LUMEN PRIVACY

Privacy policy

Effective September 16, 2026

Lumen helps community teams record lighting issues and deliver organized reports. This policy explains what information Lumen handles, who can receive it, how long it is kept, and the choices available to you.

This policy covers the Lumen Light Reports app, its Apple Watch companion, the Lumen website, and the services used to synchronize and deliver reports. Lumen is operated by Julian Cousineau. For privacy questions or requests, use Lumen support and include Privacy in your message. You do not need an app account to contact us.

Information you provide

When you use Lumen for inspections, we process the name you enter, your assigned community, inspection dates, fixture identifiers and locations, observations, comments, and any photos or videos you attach. Information saves on your device first. Once your device is connected to a community, inspection drafts, history, and attachments can synchronize with that community before you submit an email report.

When you contact Lumen, we receive your name, email address, community or company if provided, and message. We use this information to respond and handle support or privacy requests. We do not automatically subscribe you to marketing.

Community access

A community code connects a device to a community. Lumen creates a separate device credential and stores its hash, a generated identifier, the assigned community, access status, and related security records. The credential is saved on the device so that the connection can continue between sessions. Network address digests and request records are used to limit abusive connection attempts.

Other authorized devices assigned to the same community may access synchronized inspection drafts and history. Community administrators determine who is authorized and which recipients receive reports. Lumen personnel may access information when needed to operate the service, investigate a problem, or assist the community.

Report delivery

Submitting a report sends its saved contents to Lumen for delivery through our email provider. Recipients receive summary and detailed PDF reports and a link to an interactive map. Reports can include the inspector name, reported locations, notes, and attached media. We retain delivery information so we can show submission status and investigate failed or repeated requests.

Reports go to the recipients configured for the community. Authorized Lumen administrators may also receive copies for service support and quality review. We do not sell reports or use them for advertising. Recipient organizations manage their own copies and any further sharing.

A private report link can be opened by anyone who possesses it. It is not a separate recipient login. Treat that link as confidential and share it only with intended recipients.

Reference maps and inventory

Lighting inventory includes pole numbers, coordinates, descriptions, fixture layouts, and reference media. The current Fiddler’s Creek reference inventory is included in the app and available through public reference services. Community connection codes restrict shared inspection access. They do not make the bundled reference inventory private.

Changes published through authorized inventory setup become part of the shared reference information. Do not place access codes, private incidents, or unnecessary personal information in reference descriptions or photographs. Inspection attachments and public reference photographs serve different purposes and have different access rules.

Device permissions and the Apple Watch

Location access helps show nearby fixtures and place a location on the map while you use the app. The app does not maintain a continuous server record of your patrol route. Coordinates saved to a report or published inventory item are included in that record. You may use search and the map without following your device location.

Camera, microphone, and photo permissions support the media features you choose to use. You control these permissions in device settings. Selected files may contain people, identifying details, or embedded metadata. Include only information appropriate for the report or reference inventory.

The Apple Watch companion uses location and compass readings for approximate nearby fixture guidance. It exchanges lighting inventory and inspection context with its paired iPhone. Watch observations transfer to the iPhone and then follow the phone’s synchronization settings. Community credentials and incident photographs are not sent to the Watch.

Optional usage information

If you turn on Share usage and diagnostics, Lumen sends limited measurements about feature use, errors, timing, location accuracy ranges, device platform, screen size category, appearance, and app version. These measurements exclude inspector names, report contents, photographs, exact coordinates, search text, and connection credentials.

These measurements are aggregated by day and help us improve reliability. They are not a count of identifiable workers. Turning the setting off stops new collection and clears unsent measurements. A request already sent may finish. Ordinary requests needed for maps, synchronization, security, and report delivery continue to be processed.

Service providers

Cloudflare hosts the website and services and stores shared information. Resend processes report and support email. Our support mailbox uses Google. OpenStreetMap and ArcGIS services may supply map tiles and reference information. Apple processes app distribution and information under its own terms.

Providers receive the information needed to perform their services. Network requests can include an IP address, requested resource, and timing. Map tile requests reveal the area being viewed, which may correspond to your position. Providers and report recipients may process information in countries other than your own.

Lumen does not use advertising trackers or sell personal information. We do not track users across other companies’ apps and websites for advertising. Information may also be disclosed when required by law or reasonably necessary to address fraud, misuse, or threats to the service.

Provider information is available from Cloudflare, Resend, Google, OpenStreetMap Foundation, Esri, and Apple.

How long information is kept

Report files and snapshots stored specifically for email delivery expire from Lumen’s file storage after 90 days. Hosted report links expire after 90 days unless revoked sooner. This does not delete copies held by email recipients.

Shared inspection history, its attachments, and shared inventory have no automatic expiration at present. They remain until administratively removed. Delivery records, recipient settings, device access records, security records, support messages, and support delivery records are retained for administration and support until removed. Ask Lumen support about an applicable record or request its deletion.

Usage aggregates cover a rolling 90 day period. Older rows are removed when a new batch is processed. Temporary measurement batch identifiers become eligible for cleanup after 24 hours. Measurement request limits expire according to their hourly or daily window and are removed during later processing. These analytics tables do not store raw IP addresses. Provider logs are subject to the providers’ own practices.

Local records and recovery copies remain until removed from the device. Browser or device storage may also be cleared by the operating system. Exported files, backups, and emailed copies remain wherever they were saved. Removing the app or unlinking a community does not delete server records or other people’s copies.

Security

Lumen uses HTTPS for its hosted services, device credentials for protected community access, and separate authorization for publishing inventory changes. These measures help protect information, but no app, device, network, or email system can be guaranteed free of unauthorized access or harmful software.

Keep community and inventory setup codes within your authorized team. Report a lost device, suspected unauthorized access, or a suspicious report link through Lumen support. Do not include passwords or connection codes in your message. An administrator can revoke future device access, but revocation cannot erase copies already downloaded.

Your choices and requests

You may change device permissions, turn off optional diagnostics, choose what media to include, and unlink the device from its community in Settings. Disconnecting inventory setup stops future publishing through that connection. Requests already sent may finish.

To request access, correction, or deletion, contact Lumen support. Tell us which community and records are involved. We may need to verify your identity and authority before acting. Some records belong to the community’s operational history, so we may need to coordinate with its administrator. Where information must be retained to meet a legal obligation or resolve a dispute, we will explain the applicable limitation.

Lumen does not offer individual public account registration in this release. Community device access and the inspector name entered for a shift are not individual public accounts. Aggregated diagnostics cannot reliably be traced back to a particular worker for individual deletion.

Children

Lumen is intended for community staff and authorized inspection teams, not children under 13. We do not knowingly seek personal information from children under 13. Contact support if you believe such information was provided.

Changes to this policy

We will update this page when our practices change and revise the effective date. Material changes will be communicated through an appropriate service notice. The policy describes information handling; it does not replace your organization’s security requirements or any separate service agreement.