A little further,
every time.

Correction on 2026-10-04: current backups are local to the production server and retained on a rolling schedule. Amazon S3 off-site backups are not enabled. The historical statement below about encrypted daily backups and roughly 30-day retention does not describe the current deployment.

Before our version 1.0 legal documents take effect on October 1, we checked every sentence against how Lumi actually works, and updated the Privacy Policy, Personal Information Collection List, Third-Party Sharing & SDK List, Delete Your Account, AI Service Terms, Terms of Service, Cookies Notice and our Security page to match. The documents are still version 1.0, and the effective date hasn’t changed.

How your content is stored

Your content is stored on our servers in Tokyo, Japan (AWS) and protected by strict access controls. It has no additional application-layer or end-to-end encryption, and our admin console has no screen that shows it. The database, attachments and feedback screenshots are backed up daily with encryption and the backups are deleted after about 30 days. Calendar authorizations, iCloud app-specific passwords and Sign in with Apple tokens are encrypted with a key unique to you.

Logs, analytics and location

Web server access logs keep only a truncated IP address, no user agent, and are deleted after 14 days. Neither the web app nor the Apple apps include event tracking or crash reporting. Lumi never gets your location in the background and saves only places you add yourself; location data is removed from photo and video files before they’re stored.

Users in mainland China

If you use Lumi in mainland China, Lumi asks for your separate consent to the cross-border transfer before anything you create is uploaded. AI requests from users in mainland China are handled only by DeepSeek, a domestically filed model, and pass through a keyword content filter.

Account deletion and AI labels

When you delete your account, we delete all of your data and files and revoke your calendar integrations and Lumi’s Sign in with Apple authorization. When you export your data, AI-generated content is labeled “AI-generated”.

Questions are always welcome at support@xicoai.com.

Today, Lumi takes its first step.

The website is live

lumi.xicoai.com is now live in Simplified Chinese, English and Traditional Chinese. It’s the place to explore Lumi’s features and read how we treat your data.

Lumi for the web opens in early access

Lumi for the web opens today in early access. It’s an early version: features will arrive in stages, and there will be rough edges along the way. Thank you for coming to take an early look.

iPhone, iPad and Mac

Our three Apple apps are in development and coming soon to the App Store.

Pricing and legal documents

Membership and token prices are published on the pricing page. Our privacy policy, terms of service and the other version 1.0 legal documents are published too, effective October 1, 2026. Find them all under Legal.

Tell us what you think

If something isn’t working or you have an idea, write to support@xicoai.com. We read every message carefully.