Privacy Policy
Last updated: 10 November 2026
Lumoji keeps your messages private with end-to-end encryption and stores only what it needs to run your account. This policy explains what that means in practice.
The short version
Lumoji stores the minimum needed to run your account: a device identity, your profile name and emoji, your messages and your settings. 1:1 and group messages are end-to-end encrypted; emoji content is not visible to the server. No phone number or contact upload is required. You can delete your account in Settings; access ends immediately and data is purged after 30 days.
What we store
A random device identity created on first launch, your profile name and emoji, your messages in encrypted form, and your app settings, such as notification and language preferences. If you enable notifications, a push token is stored with your account so messages can reach your device. If you choose to link an Apple or Google account, we receive the basic account details that provider shares for linking, such as an email address or name. Linking is optional.
How encryption works
Direct messages and groups are end-to-end encrypted. Messages are encrypted on your device before they are sent, and the keys needed to read them are managed on your devices. The server stores and relays ciphertext; it cannot read the emoji you send. Because of this, we cannot recover your message content for you.
Notifications and previews
Notifications are optional. If you turn them on, a push token is stored with your account and notifications may be delivered through Firebase Cloud Messaging (Google). Lock-screen previews can show the emoji; you can turn previews off in Settings, and you can disable notifications in the app or in your system settings at any time.
What we do not ask for
Lumoji does not ask for your phone number and does not upload your contacts. You can use the app with a device identity alone; linking an Apple or Google account is optional. No phone number or contact list is needed to start a chat.
Retention and deletion
Delete your account in Settings and access ends immediately. Data associated with your account is purged after 30 days. Some records may be kept longer where the law requires it, and purchase records are held by the App Store or Google Play under their own policies. Support emails you send us are kept until you ask us to delete them.
This website
This site does not use cookies, analytics or advertising scripts. Your language choice is saved in your browser's local storage and is not sent to us. Our hosting provider may keep standard security logs, such as IP address and user agent, to operate the site.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions about privacy? Email [email protected] and we will reply.
Write to us about anything on this page.
Email support