Luma Dream Machine — privacy & data policy

Provider: Luma AI. PromptPrivacy score: 31/100. Last verified November 01, 2026.

What happens to your data?

When you use Luma Dream Machine, Luma collects your account details, uploaded files, prompt inputs, and usage activity. This data is used to generate outputs, run the service, and train Luma's AI models. It may also be shared with service vendors, analytics providers, and business affiliates.

Does it train on your data?

Trains on your content by default. Luma explicitly uses collected information—including uploaded media files, conversation inputs, and prompt materials—to train, develop, and improve its artificial intelligence and machine learning models.

Can you opt out?

Not specified. While the policy states that user inputs and content are used to train artificial intelligence models, it does not state whether or how users can opt out of model training.

Data retention

Luma retains personal information for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Retention periods depend on factors such as the nature of your relationship with Luma, service necessity, and mandatory statutory limits, after which data is deleted or de-identified.

Encryption & security

Luma mentions using reasonable organizational, technical, and administrative measures to safeguard data, but the policy does not state specific encryption protocols (such as TLS or AES-256) or external compliance certifications.

Is it safe for work?

Not recommended for sensitive workplace use. User prompts, uploaded media, and generated outputs are used by default to train AI models without an explicit training opt-out mechanism, and the policy lacks specific encryption commitments and enterprise governance controls.

Source policy: https://lumalabs.ai/legal/privacy