Cookies & Local Storage Notice
The website uses no cookies, and the web app uses browser storage only to keep you signed in and work offline. No ad cookies, no cross-site tracking.
This notice is part of our Privacy Policy. It explains how Zhixike Technology (Guangzhou) Co., Ltd. (“XicoAI”, “we”, “us”) uses cookies and browser storage on the Lumi website (lumi.xicoai.com) and in the Lumi web app (/app/), and how you can manage them.
In short: the website uses no cookies, and the web app uses only the browser storage it needs to work. We use no advertising cookies and do no cross-site tracking.
1. What cookies and local storage are
A cookie is a small piece of text a website stores in your browser, which the browser sends back to the site on later visits. localStorage and IndexedDB are two other kinds of storage built into browsers. Data kept there stays in your browser and is not sent with requests unless the page reads it and sends it. In this notice, we call all of these “browser storage”.
2. The website
On the public pages of lumi.xicoai.com (such as the home page, pricing, help center and legal documents):
- we use no cookies at all;
- we use no analytics tools and load no third-party scripts, and we host our fonts ourselves, so visiting the website doesn’t make your browser contact any other company’s servers;
- the one exception: when you switch the currency used to show prices, we save your choice in your browser’s localStorage so prices appear in the same currency next time. This stays in your browser and is never sent to us.
Like any website, our web server keeps access logs for security and troubleshooting; see section 3.6 of the Privacy Policy.
3. The web app
The Lumi web app works offline, so it needs to keep some data in your browser:
| Technology | Purpose | What is stored | How long | Type |
|---|---|---|---|---|
| IndexedDB | Offline use and fast loading | A local copy of your Lumi data and changes not yet synced | Until you sign out (signing out deletes it) or clear your browser data | Strictly necessary |
| localStorage | Keeping you signed in | Short-lived sign-in credentials and a device identifier | Cleared when you sign out | Strictly necessary |
| Cookies | Sign-in flow | Information needed to keep the sign-in session going and to secure the sign-in flow | Used only during sign-in, then expire | Strictly necessary |
This storage serves only your own use of Lumi. It is not used for analytics, advertising or tracking. The local copy contains the same data as your account, so protect your device as you would your account, and after using a public or shared computer, sign out and clear local data.
3.1 Cookies set by third parties on their own domains
When you choose to sign in with Google, Apple, WeChat or QQ, you authorize on that service’s own pages, and it sets cookies on its own domain. Likewise, when you go to Stripe, WeChat Pay or Alipay to pay or manage your subscription, those payment services use cookies on their own domains, for example to prevent fraud. These cookies are controlled by those companies under their own privacy policies, and Lumi cannot read them.
4. The Apple apps
Lumi’s iPhone, iPad and Mac apps (coming soon to the App Store) don’t use cookies to track you. To work offline, the apps keep a local copy of your data on your device, in the app’s own storage. You can also lock a journal so that opening it requires Face ID, Touch ID or your device passcode. On iPhone and iPad, deleting the app also deletes this local data.
5. What we don’t use
- Advertising cookies, retargeting pixels or any other advertising technology;
- tracking across websites or apps;
- device fingerprinting;
- social media plugins, or any third-party script that tells other companies about your visit.
6. Usage analytics
Today, neither the website, the web app nor the Apple apps use any analytics or crash-reporting tool. If we ever add product analytics to the web app, it will record only behavior (such as which feature you used), never your content, and may store a randomly generated identifier in browser storage. Before adding it, we will update this notice, the Privacy Policy and the Third-Party Sharing & SDK List, announce the change, and give you a switch in the web app’s settings to turn it off.
7. Managing and clearing storage
- Sign out: signing out of the web app clears your sign-in credentials and deletes the local copy of your data in that browser.
- Clear browser data: you can clear cookies and site data for lumi.xicoai.com in your browser’s settings. The exact steps vary by browser; look under Privacy, Site Settings, or Cookies and Site Data.
- Block storage: you can block lumi.xicoai.com from using cookies or site data, but the web app will then be unable to keep you signed in or work offline. The website still works; it just won’t remember your currency choice.
Please note: before clearing browser data, check that the web app shows “Synced”. Changes made offline that have not synced yet exist only in your browser and cannot be recovered once cleared.
8. Do Not Track and Global Privacy Control
We don’t track you across websites, and we don’t sell or share your personal information for advertising, so we handle your data the same way whether or not your browser sends a Do Not Track or Global Privacy Control (GPC) signal. We treat a GPC signal as a valid opt-out request.
9. Updates and contact
When the technologies we use change, we will update this notice first, and for material changes we will notify you as described in the Privacy Policy. Questions are welcome at support@xicoai.com with “Personal Information Protection” in the subject line.