1. Summary
LumaForm is an offline home fitness application. It does not send the developer or any third party personal data, health data, workout data, identifiers, analytics, diagnostics, or advertising data. It has no account, ads, cloud service, or network feature.
Information entered or created in LumaForm is processed only on your device to plan workouts, operate sessions, and adapt future sessions. You can erase it at any time from Settings > Delete all local data. Uninstalling LumaForm also removes its app data. LumaForm excludes its local records from Android cloud backup and device-to-device transfer.
2. Information processed on your device
Depending on how you use LumaForm, the app stores and processes some or all of the following locally:
- app settings, language, onboarding completion, safety-notice acknowledgement, and whether optional lower-limb alignment exercises are enabled;
- an equipment profile, including the locally assigned names and stable identities of weights, resistance bands, supports, and a pull-up bar;
- planned and completed sessions, exercise variations, sides, support level, range of motion, tempo, rest, sets, repetitions, loads, bands, holds, and completion status;
- one-tap effort and exercise-quality feedback, substitutions, repeatedly rejected exercises, and preferences inferred from those choices;
- exercise setup, work, and rest timing, including recent and rolling typical duration;
- local estimates of strength, endurance, mobility, balance, coordination, foot and ankle control, knee control, hip stability, trunk capacity, side-to-side differences, exercise prerequisites, and progression readiness;
- results of occasional calibration sets inside ordinary workouts; and
- the selected readiness mode: Hyped, Normal, or Tired.
When you select Tired, LumaForm treats that choice as a menstruation-aware signal when scaling the session. The selected mode may remain in session history so a lower-output session is interpreted in context. LumaForm may therefore hold a local, dated record that it interpreted as menstruation-related. It does not ask for bleeding dates, maintain a menstrual calendar, track cycle phases, predict a period or ovulation, or provide fertility features.
These records can constitute health and fitness information. They stay in LumaForm's private app storage and are not transmitted off your device.
3. How local information is used
LumaForm uses local information only to generate and time an appropriate home strength and mobility program; choose exercises, regressions, progressions, loads, assistance, support, repetitions, sets, controlled range, tempo, and rest; apply the selected readiness mode; preserve useful anchor exercises; rotate compatible accessories and mobility; respect the session time budget; match unilateral work to the priority side; support optional alignment-control programming; choose equivalent substitutions; reduce the frequency of rejected exercises; decide when a small progression, regression, or ordinary calibration set is appropriate; show local history; and continue an interrupted session.
There is no automated decision with a legal or similarly significant effect. All adaptation concerns only workouts displayed inside the app.
4. No app-data collection, sharing, sale, advertising, or tracking
LumaForm does not transmit app data off your device. Bad Luck Studios therefore does not collect, receive, sell, rent, share, or use LumaForm data for advertising, analytics, profiling across apps, credit or insurance decisions, research, or marketing.
The app contains no advertising, analytics, crash-reporting, social, or tracking SDK. It does not use tracking pixels, remote fonts or images, third-party sign-in, or the Android advertising ID. It does not use Health Connect or connect to wearable devices, medical devices, or external fitness services.
Android and the store from which you install LumaForm may independently process download, licensing, security, or system-level crash and performance information under their own terms, privacy notices, and device settings. Depending on the platform and its settings, Bad Luck Studios may be able to view aggregated or anonymized platform reports in the distribution console. That platform processing is not a LumaForm analytics or crash-reporting integration, and LumaForm does not attach its local workout records to it.
LumaForm has no database export or social-sharing feature.
The public policy website at https://lumaform.badluckstudios.com/privacy/ is a separate static website delivered through Cloudflare. When your browser requests it, Cloudflare necessarily processes ordinary request, connection, and security metadata—such as your IP address, requested URL and time, browser or user-agent information, network and TLS details, and security events—to deliver, protect, and operate the page. This processing is separate from the LumaForm app and is subject to Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.
Bad Luck Studios has not added first-party analytics, advertising, tracking pixels, forms, accounts, cookies, or browser local storage to that website. Cloudflare may use essential security technologies under its own terms. The website receives no workout records or other data from the LumaForm app. Viewing the policy bundled in LumaForm does not contact Cloudflare or make a web request.
5. Permissions and device access
LumaForm does not request Internet, location, physical-activity, body-sensor, camera, microphone, Bluetooth, contacts, calendar, phone, SMS, notification, or shared photo, media, or file permission. It does not scan your body or monitor activity outside a workout that you operate in the app.
The app uses ordinary Android capabilities for app-private storage, on-screen timers, haptic feedback where enabled, and keeping an active workout visible. These capabilities do not give the developer access to your records.
6. Storage and security
Local records are stored in LumaForm's app-private storage and protected by Android's application sandbox and your device's security controls. The app's backup rules exclude these records from Android cloud backup and device-to-device migration. LumaForm does not create a cloud copy accessible to the developer.
You control physical access to your device. We recommend using an Android screen lock, installing system security updates, and not sharing an unlocked device when you want the records to remain private. No storage method can guarantee absolute security on a compromised, rooted, or unlocked device.
7. Retention and deletion
LumaForm keeps a bounded local history. As new entries are saved, it may automatically remove older detailed sessions, set observations, and development decision-log entries. Derived capability and exercise estimates can remain because they are used to adapt future workouts.
Information that has not already been pruned remains on your device until you choose Settings > Delete all local data or uninstall LumaForm. Delete all local data removes sessions, readiness modes, performance and calibration results, capability estimates, timing, equipment, preferences, rejection history, and onboarding choices. Clearing LumaForm's storage in Android system settings also resets the app.
LumaForm has no account and sends no data to Bad Luck Studios, so there is no remote account or server record for the developer to delete. Deleted local information cannot be recovered through LumaForm.
8. Email and support
LumaForm does not send support messages itself. If you independently email office@badluckstudios.com, your email address, message, and attachments are handled by your email provider and ours outside the app. We use them only to answer, troubleshoot, protect the service, or meet a legal obligation. Do not send health details that are unnecessary for your question.
Support correspondence is not connected to on-device LumaForm records. It is normally deleted within 24 months after the last support interaction. It may be kept longer only when reasonably necessary for security, an unresolved dispute, or a legal obligation. It is not sold or used for advertising. It may be processed by the email provider or disclosed where legally required.
9. Adults and children's privacy
LumaForm is designed for adults aged 18 and over and is not directed to children. It has no account and transmits no information from any user. If you believe a child sent personal information in a support email, contact office@badluckstudios.com so the message can be reviewed and deleted where appropriate.
10. Health and exercise notice
LumaForm provides general fitness education and training guidance. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It is not a substitute for medical advice, diagnosis, or treatment.
Consult a qualified healthcare professional for medical advice, diagnosis, or treatment and before exercising with an injury, persistent or significant pain, pregnancy, a recent operation, or another condition that may affect exercise. Stop and seek appropriate help for sharp or worsening pain, dizziness, faintness, unusual shortness of breath, numbness, or loss of control. Tired mode only changes workout programming; it is not menstrual or medical advice. LumaForm is not an emergency service.
11. International transfers
LumaForm does not transfer app or workout data to Bad Luck Studios or across borders. Website request and security metadata may be processed in countries where Cloudflare operates under its privacy policy. An email you choose to send outside the app may be processed in countries used by your and our email providers under their terms and notices.
12. Changes
This policy may change when LumaForm's features or legal obligations change. A new version will show a revised effective date and be available in the app and at https://lumaform.badluckstudios.com/privacy/. Disclosures and required consent will be updated before any release starts transmitting data or materially changes health-data use.
13. Contact
Bad Luck Studios office@badluckstudios.com