Privacy Policy — LumiYah
Last updated: 10 September 2026 — Lire en français
LumiYah respects the privacy of its users and is committed to protecting the personal data processed as part of the service.
1. Data we process
Depending on the features you use, LumiYah may process:
- the authentication credentials required by the platforms you connect (access and refresh tokens);
- the technical identifier of your connected account, together with the display name, username and avatar returned by the platform;
- the choices you make when creating a video — the song, the verse, the passage of music and the artwork, including any picture you upload;
- the caption you write and the audience setting you choose;
- a record of the publications you have made through the service, so that you can see their status.
LumiYah does not collect your TikTok password. Authentication happens on TikTok's own website, and LumiYah only receives the authorisation you grant there.
You never upload music to LumiYah: the songs come from our own catalogue. You may optionally upload a picture of your own to use as the background of a video — it is stored privately, visible only to you, and used solely to build the videos you ask for. Apart from that picture and the caption you write, you author no content on the service.
2. How we use this data
This data is used only to:
- operate the service;
- authenticate the accounts you have connected;
- prepare and publish the content you explicitly ask to publish;
- show you the status of your publications;
- keep the service secure and reliable.
Your data is never used for advertising, profiling or automated decision-making.
3. TikTok
When you connect your TikTok account, LumiYah uses TikTok's services and APIs strictly within the permissions you granted. Data received from TikTok is used only for the authorised features of LumiYah, and is never shared with third parties.
4. Storage and security
Access and refresh tokens are encrypted at rest, are never displayed in the interface, and are never written to logs. Data is stored on a server located in the European Union, in storage that is not publicly accessible.
5. Retention and deletion
Data is retained only for as long as necessary to operate the service or to meet applicable legal obligations.
When you disconnect your account, LumiYah revokes the authorisation with the platform and deletes the tokens it holds for that account. You can request the deletion of all data associated with your account by writing to the contact address below; we will action the request without undue delay.
6. Sharing
LumiYah does not sell personal data. Some data is transmitted to the platforms necessary for the service to work — for example the video and caption sent to TikTok — but only when you have explicitly asked for that publication.
7. Your rights
Under the GDPR you have the right to access, correct, export and delete your personal data, and to withdraw your consent at any time. To exercise these rights, contact us at the address below.
8. Contact
For any question about this policy or about your data: