Last updated 6 October 2026
This policy explains what personal data ES-SAHM Saifeddine collects through Enlumine, why, who else receives it, and what rights you have over it. It describes what the software actually does.
Summary
Your documents are stored privately and encrypted at rest. They are never public, never indexed by search engines, and never used to train anyone's AI models.
Text is sent to an AI model only at the moment you ask for it, and every such request carries an instruction not to keep or train on it. We do not sell or share your data and we show no advertising.
You can delete your account yourself, at any time, and deletion is immediate.
This summary is provided for convenience only. It does not form part of the agreement, and the numbered terms below govern.
1.1This policy applies to Enlumine at enlumine.app and to the personal data we process through it. Terms defined in our Terms of Service have the same meaning here.
1.2The date at the top of this page records when it was last changed.
2.1ES-SAHM Saifeddine operates Enlumine and is the data controller for the personal data described in this policy.
2.2You can reach us at contact@enlumine.app, and we will provide a postal address on request. We are based in Morocco; the servers holding your data are in the European Union.
2.3We have not yet appointed a representative in the European Union under Article 27 GDPR. Until we do, write to us directly at contact@enlumine.app and we will answer within one month.
3.1Account details. A username, your email address, and an identifier from the sign-in provider. We never see or hold a password — sign-in is handled entirely by our identity provider.
3.2Your documents. The PDFs you upload, and what the application derives from them so that it can be useful: extracted text for search, a cover image rendered from the first page, numeric representations of the text used for meaning search, and any speech generated when you have a page read aloud. Files are held in private storage and are served only to people you have given access to. They are never public and are never indexed by search engines.
3.3What you create. Annotations, bookmarks, tags, reading lists, and conversations with the assistant.
3.4Voice recordings, if you make them. You can attach a spoken recording to an annotation, and you can dictate instead of typing. A recording you attach is stored with the annotation it belongs to and is deleted when that annotation is. It is named separately here because a recording of somebody speaking is not the same kind of thing as a bookmark.
3.5Usage. Counts of AI calls and what they cost, so that we can show you your balance and meter it correctly, and daily totals per account — documents added, conversations active, sign-ins.
3.6Problem reports. If you use the report form, what you wrote, the summary you gave it, the screen you were on, your browser and screen size, and the version of the application you were running, with your name and email address attached so that we can reply. We do not attach anything about your library: not which document you had open, not its title, not the page, not what you had searched for.
3.7Payments. Which Plan you are on and a record of each purchase. We never receive your card details. Payment is taken by Polar as Merchant of Record, who is the seller for the transaction.
4.1We process the data described above on the following bases under the GDPR.
| Data | Purpose | Legal basis |
|---|---|---|
| Account details | Creating and running your account, and signing you in | Performance of a contract |
| Your documents and what you create | Providing the library, the reader, search and the assistant | Performance of a contract |
| Voice recordings | Storing the recording you attached, and transcribing dictation you asked for | Performance of a contract |
| Usage counts and costs | Showing your balance and metering AI fairly | Our legitimate interest in charging correctly |
| Security and failure logs | Keeping the service working and secure | Our legitimate interest in the service working |
| Problem reports | Diagnosing and fixing defects, and replying to you | Our legitimate interest in fixing the product |
| Payment and purchase records | Taking payment, and keeping the records tax law requires | Performance of a contract, and legal obligation |
4.2None of this rests on consent, which is why there is no cookie banner. If we ever introduce something that does require consent, we will ask for it first.
4.3Where we rely on a legitimate interest, you may object to that processing. Section 12 explains how.
5.1When you use the assistant, meaning search, read-aloud or dictation, the relevant text is sent through our AI routing provider to a model provider at that moment, and the answer comes back. When you ask for text recognition or page layout, pictures of the pages you chose are sent to our page-reading provider, read there, and the result comes back. The pictures are not kept, and nothing about you or the document goes with them. This happens only when you ask for it. Nothing is sent in the background, and a document you never use one of these features on is never sent anywhere.
5.2Every one of those requests carries a zero-retention instruction. It is attached by our own code, on each call, rather than left to a setting on an account — and a request is routed only to providers that accept both halves of it: do not keep this, and do not train on it.
5.3What we cannot do is make that promise on a provider's behalf. It is an arrangement they honour, not a guarantee we are able to enforce.
5.4We never use your documents to train anyone's AI models, we never sell or share your data, and we show no advertising. These are not current arrangements that might change — they are what this product is.
6.1We use cookies to keep you signed in and to allow your browser to load your own documents and covers. They are strictly necessary for the service to function.
6.2They are not used to track you and they are not shared with anyone. We set no advertising or cross-site tracking cookies, which is why you are not asked to consent to any.
6.3We may use tools that tell us when the application breaks and how its features are used overall, so that we can fix and improve it. Anything of that kind appears in the table in Section 7, is limited to what the tool needs, and is never used to build a profile of you or to advertise to you.
