Privacy Policy

1. Who we are

This app and service (“Luma”, “Luma Journey”, “we”, “us”, “our”) is operated by the holder of ABN 74 330 826 281 (“the operator”), based in New South Wales, Australia. You can contact us at hello@lumajourney.com or by post at 59 Liverpool Street, Rose Bay NSW 2029, Australia.

Luma Journey provides general information and organisational tools for people preparing for or undertaking an Australian Working Holiday (subclass 417) or Work and Holiday (subclass 462) visa. We are not a registered migration agent, not a law firm, and not affiliated with the Australian Government or the Department of Home Affairs. We provide information, not immigration or legal advice. See our Terms & Conditions.

We are committed to handling your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Where any small-business exemption might apply, we have chosen to comply with the APPs regardless, because protecting your information is core to how we operate.

2. What personal information we collect

We collect only what we need to provide the service:

• Account information: your email address, and (if you sign in with Google) basic Google account profile information. We store an authentication record but we do not store your password in readable form — authentication is handled securely by our backend provider.
• Profile information you provide during onboarding: your passport country, date of birth (or age), the visa you hold or intend to apply for, your visa year, your intended or actual arrival date, your plans, and any risk-related answers you give. This information is used to personalise your journey, checklists, and the guides we surface to you.
• Optional profile details: your name, a profile photo you choose to upload, and any optional personalisation you add.
• Activity information: which checklist items you complete, which guides you read or save, and any specified-work days you log in the tracker. This data is yours and is used to track your progress.
• Language preference (English or Spanish).
• Technical information: standard information your browser or device sends (such as device type and general usage), used to operate and improve the service.

We do not ask for, or store, payment card details, government ID numbers, Tax File Numbers, passport numbers, or visa application content. Luma is free to use.

3. Sensitive information

Some information you provide (such as your passport country or date of birth) may indirectly relate to nationality or age. We collect this only to determine which visa pathway and information are relevant to you, with your consent given when you provide it during onboarding. We do not use it for any other purpose.

4. How we use your information

We use your personal information to:

• create and manage your account;
• determine which visa stream and journey stage apply to you, and personalise your dashboards, checklists, and suggested guides;
• let you track your own progress and saved guides;
• communicate with you about the service (for example, account or password emails);
• operate, maintain, secure, and improve the service.

We do not sell your personal information. We do not use your personal information to make decisions about your visa — your ImmiAccount and the Department of Home Affairs are the only authorities on your application.

5. Affiliate and partner links

Luma is free and is supported in part by partnerships. Some links in the app (for example, to eSIM, banking, insurance, or accommodation providers) may be affiliate links, meaning we may earn a commission if you use them, at no extra cost to you. We do not share your personal information with these partners unless you choose to engage with them directly, in which case their own privacy policies apply. We will always disclose where a relationship is commercial.

6. Who we share your information with

We share personal information only with:

• Service providers who help us run the app (for example, our cloud backend and authentication provider, which stores your account and profile data on secure infrastructure). These providers process data on our behalf under their own security and privacy obligations.
• Authorities or others where required by law, or to protect our rights, safety, or the safety of others.

Some of these providers may store or process data on servers located outside Australia. Where that occurs, we take reasonable steps to ensure your information is handled consistently with the APPs.

7. How we store and protect your information

Your information is stored on secure, access-controlled infrastructure provided by our backend provider. We use industry-standard measures — including encrypted connections, access controls, and row-level security so that you can only access your own data — to protect your information from misuse, loss, and unauthorised access. No system is perfectly secure, but we take protection seriously. See also our Security & Your Data page.

8. Accessing, correcting, and deleting your information

You can:

• view and edit your profile information in the app’s Account settings;
• delete your account at any time from Account settings — this removes your account and associated personal data from our active systems;
• request access to, or correction of, the personal information we hold about you by emailing hello@lumajourney.com.

We will respond to such requests within a reasonable time, consistent with the APPs.

9. Children

Luma is intended for people eligible for a Working Holiday or Work and Holiday visa (generally aged 18–35). It is not directed at children under 18, and we do not knowingly collect personal information from anyone under 18.

10. Machine-translated content

Some content in the app may be machine-translated (for example, Spanish translations of guides). This Privacy Policy is provided in English; if a translated version is offered and there is any inconsistency, the English version prevails.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version in the app with a revised “Last updated” date. Significant changes will be communicated where appropriate.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first at hello@lumajourney.com so we can try to resolve it. If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.