Privacy Policy

Scope and operator

Lumo (the “Operator”) sets out how information is handled in the Hibi recording, transcription, search, reflection and chat app, and on its introduction site, in accordance with Japan's Act on the Protection of Personal Information and other applicable laws.

The Operator's trade name is Lumo. Contact: info@lumo.tokyo . Upon request to this contact point, we will provide without delay the formal name, address and, for a corporation, its representative's name, and other information required by law. Displaying the trade name alone does not replace the provision of legally required information.

Your voice and words, on your device

Hibi does not require its own account registration. Recordings, transcripts, notes, favorites, task records, chats and replies, reflections, settings and similar information are saved on your device. The Operator has no mechanism for automatically collecting these contents on a server.

Transcription and AI processing take place on your iPhone. Recordings, transcripts and chat contents are not sent to external generative AI services. Your contents are not used to train the Operator's AI models. If you use an Apple Watch, recordings are transferred to its paired iPhone.

The current version does not connect to Health or acquire new health data. Related information saved or imported in earlier versions may remain in existing records or backups. It is treated as on-device or backup data in the same way.

The app does not include its own advertising or behavioral analytics SDKs. The OS or App Store may process diagnostic and similar information under their providers' terms and your settings. If the Operator receives diagnostic information, it is used to investigate problems, maintain safety and improve quality.

Permissions and optional backups

We request permissions needed for each feature, such as microphone access for recording and speech recognition permission when using OS speech recognition. You can change permissions in iOS Settings. A feature may be unavailable without the relevant permission. Preparing OS language data and similar resources may require a network connection.

ZIP backup export, file import and sharing are initiated by you. If you choose a cloud service as a storage or sharing destination, data is sent to that service. Hibi does not automatically synchronize it to its own cloud.

OS device backups follow Apple's features and settings. For information sent to backup or sharing destinations, also check the terms and policies of the services you choose.

Retention and deletion

Records in the app are kept on your device according to your deletions and retention settings. Audio retention settings apply to audio and do not always mean that transcripts and other records are deleted at the same time. Check the items concerned before deleting them.

Deleting items in the app or uninstalling it does not delete every copy, such as exported ZIPs, shared copies and OS backups. Manage and delete external copies separately at each destination.

The Operator cannot remotely read, restore or delete recordings or chats that exist only on your device. For more information, see Managing your data .

Site visits and inquiries

Site delivery

The hosting provider, Vercel, may process technical information such as IP addresses, pages visited, dates, times and browser details to deliver the site, respond to problems and prevent misuse.

Site demos

The recording and chat interactions use fixed fictional samples. The site does not use your microphone or provide a feature that sends your input to an external AI. It does not use its own advertising tags or optional analytics tags.

Login and cookies

This site does not require its own account registration or login. It does not set advertising or optional analytics cookies. For information handling through hosting-provider features such as content delivery and misuse prevention, please check that provider's policy.

Email support

Your reply email address, message and any information you choose to attach are received through the email service used by the Operator. This site does not accept purchase applications or card details.

Information acquired by the Operator is used as needed to answer inquiries, handle requests for disclosure and related actions, investigate problems, maintain and secure the service, fulfill legal obligations and address disputes. Any change of purpose will also follow the scope and procedures established by law.

Do not include passwords, verification codes or card details in inquiries. Do not send entire recordings or chats, or third parties' personal information, unless we explain why it is needed and how to send it safely.

Service providers, third parties and overseas processing

When outsourcing tasks such as site delivery or email, we limit the information involved to what is needed and select and supervise service providers appropriately. We do not sell personal information or use inquiry contents, recordings or similar contents for advertising or AI training.

We do not provide personal data to third parties except with your consent, under a legal exception or through lawful outsourcing and similar arrangements. If information is processed overseas through a provider's infrastructure, we will provide necessary information, obtain consent or verify appropriate measures, as required by applicable law. Contact us to request information that we are legally required to provide about service providers or overseas processing.

Also check the policies of any external services you choose. Explanations on linked sites do not replace the Operator's own legal responsibilities.

Security and retention

For information held by the Operator, we take organizational, personnel, physical and technical security measures appropriate to the risks, including access restrictions, management of the operating environment and checks on service providers. On request, we will explain an outline of these measures, excluding matters that would hinder secure operation.

Inquiries and diagnostic information are retained only for as long as reasonably necessary to fulfill their purposes, meet legal retention requirements and address disputes. Information no longer needed is deleted or anonymized. In the event of a breach or similar incident, we will investigate, prevent further harm, work to prevent recurrence, and make legally required reports and notifications to affected individuals.

Your requests and contact point

For personal data held by the Operator, you may make requests in accordance with law for notification of purposes of use; disclosure; correction, addition or deletion; suspension of use or erasure; suspension of third-party provision; and disclosure of records of third-party provision. We also address rights recognized under applicable foreign laws.

Contact us with the product name “Hibi,” your request and contact details. We will verify only what is needed to confirm your identity or your representative's authority and respond without delay in accordance with law. If we cannot fulfill a request, we will explain why. If a fee is needed, we will state the amount and reason in advance and will not charge it without your agreement. Disclosure of business operator information is free.

Withdrawal of consent does not invalidate lawful processing carried out before withdrawal. For information the Operator does not hold, such as on-device data, we will explain how to manage it. You may also consult the competent authority, such as Japan's Personal Information Protection Commission.

Changes to this policy

We may revise this policy as features or laws change. For significant changes, we will announce their contents and effective date in advance through the site, app or similar means, and obtain consent where required by law. Merely viewing the site is not treated as consent to all information processing.