Lumi Lighting Privacy Policy

Effective date: September 22, 2026

This Privacy Policy explains how White Raven Brands (“White Raven Brands,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Lumi Lighting mobile application, related services, and associated websites (collectively, the “Service”).

By using the Service, you acknowledge the practices described in this Privacy Policy. If you do not agree, do not use the Service.

1. Information We Collect

The information we collect depends on how you use the Service, the devices you connect, the permissions you grant, and the features you enable.

Information you provide

• Account information: such as your name, postal address, email address, phone number, account credentials, profile details, and preferences.
• Support communications: information included when you contact customer support, report a problem, or provide feedback.
• Lighting content and configurations: scenes, presets, doodles, schedules, playlists, colour settings, zones, device names, groups, household settings, and similar configurations you create or save.
• Community content: presets, names, descriptions, images, comments, or other material you submit to shared or community areas of the Service.
• Sharing information: information needed when you share equipment, transfer a device, or invite another person to access a household or device.

Information collected from devices and use of the Service

• Connected-light information: device identifiers, controller or chip information, device model, firmware version, MAC address, IP address, QR-code data, zone and light configuration, sensor settings, and device status.
• Network and connection information: Wi-Fi network details and lists, SSID, BSSID, IP address, mobile-network information, signal strength, Bluetooth or local-network status, and information needed to discover, configure, connect to, and operate lighting devices.
• App and device information: mobile-device type and manufacturer, operating-system type and version, app version, language, locale, time zone, screen resolution, settings, push-notification identifier, Android ID, IMEI, IMSI, and other identifiers used for app operation and security.
• Usage and web-log information: screens and features used, commands sent to connected lights, schedules applied, interactions with community presets, timestamps, referring and exit pages, searches, and activity within the Service or across other apps, websites, devices, or online services.
• Diagnostics: crash reports, performance information, error logs, locally stored crash information, and troubleshooting data.
• Installed-app and storage information: installed-app lists and images, files, or other content in device storage when access is permitted and needed to upload content, select a profile image, publish information, or record diagnostic information.
• Sensor information: information from device sensors, such as accelerometer, gyroscope, orientation, geomagnetic, gravity, and similar sensor data, when used for device positioning, interface orientation, or related Service functions.
• Microphone input: if you enable an audio-reactive lighting feature, the app may use microphone input to analyze ambient audio and control lighting effects. This analysis is performed on your device.
• Approximate, precise, or dynamic location: when required by your device’s operating system or enabled features for Bluetooth or Wi-Fi discovery, device positioning, sunrise/sunset schedules, time-zone settings, or location-based automation. The permission request shown by your device will describe the access requested.

Information from connected services and technical providers

If you choose to connect a third-party service, such as a voice assistant, we may receive information needed to link the service and process your commands. The third party’s own privacy policy also applies to its handling of your information.

The Service may use third-party infrastructure, push-notification, crash-reporting, device-connectivity, and storage components, including services provided by Amazon Web Services, ESP RainMaker, Flutter, and related technology providers. Depending on how these components are configured, they may automatically collect device, network, location, sensor, diagnostic, and usage information described above. Lumi Lighting does not offer Google or Apple account sign-in.

2. Device Permissions

Depending on your device and the features you use, Lumi Lighting may request access to Bluetooth, nearby devices, local networks, Wi-Fi information, location, notifications, camera, photos, device storage, sensors, or the microphone. These permissions may be used to discover and configure lights, scan QR codes, position devices, support automations, send alerts, adjust content to device orientation, let you select or upload content, record diagnostic information, or provide audio-reactive lighting effects. Microphone analysis for audio-reactive lighting is performed on your device. Normal audio output may use your device’s speaker.

You can manage permissions in your device settings. Disabling a permission may prevent related features from working.

To maintain device connections, receive push notifications, and provide device-status updates, the app may start automatically, activate associated technical services, or continue limited activity while closed or running in the background, as permitted by your device and operating-system settings.

3. How We Use Information

We may use information to:

• provide, operate, maintain, and improve the Service;
• create and manage accounts;
• discover, connect, configure, monitor, and control lighting devices;
• save and apply scenes, presets, doodles, zones, schedules, and other settings;
• provide intelligent schedules, including sunrise, sunset, calendar, or holiday-based automations selected by you;
• enable household management, equipment sharing, and equipment transfer;
• operate the preset community and display content you choose to share;
• connect third-party services at your request;
• provide support and troubleshoot technical issues;
• send service, security, and account communications;
• prevent fraud, misuse, security incidents, and violations of our User Agreement;
• analyze performance and understand how the Service is used; and
• comply with legal obligations and protect our rights, users, and the public.

4. How We Share Information

We may share information in the following circumstances:

• Service providers: with hosting, push-notification, analytics, communications, customer-support, crash-reporting, device-connectivity, security, and technical service providers that process information for us. We and these providers may collect information about your activity over time and across other apps, websites, devices, or online services for analytics, Service operation, security, and improvement.
• At your direction: when you share a device, household, preset, or other content, connect a third-party service, or otherwise ask us to disclose information.
• Community areas: content you publish to the preset community may be visible to other users. Do not publish personal or confidential information.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction.
• Legal and safety reasons: when we reasonably believe disclosure is necessary to comply with law, respond to lawful requests, enforce our agreements, investigate misuse, or protect rights, property, or safety.

We do not sell personal information for money. However, the collection or disclosure of information about activity over time and across other apps, websites, devices, or online services may be considered a “sale,” “sharing,” or targeted or cross-context behavioural advertising under certain privacy laws. Where required, we will provide applicable notice and choices concerning these practices.

5. Community Features

Presets and other content submitted to public or shared areas may be viewed, copied, applied, or adapted by other users as allowed by the Service. Your account name or other profile information may appear with your submissions. Content may remain in backups or in copies made by other users after you remove it.

6. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of information and why it was collected.

After you cancel your account or submit a verified account-deletion request, we will clear personal information associated with the account within seven working days. Some information may remain temporarily in backups or be retained where required for security, fraud prevention, legal compliance, dispute resolution, or legitimate business records.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no system or transmission method is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and maintaining the security of your network, phone, controllers, and connected lights.

8. International Data Transfers

We and our service providers may process information outside your province, state, or country. Privacy laws in those locations may differ from those where you live. Where required, we use appropriate safeguards for international transfers.

9. Your Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; withdraw consent; object to or restrict certain processing; or complain to a privacy regulator.

You may also:

• update available account information in the app;
• change device permissions through your operating-system settings;
• disconnect linked third-party services;
• remove community content using available controls; and
• request account deletion through any deletion controls made available in the app or by contacting us at support@whiteravenbrands.com.

To submit a privacy request, contact us using the details below. We may need to verify your identity before completing the request. Rights and exceptions vary by jurisdiction.

10. Children’s Privacy

The Service is not directed to children under 13, or the minimum age required by local law, and we do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. Third-Party Services and Links

The Service may integrate with or link to third-party products and services. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy or security practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy as the Service or legal requirements change. We will post the updated policy and revise the effective date. If changes are material, we will provide additional notice where required.

13. Contact Us