Washington Consumer Health Data Privacy Policy
Last updated: 30 September 2026
This policy explains how Calverra Holdings LLC (“we”, “us”) handles consumer health data about Washington consumers through the Luma app, our websites and our quiz, as Washington’s My Health My Data Act requires. Consumer health data is personal information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health.
Consumer health data we collect and why
Entries you create: worries, reflections, thought records, emotional-weather check-ins, gratitude notes, values, goals and habits. We use them to save your entries, show them back to you and provide Luma’s wellbeing tools.
Summaries of your own entries: counts, history and progress shown in the app. We use them to show you your own progress.
AI habit inputs: the goal, reason, target date and value you enter when you ask for AI habit suggestions. We use them to generate the suggestions you asked for.
Account and subscription information: name, email address, sign-in identifier, subscription status and purchase history. Because Luma is a mental wellbeing app, the fact that you use it can itself be consumer health data. We use it to run your account and subscription and to support you.
App use and device information: features used, device and app identifiers, device type, app version, IP address, approximate location based on IP address, and time zone. We use it to run and secure Luma, fix faults, time your reminders, and measure how features are used so we can improve Luma.
Notification information: push notification tokens and reminder settings. We use it to send the reminders you set.
Quiz answers: your answers to our overthinking quiz, your result and your email address. We use them to give you your result and, if you opt in, to send you emails about Luma.
Support messages: anything about your health you include when you contact us. We use them to answer you and resolve your request.
Where we get it
From you, when you use the app, take our quiz or contact us.
From your device, automatically, when you use the app or our websites.
From Apple and Google, when you sign in with them or subscribe through their app stores.
From WorryTree Ltd, which operated Luma before us, for accounts that existed when we took over Luma.
Consumer health data we share, and who with
Apple and Google: account and subscription information and app identifiers, when you sign in with them, subscribe through their app stores or receive notifications through their push services.
Your calendar provider: the title of a worry, if you turn on linked-calendar reminders. You choose the calendar.
Government authorities, courts or others with legal authority: any category, but only when the law requires it.
We have no affiliates that receive consumer health data. We don’t sell consumer health data.
Your rights and how to use them
You have the right to:
Confirm whether we collect, share or sell your consumer health data, and access it. This includes a list of every third party and affiliate we have shared or sold it to, with an email address or online contact for each.
Withdraw your consent to our collecting or sharing it.
Have it deleted. We’ll delete it from our live systems, tell our processors and anyone we shared it with to delete it too, and delete backup copies within 6 months.
To make a request, use our privacy portal or email hello@myluma.app. You can also delete your account in the app under Profile. We’ll verify that the request comes from you before acting on it.
We respond within 45 days of receiving your request. If we need more time, we’ll tell you why within those 45 days, and we may take up to 45 more. Requests are free. We won’t treat you differently for using your rights.
If we refuse your request, you can appeal through the privacy portal or by emailing hello@myluma.app with “Appeal” in the subject line. We’ll tell you in writing within 45 days what we decided and why. If we deny your appeal, you can complain to the Washington State Attorney General at www.atg.wa.gov/file-complaint.
Contact
Calverra Holdings LLC, 2631 Housley Road, PMB 1301, Annapolis, Maryland 21401, United States. Email: hello@myluma.app.