)

Contact: support@luminask.app

2. Information we collect

• Threads (Hosts): Threads user ID, username, display name, profile picture, biography, access token, and post insights (such as view counts)
• X (Hosts, only if connected): X user ID, username, profile picture, and access token
• Guests: question text, time sent, and display language; your email address if you sign in with email
• Payments: purchase time, amount, and status, plus Stripe customer and transaction IDs (card numbers are handled by Stripe and never reach us)
• Host payouts: Stripe Connect account ID (identity verification data is collected and managed by Stripe)
• Usage data: pages viewed, referrer, browser type (User-Agent), and a session ID
• Technical data: IP address (used temporarily to prevent abusive submissions) and cookies

3. How we use Threads data

Information obtained from Threads is used only for the purposes below. We do not use it for advertising and we do not sell it.

• threads_basic: signing Hosts in, and showing their username and profile picture on their public page
• threads_content_publish: posting answer images and announcements to the Host's own Threads account, only when the Host takes that action
• threads_manage_insights: showing engagement on the Host's posts (such as view counts) in the Host's own dashboard

4. Purposes of use

• Providing the Service (receiving and answering questions, creating images, publishing posts)
• Authentication and account management
• Processing payments, paying out Hosts, and handling refunds
• Sending emails such as answer notifications
• Preventing abuse and fraud, and handling reports
• Analyzing usage and improving the Service
• Responding to inquiries and complying with the law

5. Guest anonymity

We do not disclose a Guest's email address or other identifying information to Hosts. Hosts see only the question text and the time it was sent, except where disclosure is required by law.

6. Service providers

We do not sell personal information. We share it only with the following providers, to the extent needed to run the Service.

• Supabase (database, authentication, file storage)
• Cloudflare (hosting and delivery)
• Stripe (payments and Host payouts)
• OpenAI (automated moderation of question text)
• Resend (email delivery)
• Meta / X (posting and profile retrieval on the Host's instruction)

7. International transfers

Some of these providers are located in the United States and other countries, so your data is processed on servers outside Japan. We choose providers that maintain safeguards at the level required by applicable law.

8. Retention

We keep personal information only as long as needed for the purposes above and delete it when you request account deletion, except for records such as payment history that we must keep by law.

9. Security

We apply reasonable safeguards, including encryption in transit, restricted access permissions, and row-level security in the database.

10. Your rights

You can request access to, correction of, restriction of, or deletion of your personal information at support@luminask.app. See "Data Deletion" (/data-deletion) for how to delete your data. Residents of the EU/UK have rights under the GDPR, and California residents have rights under the CCPA.

11. Cookies

We use cookies to keep you signed in, remember your language, and protect the Service. You can disable cookies in your browser, but some features will stop working.

12. Children

The Service is not directed at children under 13. If we learn that we have collected personal information from a child under 13, we will delete it.

13. Changes

We will post any changes to this policy on this page.