Demo environment — all clinics, doctors and reviews shown are sample data.

← Lumié

Privacy Policy

Last updated 2026-05-27

Lumié ("we", "us") values and protects your personal information. This policy explains what data we collect, how we use it, and how long we keep it, in accordance with Korea's Personal Information Protection Act (PIPA) and other applicable laws.

1. Information We Collect

When you sign up and use the service, we collect: email address, password (stored as a one-way hash), nickname, language preference, booking metadata, passport number at checkout (optional), IP address, User-Agent, and cookie / local-storage identifiers.

2. How We Use Your Information

We use your data to provide and operate the service, mediate clinic bookings, process payments, verify identity, handle disputes, and prevent abuse. Marketing communications are sent only with your separate opt-in consent.

3. Retention Period

We delete your data promptly when you close your account. However, where Korean law requires (e.g. the Act on the Consumer Protection in Electronic Commerce), we retain certain records in isolated storage: contract / withdrawal records 5 years, payment / delivery records 5 years, consumer-dispute handling 3 years, communication logs 3 months.

4. Sharing with Third Parties

To complete bookings, we share the minimum necessary information (name, contact, appointment time, and where required passport number) with the clinic you booked. Otherwise we do not share your data with third parties except where required by law.

5. Sub-processors

We rely on the following processors: our licensed Korean payment gateway (payments), Resend (transactional email), Amazon Web Services (hosting, Seoul region), Sentry (error monitoring). All sub-processor agreements include data-protection obligations.

6. Security Measures

We encrypt data in transit with TLS 1.3 and sensitive data at rest with AES-256. Passwords are stored as bcrypt one-way hashes. We enforce access controls, retain access logs, and perform regular vulnerability assessments.

7. Your Rights

You may request access, correction, deletion, or suspension of processing of your personal information at any time. Email support@lumie.ai.kr and we will respond promptly.

8. Data Protection Officer

Name: (to be designated) · Contact: privacy@lumie.ai.kr — DPO details will be updated at official launch.

9. Cookies and Similar Technologies

We use cookies and local storage to maintain your session and remember your language preference. You may disable cookies in your browser settings, though some features may not work.

10. Changes to This Policy

We may update this policy as the law or our service evolves. Material changes will be announced in-app or by email before they take effect.