Features Pricing Client login Practitioner login Get started for free

Privacy Policy

Last updated: October 26, 2026

Lumno ("we", "us") is practice-management software for therapists and other practitioners. This policy explains what information we collect, why we collect it, who we share it with, and how we keep it safe. It covers both the practitioners who sign up for Lumno and the clients they book through it.

The short version: your information is stored in a secure database, encrypted whenever it is sent, received, or stored, and treated as confidential. We never sell it, never use it for advertising, and never use it to train AI.

What we collect

  • Practitioner accounts: name, email address, and the settings needed to run the account.
  • Client details: the name, email address, phone number, and time zone a practitioner enters or a client provides when booking.
  • Appointments and notes: session times, and the notes a practitioner writes about their sessions.
  • Payment details: records of payments from our payment processor, such as the amount and status. We never see or store card numbers.
  • Google Calendar (optional): if a practitioner connects it, only the calendar events needed to create and manage their appointments and Meet links.

How we use it

We use this information only to run Lumno: scheduling, payments, notes, and sending booking confirmations and reminders by email and WhatsApp. Session notes are only ever shown to the practitioner who wrote them, are used by the optional AI features described below when that practitioner asks, and are shared with a client only when the practitioner chooses to share a note with them.

We do not sell data, show ads, or run analytics that track people across the web. We collect only what we need to provide the service.

Google user data

Connecting Google Calendar is optional. When a practitioner connects it, we request only the calendar.events permission. We use it to create, update, and delete the calendar events and Google Meet links for that practitioner's own appointments, and for nothing else. We do not read their other events, contacts, email, or any other Google data. We store the access tokens needed to do this on the practitioner's behalf. The practitioner can revoke access at any time from Settings or from their Google account's permissions page, and we delete the tokens when they do.

Google user data is never sold, never used for advertising, never shared with anyone except as listed under "Who we share data with" below, and never used to create, train, or improve any machine learning or artificial intelligence model. Lumno's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use AI

Practitioners on paid plans can use optional AI features to tidy up the wording of a session note, write a short summary of it, draft a client-friendly recap, or ask questions about a client's notes. The AI runs only when a practitioner chooses to use one of these features, never automatically in the background. Every AI request follows these rules:

  • Only what's needed is sent: just the note text that task requires, and nothing else from the account.
  • Nothing is kept: requests go through OpenRouter only to AI providers with a zero-data-retention policy. They process the request, send back the answer, and keep no copy of either.
  • Never used for training: neither those providers nor Lumno use your data to train or improve AI models.
  • The practitioner stays in control: AI output is only a suggestion. Nothing is saved to a note or shared with a client until the practitioner reviews it and decides to. We do not save conversations with the AI assistant either; refreshing the page clears them.

Put simply, it is like handing a page to a trusted assistant who reads it, gives you their suggestions, and hands it straight back without making a copy or remembering what was on it.

Who we share data with

We do not sell, rent, or trade any data. We share data only with the service providers below, each only for the purpose stated and only the data that purpose needs:

  • Vercel hosts the application, so data passes through their servers while the app runs.
  • Supabase hosts our database, where account, client, appointment, note, and connection data is stored.
  • Google, only when a practitioner connects Google Calendar, receives that practitioner's appointment times and attendee details to create calendar events and Meet links.
  • Razorpay processes payments and receives the details needed to take and pay out payments.
  • Resend sends our emails, such as booking confirmations and reminders, and receives the recipient's email address and the message.
  • Meta (WhatsApp) sends WhatsApp verification codes and appointment reminders, and receives the recipient's phone number and the message.
  • OpenRouter and the AI providers it connects us to, only when a practitioner uses an AI feature, receive the note text for that request under the zero-data-retention rules above.
  • Sentry receives error reports when something in the app breaks, so we can fix it. If an error happens on screen, Sentry may record what led up to it, but all text is hidden and all images are blocked before anything leaves the browser.

We may also disclose data when required by law, or to protect the rights and safety of our users. Otherwise, we do not share any data with anyone.

How we protect your data

All practitioner and client information, including session notes, is stored in a secure database and handled confidentially using industry-standard security practices. In everyday terms:

  • Encrypted while travelling: everything sent between your device and Lumno, and between Lumno and the services we use, is encrypted with HTTPS/TLS. It is like posting a letter in a sealed, tamper-proof envelope: anyone who intercepts it sees only scrambled text.
  • Encrypted while stored: our database host encrypts all data on its disks. It is like keeping files in a locked safe: even someone who took the hard drive could not read them.
  • Passwords are never stored: we keep only a scrambled, one-way fingerprint of each password. We can check a password is correct, but no one, including us, can turn the fingerprint back into the password.
  • Connection keys stay locked away: the keys that link a practitioner's Google Calendar or Razorpay account are kept only on our servers, are never sent to the browser, and are deleted when the account is disconnected. Razorpay keys are also encrypted a second time with AES-256, like a safe inside a safe.
  • Practitioners see only their own clients: every request is checked so that a practitioner can reach only their own clients, notes, and appointments, and a client can see only what their practitioner has shared with them. The database can be reached only from our servers, never directly from a browser.

Data retention & deletion

We keep data for as long as the account is active. Practitioners can ask us to delete their account and its data at any time by emailing support@lumno.in.

Contact

Questions about this policy or your data? Contact us at support@lumno.in.