Privacy & Cookies Policy

This Policy explains how WOOPICX SPÓŁKA Z O.O., Aleja Armii Ludowej 6/164, 00-571 Warsaw, Poland (KRS 0001176902, NIP 7011263646) (“Lumi-Numi”, “we”) processes personal data when you visit https://lumi-numi.com, pre-order or use the Lumi-Numi device and its services. We are the data controller. Contact: [email protected].

1. What we collect and why

• Website analytics — pages viewed, referrer, device and browser type, approximate country, session events. Purpose: understand how the site is used and improve it. Legal basis: consent for analytics cookies; anonymous, cookie-free measurement on legitimate interest.
• Pre-orders — e-mail address, quantity, and (when payments open) name, shipping address and payment status. Purpose: to reserve, deliver and support your order. Legal basis: performance of a contract.
• Device and services — when you use voice features, audio recorded after the wake word is sent to our server and third-party AI providers to produce an answer, and is not kept longer than needed to answer (unless you opt in to help improve the Product). Paired-phone notifications are shown on the device and are not stored by us. Smart-home links use the tokens you provide only to execute your commands. Legal basis: performance of a contract / consent.
• Support — what you write to us and your order number. Legal basis: legitimate interest in answering you.

2. Cookies and similar technologies

• Essential — needed for the site to work (e.g. your cookie choice, checkout state). Always on.
• Analytics — Google Analytics 4 (Google Ireland Ltd.), PostHog (PostHog Inc., EU cloud) and our own analytics shortid.me. Set only after you press “Accept all” in the banner; “Reject all” keeps measurement anonymous and cookie-free (Google Consent Mode).
• Advertising — we do not use advertising cookies at this time.

You can change your choice any time by clearing site data in your browser and reloading the page; the banner will ask again.

3. Who we share data with

Processors acting on our instructions: hosting and CDN (Cloudflare), analytics (Google, PostHog, shortid.me), e-mail delivery, payment provider (when payments open — they see card details, we don’t), AI/speech providers for voice features, and carriers for shipping. Some providers are outside the EEA; transfers rely on the EU Standard Contractual Clauses or adequacy decisions. We do not sell personal data.

4. How long we keep data

• Analytics: up to 14 months (GA4 default), PostHog per project settings.
• Pre-order and order data: for the life of the order and as long as tax and consumer law require (up to 6 years in Poland).
• Voice audio: deleted after the answer is produced, unless you opted in to help improve the Product.
• Support correspondence: up to 3 years.

5. Your rights

Under the GDPR you may ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; you may withdraw consent at any time (this does not affect processing before withdrawal). Write to [email protected]. You may also complain to your supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).

6. Children

The Website and pre-orders are for adults. The device may be used by children under a parent’s supervision; we do not knowingly collect children’s data.

7. Changes

We may update this Policy; the current version is always on this page with the date above. Material changes will be announced on the Website.