Privacy Policy

1) What this policy covers

This policy explains what information EMITR collects, how it’s used, and your choices.

2) Information we collect

User-generated content (your creations)

• EMITR’s particle simulations and settings run locally in your browser by default.
• We do not upload or store your particle creations server-side unless you explicitly use a feature that sends data to our servers (for example, account/subscription checks).
• You can delete your creations by clearing your browser storage and/or deleting exported files you saved.

Account information (Firebase Authentication)

• Unique user identifier (Firebase uid)
• Email address (if you provide it via Google or email/password sign-in)
• Display name and profile photo (if provided by your sign-in provider)

Subscription / entitlement information (Firestore + Stripe)

• Plan/entitlement status (e.g., free/pro, subscription status, current period end/cancel status)
• Stripe customer/subscription identifiers used to connect your EMITR account to billing status

We do not store or have access to your payment card details. Payments are processed by Stripe.

Analytics (Google Analytics)

• Usage and device information (e.g., pages viewed, interactions, browser/device, approximate location)
• Identifiers collected via cookies or similar technologies (depending on your browser settings)

App integrity / abuse prevention (Firebase App Check / reCAPTCHA v3)

• Signals used to help determine whether requests to EMITR are legitimate

Local storage

• Small values stored in your browser (localStorage/sessionStorage) for sign-in flow and UI preferences

3) How we use information

• Authenticate you and maintain your session
• Provide features and determine access to paid features
• Process payments and manage billing (via Stripe)
• Measure usage and improve the Service (Google Analytics)
• Protect the Service from abuse (App Check)

4) How we share information

We do not sell your personal information. We share information with:

• Google Firebase (Authentication, Firestore, Hosting, Cloud Functions, App Check)
• Stripe (payments and billing portal)
• Google Analytics (usage measurement)

5) Cookies and analytics choices

You can limit analytics collection by blocking cookies in your browser, using privacy tools/extensions, or the Google Analytics opt-out browser add-on.

6) Your data requests

You can request a copy of the data we have about you by emailing luxlumn@gmail.com.

For EMITR, a typical “copy of your data” includes:

• Your Firebase account info: uid, email (if present), display name (if present), providers used (e.g., Google/email), and sign-in timestamps available to us.
• Your Firestore user record used for entitlements/subscription status (plan, status fields, and Stripe IDs stored in your user document).
• A summary of your current subscription status (active/canceling/expired) and the subscription product interval if available.

Note: Google Analytics data is typically not stored in a way that we can reliably map to an individual EMITR account unless you explicitly configure account-level identifiers in analytics. Stripe retains billing records; we can provide the Stripe IDs we store and your entitlement status, but full payment details are handled by Stripe.

7) Data retention

We retain information as needed to operate EMITR and meet legal obligations.

• Account and entitlement records: retained while your account is active. If you request deletion, we typically process requests within a reasonable period (often within 30 days), unless we need to retain specific records for legal, tax, fraud-prevention, or security purposes.
• Backups: deleted data may remain in backups for a limited time before being overwritten.
• Billing records: Stripe may retain billing records according to its policies and legal requirements.

8) Security

We use reasonable safeguards, but no system is 100% secure.

9) International users (including the EU/EEA/UK)

Legal bases (where applicable):

• Contract performance: to provide EMITR (authentication, account access, entitlements, and requested features).
• Legitimate interests: to secure and improve EMITR (fraud/abuse prevention, troubleshooting, performance, and analytics).
• Consent: where required for certain cookies/analytics depending on your location and settings.

International transfers: EMITR uses services that may process data in the United States and other countries (for example, Google Firebase, Google Analytics, and Stripe).

Your rights: depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To exercise these rights, contact luxlumn@gmail.com.

10) Children’s privacy

EMITR is not intended for children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children.

11) Changes

We may update this policy from time to time. We will update the effective date when we do. For material changes, we may notify users by email and/or by a prominent notice in the app.