7.1These are the service providers that run Enlumine, and where each one holds your data. Each receives only what it needs to do its job, and each is bound to process it only on our instructions.
| Recipient | Role | Where | What it receives |
|---|---|---|---|
| A hosting provider | the servers and the database | Germany (EU) | Everything stored by the service |
| A storage provider | storing the files themselves | Western Europe (EU) | The files you upload, the covers rendered from them, and voice recordings |
| An identity provider | sign-in | European Union | Your email address and authentication events |
| An AI routing provider | passing a request on to a model | United States, routing on to model providers | The text of a single request, at the moment you make it, under a zero-retention instruction |
| Polar | payments, as merchant of record | the United States | Your billing details and payment method — this service never receives card details |
| An email provider | transactional email | Ireland (EU) | The recipient address and the message |
| A page-reading provider | reading and analysing the pages you choose | Belgium (EU) | Pictures of the pages you ask to have read or laid out, only at that moment; they are not kept |
8.1Your documents, your database records and the email we send you all rest on servers in the European Union.
8.2Two things reach outside it: we operate from Morocco and administer those servers from there, and the AI routing service listed above is a United States company, while payment is handled in the United States — so what is listed against each of them is handled there.
8.3Neither country has been the subject of an adequacy decision by the European Commission. Those transfers therefore rely on the Commission's Standard Contractual Clauses, which form part of our agreement with each provider. Ask us and we will send you the terms.
9.1Your files are encrypted where they are stored. If that storage were ever exposed — a stolen copy, a leaked credential — what somebody would be holding is unreadable on its own.
9.2To be straight with you about the limit of that: this protects your files against a break-in at the storage, not against us. The service has to be able to read a document in order to search it, narrate it, or answer a question about it, so it can. It is not the kind of encryption where only you hold the key.
9.3Access to production systems is limited to those who need it, and traffic between you and the service is encrypted in transit. No system is perfectly secure, and we do not claim otherwise.
10.1Your data is kept while your account exists. We take regular backups so that the service can be restored after a failure, and no backup is kept longer than about a month.
10.2This means that after you delete something it can persist in a backup for up to about a month before ageing out. Backups are never used to restore data an individual asked us to delete.
10.3Problem reports outlive the account that filed them, because a report is our record of a defect rather than your data. When you delete your account, your name and email address are removed from every report you filed, and what remains cannot be traced back to you.
10.4There are two cases in which we remove things you did not ask us to remove. In both, we email you first.
10.5An account holding more than its plan allows, most often after a paid plan has ended. We write to you twice before any document is removed, and you can download anything you want to keep. The rule is set out in Section 9 of the Terms of Service.
10.6An account nobody has used for a year. We email the address on the account with the date it will be deleted, 30 days later, and signing in before then is all it takes to keep it. If nobody does, the account is deleted with everything in it, as described in Section 11. An account that has ever had a paid plan, still holds unspent credit, or owns a shared workspace other people are in is never deleted this way; and if the email cannot be sent, nothing is deleted.
11.1You can delete your account from within the application. Doing so removes your documents, annotations, conversations, tags and usage history, and strips your name and email address from any problem reports you filed. Deletion is immediate and cannot be undone.
11.2It removes what was derived from your documents as well as the documents themselves: the covers rendered from them, the search indexes built over them, any speech generated from their text, and any recordings you made in your own voice. The one exception is our database backups, which age out on the schedule in Section 10 and are never used to restore something somebody asked us to delete.
11.3If you own a shared workspace, the application tells you what will happen to it and to the people in it before you confirm.
12.1If you are in the European Union or the United Kingdom you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict what we do with it, to receive it in a portable form, and to object to processing we carry out on the basis of a legitimate interest.
12.2Deleting and correcting you can do yourself, in the application, right now.
12.3Getting a copy you cannot yet. There is no export button, and we would rather say so than imply one exists. Write to contact@enlumine.app and we will assemble it by hand and send it within one month, free of charge.
12.4To exercise any other right, write to contact@enlumine.app. We will respond within one month.
13.1You need to be at least 16 years old to have an account. We do not knowingly collect personal data from anyone younger.
13.2We do not ask for your date of birth and do not otherwise verify age. If we learn that an account belongs to someone below that age, we will close it and delete the data held under it. If you believe a child has given us personal data, write to contact@enlumine.app.
14.1We do not make decisions about you by automated means that produce legal or similarly significant effects, and we do not profile you. The AI features act on the document you point them at; they do not assess you.
15.1If we change how we handle your data in a way that matters, we will update this page and tell you before the change takes effect.
16.1If you are unhappy with how we have handled your data, please tell us first at contact@enlumine.app so that we can try to put it right.
16.2You also have the right to complain to your national data protection authority, and you can do that without going through us first.