Account & Login

Lomio uses Google OAuth for all authentication — no separate password required.

How sign-in works

Lomio authenticates users exclusively through Google OAuth 2.0, powered by Supabase Auth on the backend. When you click Sign in with Google, you are redirected to Google's consent screen. After granting consent, Google sends a secure token back to Lomio, which creates or refreshes your session. Your Google password is never shared with or stored by Lomio.

The first time you sign in, Lomio automatically provisions your user profile using your Google display name and profile picture. No additional registration step is needed.

Signing in

Navigate to app.lomio.art.
Click Sign in with Google. If you are already signed in to your browser with a Google account, the consent step may be skipped.
After authentication you are redirected to the workspace selector (or directly to your default workspace if you have one set).

Use a Google Workspace account?

Google Workspace (formerly G Suite) accounts work exactly the same as personal Google accounts. If your organization restricts third-party OAuth, ask your admin to allow lomio.art as an authorized application.

Sessions and stay-signed-in behavior

Lomio maintains a secure session in your browser using HTTP-only cookies managed by Supabase. Sessions are long-lived but are automatically refreshed in the background. You will not be asked to sign in repeatedly during normal use.

Sessions expire when:

You explicitly sign out.
You revoke Lomio's access in your Google Account Permissions page.
An administrator removes your account from all workspaces (your session is invalidated on the next request).
Lomio rotates session keys for security reasons (rare; you will be prompted to sign in again).

Signing out

To sign out, click your avatar or initials in the top-right corner of the studio and select Sign out from the dropdown. Your session cookie is cleared immediately. You are redirected to the sign-in page.

Shared computers

If you are using a shared or public computer, always sign out explicitly when you are finished. Closing the browser tab is not sufficient to clear the session.

Your user profile

Your profile is separate from any workspace. It includes:

Display name — synced from your Google account on first sign-in. You can update it in Account Settings.
Avatar — pulled from your Google profile photo. Custom upload is coming in a future release.
Email address — this is your Google email and is used for billing receipts and notifications. It cannot be changed inside Lomio; change it via Google if needed.
Notification preferences — control which email notifications you receive (generation complete, billing alerts, workspace invites) from Account Settings.

Multiple Google accounts

If you have more than one Google account in your browser, Lomio's sign-in page will show the Google account picker. Select the account associated with your Lomio workspace. Each Lomio user account is tied to exactly one Google email address.

Account deletion

To permanently delete your Lomio account, go to Account Settings → Danger Zone → Delete Account. This removes your user profile and any personal data. Workspaces you own must be transferred to another owner or deleted first. Workspace data (projects, characters, generations) is subject to the workspace owner's data retention settings.

Account deletion is irreversible. If you have an active credit balance, contact support before deleting — credits are non-refundable after account deletion.