Privacy

Last updated 28 September 2026

The short version: we collect what we need to email you about Lumo and to work out which kinds of work to build for first. What you tell us stays in Canada. We don’t sell it and we don’t hand it to anyone else for their own purposes.

If you join the waitlist

We keep:

• your email address
• your first name
• what you do for work
• the date you joined
• which link brought you here, if you came from one — the campaign tag on the link, or the name of the site that linked to us. Never the page you were reading.

It sits in a database in Canada, and it does two things: it lets us email you about Lumo, and it tells us which trades to build for first.

Every email we send has an unsubscribe link. One click and you’re off it. You don’t have to say why.

If you use the tax calculator

The income you type goes to our own server in Montréal, which works out the estimate and sends it back to your screen. We don’t save it, it never reaches your waitlist entry, and it is never sent to Google. Like any request to any website, it passes through our host’s request logs on the way, and those are deleted automatically after a short time.

If you don’t join the waitlist, we hold nothing about you from using the calculator.

If you read the blog

Each post counts how many browsers have opened it. Your browser keeps a note of which posts it has already counted, so reading one twice counts once. All that reaches us is which post — not who you are, not your email, nothing we keep that could tell us it was you. The count is one number per post, kept in Canada. Like any request, it passes through our host’s short-lived request logs on the way.

Website analytics

We use Google Analytics to count visits and see which parts of the page people use. The whole of what it is told about you is:

• which pages you visited, and roughly where in the world you are
• whether you changed anything in the calculator
• whether you opened the waitlist form, and which button opened it
• whether you joined

It is not told the income you type, your email address, your name, your line of work, or the province you pick. That is deliberate, and it is enforced in the code rather than left to care.

Google stores this outside Canada, on its own servers, and uses cookies to recognise a returning browser. If you’d rather not be counted, a content blocker or your browser’s “block third-party cookies” setting will stop it, and nothing on this site stops working.

Session recordings

We also use Microsoft Clarity, which records a playback of the page as you use it — where the pointer went, what you clicked, how far you scrolled, and what the page looked like while you did it. It is how we find the places where the page confuses people, which is hard to work out from numbers alone.

Anything you type is hidden before it leaves your browser — the income in the calculator, your email address, your name, your line of work. So is every dollar figure the calculator works out for you, because hiding what you typed and then recording the answer would protect nothing. In a recording, all of those are blanks.

Microsoft stores this outside Canada. The same content blocker or cookie setting that stops the analytics above stops this too, and again nothing on the site stops working.

Clarity also runs once you sign in to Lumo. There, everything on the screen is hidden, not just what you type.

Sharing an idea or reporting a problem

If you share an idea on the Feedback page, everyone signed in to Lumo can see it, vote for it and comment on it — but not who shared it, who voted, or who commented. If you report a problem, only you and the Lumo team can see it.

Ideas, reports and comments are also copied into Linear, the tool we plan our work in, without your name or email address. For a problem, so we can fix it, that includes your browser and the kind of device — “Safari on iPhone”, nothing more specific. Linear is based in the United States and stores this outside Canada.

We email you when something you shared moves along, and when we reply to you. If you voted for an idea, we email you once, when it’s done. Every one of those has a one-click link to stop them, which turns off only these — never the emails about your account, your password or your plan.

Your ideas, reports, comments and votes are deleted with your account.

Paying for Lumo

Payments go through Stripe. When you pay for a business, or start its free trial, your card details go straight from your browser to Stripe — they never reach us, and we never see your full card number. What we keep, for each business, is which plan you chose, whether it’s active, and when its trial ends and it’s next billed.

Stripe is based in the United States and stores payment details outside Canada, along with your name and email address so it can send receipts.

What we never do

We don’t sell what you tell us, and we don’t pass it to anybody else for their own purposes. The people who see the waitlist are the people building Lumo.

If you have an account, a few of us can see it: your name, your email, the country you file your taxes in and whether you asked to hear when Lumo works there, the setup answers you gave — what kind of business, which province, your year end, whether you’re registered for GST — and, if you answered them, what you’d like Lumo to help with, how you do your bookkeeping now, and how you heard about us. That’s so we can help when something goes wrong, and build what people came for. What you record in Lumo — your income, your expenses, your trips, what you’ll owe — is yours, and nobody here can open it.

How long we keep your records

While you’re paying for any business in Lumo, everything you’ve recorded stays, and you can read it all — including businesses you’ve stopped paying for.

Once you’re not paying for any, we keep your records for 12 months after the last subscription ended, so you can get through the next tax season with them. Then we delete your account and everything in it, and remove what Stripe holds about you where it lets us. We email you about 30 days and again 7 days before, with the date. Starting a subscription again before then keeps everything, and you can delete your account yourself at any time from Account settings.

Getting your information back or deleted

Email hello@lumoapps.ca and ask. We’ll tell you what we hold, or delete it, whichever you want. No form, and no reason needed.

One honest limit on that. The analytics and the recordings are not attached to your name or your email — they are counts and playbacks of an anonymous browser — so there is no way for us to find yours among them and remove it. What stops those being made in the first place is a content blocker, and that works whether or not you ask us anything.

If this changes

The date at the top changes with it. If a change matters to anyone already on the waitlist, we’ll email rather than quietly edit the page.

Asking us something

hello@lumoapps.ca. A person reads it.