Minimal account data, separated security logs, and no plaintext secrets.

LumaChat stores only the account, profile, and audit data needed to operate a paid chat application. Passwords are never stored in plaintext. License keys are generated securely and stored as server-side hashes rather than raw values.

Login IP addresses and user agents are kept as security metadata for account defense, audit trails, and abuse review. These records are separated from ordinary profile data and are intended for administrative and security use only.

Purchases are fulfilled manually through direct contact with the seller. Payment processing is not embedded into this prototype, which keeps the runtime smaller and the payment surface outside the app for now.