Privacy policy.

Who we are

Luma Club is operated by Outpace Performance Ltd. Contact appstore@outpaceperformance.io for privacy questions or requests.

Optional accounts

When you create an account, we store your email address, display name, a randomly generated account identifier, creation time, and secure one-way hashes of your password and recovery code. We do not store readable passwords or recovery codes. Your email is an account identifier; we do not send marketing messages.

We store a hashed session token and its expiry on our account service. The app stores your session token in the iPhone Keychain. Sessions expire after 30 days. Account recovery invalidates existing sessions.

We use this information to provide the account service you request, based on performance of our contract with you. You can play every game as a guest without supplying these account details.

Gameplay and tracking

Credits and session statistics are held on your device and are not sent to our account service. Credits reset to 1,000,000 each visit. Luma Club has no advertising, analytics SDKs, cross-app tracking, purchases or redeemable prizes. We do not sell personal information.

Hosting and security

Hostinger hosts our website and account service. Requests necessarily include technical information such as IP address, browser or device networking information, requested resource and time. Hosting providers may retain access and security logs. Our account service temporarily stores hashed rate-limit identifiers derived from an IP address or email, with a 15-minute expiry, to prevent abuse.

We use encrypted HTTPS connections, password hashing, limited-lived sign-in tokens and access controls to protect the service. Security processing is based on our legitimate interest in operating and protecting our services. Service providers may process information outside your country under applicable safeguards. See Hostinger’s privacy information.

Retention and deletion

Account information is kept until you delete your account. In the app, use Profile → Delete account. This removes the account and active sign-ins from the live database. Hosting backup copies may remain until they expire under the provider’s backup cycle. We do not use backup copies for normal account access.

To request deletion without the app, email us from your registered address. We may verify account ownership to protect you. We keep support correspondence only as long as necessary to resolve your request and meet relevant legal or security obligations.

If you contact us

We receive the email address, message and attachments you choose to send. We use these to answer your request and investigate reported problems, based on our legitimate interests in providing support. Never send passwords or recovery codes.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, or request a portable copy of your information. Contact us to exercise these rights. You may also complain to your local data protection authority; in the UK, this is the Information Commissioner’s Office.

Adults only

Luma Club is intended for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us so we can investigate and delete it where appropriate.

This website and Apple

This website uses no tracking pixels, embedded analytics or non-essential cookies. Apple independently operates the App Store and may process information under Apple’s privacy policy. We may disclose information if required by law.

If our practices change, we will update this page and its effective date, and the app’s privacy information where relevant.