Terms, Privacy and Notices

Lumora (the website and service) is provided by Siozos Theocharis Panagiotis (ΣΙΩΖΟΣ ΘΕΟΧΑΡΗΣ ΠΑΝΑΓΙΩΤΗΣ), a sole proprietorship established in Greece under the distinctive title DevTaskHub.com, with its registered seat at Markou Mpotsari 83, 546 44 Thessaloniki, Greece. Tax identification number (ΑΦΜ) 169481343, Kalamaria Tax Office (Δ.Ο.Υ. Καλαμαριάς), General Commercial Registry (Γ.Ε.ΜΗ.) number 186989906000. You can reach us at any time at devtaskhub@devtaskhub.com.

These terms apply to every use of the site. By using Lumora you accept them. If you do not agree, please do not use the service.

Lumora offers coffee cup, tarot, crystal ball, love, zodiac compatibility and spell predictions, composed from what you provide on the site (a photograph, the cards you choose, your answers or dates of birth). Accounts are optional and free. You must be at least 18 years old to use the service and to buy predictions or packages.

Predictions, spells and messages are a form of entertainment and personal reflection. They are produced by our own system from traditional symbolism, they are not guaranteed to be accurate and they are not medical, psychological, financial, legal or any other professional advice. Please do not base important decisions on them, and seek a qualified professional where one is needed. Spells consist only of symbolic, safe gestures; never use fire, substances or objects in a way that could harm you or others.

Keep your password private; you are responsible for activity on your account. We may suspend accounts used for fraud, abuse, automated requests or attempts to bypass payment, and we will tell you why when we do. You can delete your account at any time from your settings.

• Do not upload images you have no right to use, or images showing other people without their consent.
• Do not try to access predictions, accounts or data that are not yours.
• Do not use bots, scripts or other automated means, and do not try to overload or manipulate the service or its offers.
• Do not resell or republish predictions for commercial purposes.

• The price of each prediction or package is shown before you pay and includes VAT where it applies. We may offer some predictions without charge; such offers are at our discretion, are limited to one per person and device, and may end at any time.
• Payments are processed by Stripe Payments Europe Ltd. We never see or store your card details. A prediction unlocks once Stripe confirms the payment; package predictions are added to your account and remain available while your account exists.
• Predictions are digital content supplied immediately and not on a tangible medium. Under Article 3ιστ of Greek Law 2251/1994 and Article 16(m) of Directive 2011/83/EU, when you pay you expressly ask for immediate supply and acknowledge that you lose the 14 day right of withdrawal once the prediction is shown or the package predictions are added to your account. You are told this again on the payment page.
• If you were charged but your prediction did not open, if you were charged twice, or if something did not work as described, write to devtaskhub@devtaskhub.com and we will put it right or refund you. Your statutory rights as a consumer, including the legal guarantee of conformity for digital content, are never affected.
• Discount codes carry the conditions shown when they are issued and cannot be exchanged for cash.

If you have any question, complaint, concern or misunderstanding of any kind, including about these terms, a payment, a refund, your data or the content of a prediction, please write to devtaskhub@devtaskhub.com. We confirm receipt and give you a reasoned answer and a solution as soon as possible and no later than 40 days from receiving your message. Requests about your personal data are answered within one month, as the GDPR requires (section 10).

If you are not satisfied with our answer, you may contact the Hellenic Consumer Ombudsman (Συνήγορος του Καταναλωτή, synigoroskatanaloti.gr) or another certified alternative dispute resolution body, or the General Secretariat of Commerce and Consumer Protection (consumer line 1520). Using these routes is voluntary and does not remove your right to go to court.

The site, its design, illustrations, sounds and texts belong to us or our licensors and are protected by law. You may keep and share your own predictions for personal, non commercial use.

We take care to keep Lumora available and secure, but we cannot promise it will always be uninterrupted. Nothing in these terms excludes or limits liability that cannot lawfully be excluded, including for intent or gross negligence, or your rights as a consumer. Otherwise our liability for a prediction is limited to the amount you paid for it.

We may update the service and these terms; the version published at the time of your purchase applies to that purchase, and material changes are announced on the site. These terms are governed by Greek law. The courts of Thessaloniki have jurisdiction, but if you are a consumer you keep the protection of the mandatory laws of your country of residence and may also bring proceedings in the courts where you live.

The controller of your personal data is Siozos Theocharis Panagiotis (ΣΙΩΖΟΣ ΘΕΟΧΑΡΗΣ ΠΑΝΑΓΙΩΤΗΣ) (DevTaskHub.com), Markou Mpotsari 83, 546 44 Thessaloniki, Greece, email devtaskhub@devtaskhub.com. We process personal data under the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019.

• Coffee cup photographs are used only to compose your prediction and are discarded immediately. They are never stored, shown to anyone or shared.
• Prediction inputs (cards chosen, answers, optional first names, questions, intentions, dates of birth) are stored so that your prediction can be shown to you again. Predictions made without an account are deleted after 30 days; predictions saved in an account are kept until you delete them or your account.
• Account data: email address, password (stored only in encrypted form by our authentication provider), optional date of birth, package balance, invitations, visit streak, favourites, notes and payment history.
• Payments: Stripe receives your payment details directly. We receive the payment status, amount and references, which we keep for as long as tax law requires.
• Security, fair use and offers: to protect the service against bots and fraud and to make sure an offer is used only once per person and device, we derive a one way, salted code from technical signals that your browser sends or exposes: the network part of your IP address, your operating system, screen size, colour depth, time zone, number of processor cores and touch support. We also set a signed security cookie (section 11). We store only these irreversible codes, never your IP address or the raw details, and we delete them after 12 months. We do not use them to identify you, track you across other sites, advertise or build a profile of you.

Legal bases: providing the service you ask for (Art. 6(1)(b) GDPR); legal obligations, for example tax records (Art. 6(1)(c)); and our legitimate interest in security, preventing abuse and fraud, and understanding in aggregate how the site is used (Art. 6(1)(f)). You can object to processing based on legitimate interest at any time. We do not sell your data and we do not use it to train artificial intelligence models.

Recipients and processors: Supabase (database and authentication, data stored in the European Union, Ireland), Netlify (hosting and delivery), Stripe Payments Europe Ltd (payments, acting as an independent controller) and, when you ask to reset your password, our email delivery provider. Where a provider may process data outside the European Economic Area, transfers rely on the EU US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Your rights: access, rectification, erasure, restriction, portability and objection, and the right to withdraw any consent at any time. Much of this is available directly in your account (edit, export by request, delete account); otherwise write to devtaskhub@devtaskhub.com. We answer within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1-3, 115 23 Athens, dpa.gr.

• Sign in cookies (sb-*): keep you signed in. Strictly necessary; removed when you sign out or they expire.
• Security cookie (lumora_v): a random, signed identifier used only for fraud prevention and fair use of offers. Kept for up to 12 months.
• Browser storage: remembers predictions created on your device, a pending invitation and whether you turned sound off.
• Stripe sets its own necessary cookies on its payment page.

We use no advertising, social media or third party analytics cookies. Visit statistics are counted on our own server without cookies. You can delete cookies and storage in your browser settings at any time.