Privacy Policy for Lumaq Last updated: June 16, 2026 Overview Lumaq ("we", "our", or "the app") is a mobile Mixpanel client that lets you view events from your Mixpanel projects on your iPhone. We do not operate a backend server. All project configuration and credentials are stored locally on your device. Data We Collect Lumaq does not collect, transmit, or store your personal information on any external server operated by us. The app does not require account registration or login. Data Stored on Your Device The following data is stored locally on your device only: • Project names and Mixpanel project IDs • Selected API endpoint (US or EU) • Mixpanel service account credentials (username and password) • Premium subscription status Non-sensitive project metadata is stored using AsyncStorage. Sensitive Mixpanel service account credentials are stored using Expo SecureStore, which uses the iOS Keychain to encrypt credentials at rest. Credentials are never stored in plain AsyncStorage. Mixpanel API Communication When you use Lumaq, the app communicates directly with Mixpanel's API endpoints (data.mixpanel.com or data-eu.mixpanel.com) using your service account credentials. This communication occurs between your device and Mixpanel only. Lumaq does not proxy, log, or intercept this traffic. In-App Purchases Premium subscriptions are processed entirely through Apple's App Store using StoreKit. We do not receive or store your payment card information. Apple provides us with subscription status information necessary to unlock premium features. Subscription management is handled through your Apple ID account settings. Third-Party Services Lumaq integrates with: • Mixpanel — for event data retrieval • Apple App Store — for subscription billing Please review Mixpanel's and Apple's respective privacy policies for information about how they handle data. Data Retention and Deletion All locally stored data can be deleted by removing projects within the app or uninstalling Lumaq. Deleting a project removes its credentials from SecureStore immediately. Security We take reasonable measures to protect your credentials on-device by using iOS Keychain-backed secure storage. However, you are responsible for safeguarding your device and Mixpanel service account credentials. Do not share service account secrets with untrusted parties. Children's Privacy Lumaq is not directed at children under 13 and we do not knowingly collect information from children. Changes to This Policy We may update this privacy policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy. Contact For privacy questions regarding Lumaq, contact us through the App Store listing or the Lumaq support page on Ekofi Support: https://support.ekofi.capital/lumaq