Privacy Policy

Lumina Gates

A gates & mandalas meditation experience


Applies to
The Lumina Gates Android app, package name com.luminagates.app, published on Google Play
Developer
Yossef Shoshani
Contact
yossish56@gmail.com
Effective
August 13, 2026
In short: Lumina Gates has no sign-up, no login, and no user accounts. It does not collect your name, email, or contacts. The only data it handles beyond your device is what's strictly necessary to verify a one-time Google Play purchase and unlock the content you paid for.

01Information we collect

Lumina Gates does not have a registration or login system. There is no username, password, or user profile anywhere in the app. Most of what the app does — browsing gates, portals, and mandalas, and running the meditation timer — happens entirely on your device and involves no personal data at all.

We do not collect

What the app stores on your device only

The following stays on your device and is never transmitted to us:

Uninstalling the app, or clearing its storage in your device's Settings, removes all of this immediately.

If you choose to contact us

The in-app Feedback form opens your own device's email app with a message pre-filled — it does not send anything through our servers. Whether you actually send that email, and what your email app or provider does with it, is entirely up to you and them, governed by your own email provider's privacy policy.

Fonts

The app's typography is served through Google Fonts, which may load font files from Google's servers as part of normal app operation. See Google's own privacy policy for how that connection is handled.

02Google Play Billing

Lumina Gates includes free content and one piece of paid content: a single, permanent unlock for five premium meditation categories, purchased once with no recurring charge or subscription.

That purchase is handled entirely by Google Play's billing system. When you tap "Unlock," Google — not Lumina Gates — presents the payment screen, processes the transaction, and stores your payment method. We never see, receive, or store your card number, bank details, or billing address. Google Play's own handling of that information is governed by Google's Privacy Policy and the Google Play Terms of Service.

What the app does receive from Google Play after a purchase is a purchase token and a product ID — technical identifiers used only to confirm the purchase is genuine, described next.

03Server-side purchase verification

To make sure a purchase is real — and can't be faked by tampering with the app — Lumina Gates verifies every purchase against Google directly, rather than trusting the app's own word for it.

  1. After a purchase (or when restoring one on a new device), the app sends the purchase token and product ID to our backend function.
  2. That function calls the Google Play Developer API, server-to-server, to confirm the token is genuine and the purchase is in a valid, paid state.
  3. Once confirmed, the function acknowledges the purchase with Google and records the verification outcome.
  4. Only then does the app unlock the premium content.

A purchase that Google reports as pending, canceled, or invalid never unlocks anything.

Restore Purchases uses this exact same verification step. Google Play itself already knows which purchases belong to your Google account, on any device — we simply re-confirm that purchase with Google each time, the same way as a first-time purchase.

04Supabase & backend services

Lumina Gates uses Supabase (supabase.com) as its backend, for two distinct purposes:

PurposeWhat's storedLinked to you?
App content Public gate, portal, and mandala text and imagery No — read anonymously, the same for every user
Purchase verification record (§3) Purchase token, product ID, package name, order ID, purchase state, acknowledgement status, and the verification timestamp No — indexed only by the purchase token Google Play issues, not by your name, email, or any account

There are no user accounts inside Supabase for this app. The purchase-verification record is written and read only by a server-side function using a private key that never leaves our backend — the app itself has no direct access to that table, and neither does the public.

05Data sharing & third parties

We work with the following third-party services to operate the app. We do not sell your data, and we do not share any data with advertisers or data brokers.

ServiceRoleTheir policy
Google Play Billing, purchase verification (Google Play Developer API) policies.google.com/privacy
Supabase Backend hosting for app content and purchase records supabase.com/privacy
Google Fonts Delivers the app's typefaces policies.google.com/privacy

The app does not integrate any analytics, advertising, or crash-reporting SDKs.

06Data security

No method of transmission or storage is ever 100% secure. If you believe you've found a security issue, please contact us using the details in §12.

07Data retention & deletion

On your device

Favorites, viewed-content markers, and cached unlock status remain on your device until you uninstall the app or clear its storage yourself — entirely within your control, at any time.

On our backend

Purchase verification records are kept for as long as reasonably needed to support your purchase (for example, if Restore Purchases needs to re-confirm it later) and to meet standard financial record-keeping practice. Because these records are deliberately not linked to your name or email, we can only locate a specific record if you provide the associated order ID or purchase token when requesting its removal — contact us at §12 and we'll act on it.

Your Google Play purchase history itself is retained by Google under its own policies and is visible to you directly in your Google Play account, independent of anything we do.

08Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data held about you (for example, under GDPR or CCPA). In practice, for Lumina Gates that means:

To exercise any of these, contact us at the address in §12.

09Children's privacy

Lumina Gates is not directed at children under 13 and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, contact us and we will remove it promptly.

10International data

Our backend infrastructure (Supabase) processes data in its hosted regions. Where data is transferred internationally, we rely on our provider's standard safeguards for cross-border data transfer. Given how little personal data this app handles in the first place, the practical impact of this is minimal.

11Changes to this policy

If this policy changes, the updated version will be posted at this same URL with a revised "Effective" date above. We encourage checking back periodically. Continued use of the app after a change constitutes acceptance of the updated policy.

12Contact us

Questions, requests, or concerns about this policy or your data:

Yossef Shoshani
yossish56@gmail.com