Privacy

Who we are

The service is run by lumischool. Questions about this page, and every request it describes, go to support@lumischool.ai.

What we keep

For each grown-up who signs in:

• the email address used to sign in, and the name they give, if any;
• the families they belong to and their role in each;
• the sessions their browsers and devices hold, so a signed-in device stays signed in;
• their choices about weekly letters.

For each child a parent adds, only what the add-a-child form asks for: the name the family calls them, which can be a nickname, and the grade their year is drawn for. We do not ask for a surname, a birth date, a school, a photograph or a gender.

While a child uses a children's view that a parent opened, we keep a record of their work: the answers they give, the drawings and marks a question asks for, the hints they open, the games they play, their paintings, and how long each question was on screen. Progress, rewards and plans are worked out from that record and not stored apart from it.

We keep the parent's consent to that record, with the version of the notice they agreed to and when.

What we do not do

• We do not show advertising, and we do not sell or rent any data.
• We do not use analytics, advertising or tracking software, in the website or in the apps, and we do not track anyone across other companies' apps or websites.
• The apps do not use the camera, the microphone, contacts or location.
• Children do not have email addresses or passwords with us, and nothing we send by email is addressed to a child.

Why we keep it

We keep this data to run the service the family signed up for: to sign grown-ups in, to show each child their lessons, map and progress, to show grown-ups what their children have done, and, when a parent turns them on, to send weekly letters. We do not use it for anything else.

Who else handles it

A small number of companies run parts of the service for us. Each handles data only to provide that part:

• Render runs our server, and Neon runs our database, both in the United States.
• Cloudflare carries traffic to the site and the apps and protects them from abuse.
• Resend delivers the sign-in emails, which never contain a child's details. It also delivers weekly letters. A detailed letter carries a child's name and a summary of their learning, and is sent only when the receiving parent has turned detailed letters on. A private-link letter carries no learning details.
• Some optional teaching features for grown-ups use Google's Gemini API. A request carries the lesson's material and the answers given in that lesson, never a name, an email address or an account identifier, and is made with storage at Google turned off.

How long we keep it

We keep a family's data while the family's account is open. When a grown-up deletes their account or closes a family, we delete the records straight away from our database. Copies remain in our database provider's short restore history until it expires.

Children's privacy

The service is meant for children aged 5 to 12 learning with a parent. Only a parent can add a child, and they agree to the notice beside the add-a-child form first. A parent can see what their child has done in the app at any time. To export a child's record, withdraw consent or delete the record, a parent writes to us, and we do it.

Your choices

From the account page, on the website or in the apps, a grown-up can change or stop weekly letters, close a family, and delete their own account. To get a copy of the family's data, withdraw consent for a child, or delete one child's record, write to support@lumischool.ai from the address you sign in with and we will do it.

Changes

We will change this page when what we do changes, and say so to grown-ups who sign in when the change is one they would want to know about. This version is from 5 October 2026.