Lumen

Lumen

Your thoughts, sealed in light.

Lumen is a private journal for iPhone. What you write is encrypted on your device before it goes anywhere, with keys that stay on the device. Space Impactor cannot read your journal, and neither can Apple.

That is the whole idea, and it has a cost worth stating up front: if you lose your device and your recovery phrase, the journal is gone — for you and for us alike. Lumen asks you to write a recovery phrase down for exactly this reason.

What makes it different

  • Encrypted on the device

    Entries, photos, voice notes, drawings, letters, and your conversations with Lumi are encrypted with AES-256-GCM before they leave the phone. The keys live in the device Keychain, marked device-only and non-syncing.

    Sync, if you want it, runs through your own iCloud account. We operate no servers, so there is no copy of your journal for us to hold, hand over, or lose.

  • A companion that stays on the phone

    Lumi reflects back on what you have written using Apple's on-device foundation model. Your journal text is never sent to us, to Apple, or to any AI provider — there is no server to send it to.

    Lumi is a writing companion, not a therapist or a crisis service, and the app says so plainly where it matters.

  • No analytics. No third-party code.

    No trackers, no advertising identifiers, no crash-reporting SDK, no behavioural profiling, no data sales. There is no privacy setting to hunt down, because there is nothing being collected to switch off.

    The same rule applies to this website: no fonts, scripts, or assets are fetched from anywhere else, and there is no analytics or tracking code in the page. What we cannot promise you is the server — whichever host serves this site keeps ordinary request logs, the same as any website you visit.

  • Circle: small, optional, off by default

    Circle is for the few people you actually choose. It stays off until you claim a username. Only your username and your public keys are public; letters, time capsules, and requests are sealed to their recipient.

    You can block anyone from inside the app. Blocking takes effect immediately on your device, and it does not depend on us.

Where things stand

StatusLumen is not on the App Store yet. There is no download on this page because there is nothing yet to download.

These pages are published ahead of a submission to App Review, which requires a public privacy policy and terms of use before an app can be considered. We intend to ship; we are not going to pretend it has already happened.

Documents and contact

Reports of abusive behaviour in Circle are read and answered; we aim to respond within 7 days. Because Lumen is end-to-end encrypted, we can only act on what a reporter chooses to send us — the Terms set out exactly what that means, including what we cannot do.