Privacy Policy

• We never sell your information, and we never use it to target ads at you.
• There are no advertising or profiling trackers in Luumo.
• We ask for your date of birth once to check you are 13 or older, then throw it away. We keep only the yes/no answer.
• You can download everything we hold about you, or delete your account, from Settings.
• When you use the AI tutor, your question is sent to our AI provider. It is not used to train their models.

Everything below is a button in the app, not a form to fill in or an email to send.

• Download your data — a JSON file with your account details, practice history, and scores. Settings
• Delete your account — removes your account and everything in it. This cannot be undone.
• Remove your phone number — if you gave us one, you can take it back at any time.
• Turn off reminder emails — every reminder email has an unsubscribe link. You will still get essential account emails, like a password reset.

Depending on where you live you may have additional rights, such as asking us to correct information. Email Lummo-privacy@ikubes.com and we will respond within 30 days. We will not ask you for a copy of your ID to do this — controlling the account is proof enough.

Your account details, what you study, and basic security records.

Things you give us

• Name, email address, and username — to create your account, sign you in, and send account emails.
• Password — stored only as a scrambled version (a hash) that cannot be turned back into your password.
• Phone number (optional) — only if you choose to give one, and only to help you get back into your account. It is never used for marketing and never sold. You can remove it in Settings.
• Date of birth — checked once at signup to confirm you are 13 or older, then discarded. We store only whether you met the age requirement, never the date itself.
• What you write — questions you type into the AI tutor and your written answers to free-response questions.

Things we record as you study

• Which questions you answer, whether you got them right, and your scores.
• Your progress: streaks, mastery by topic, mistakes to review, flashcard status, and which exam dates you have set.
• How confident you said you were before answering a review card, and how long you took. This is how the spaced-repetition system decides what to show you next.

Things we record for security

• Sign-in records — the IP address and browser description for each sign-in attempt, kept to detect abuse. Deleted automatically after 180 days.
• Your devices — so you can be signed in on more than one, we store a scrambled fingerprint of each device, never the raw details.
• AI usage — which AI features you used and how much, so we can measure cost and apply fair-use limits. Not the content of what you asked.

Your question goes to our AI provider to answer it. They are contractually barred from training their models on it.

When you ask the AI tutor a question, request an explanation, or submit a free-response answer for grading, that text is sent to Anthropic, which runs the AI model. We do not send your name, email address, or account ID with it — only the question or answer and the subject and unit you are studying.

Anthropic’s commercial terms state that they do not train their models on content submitted through their API.

Answers are cached and shared. To keep Luumo fast and affordable, we store the answers the tutor generates. If another student later asks a question that is essentially identical, they may be shown the same stored answer. What is stored is the question text and the answer — it is not linked to your account. Because a stored answer can be shown to someone else, please do not type personal details about yourself or anyone else into the tutor. Stored answers expire and are deleted if nobody asks that question for several months.

If you type something that suggests you are in distress, the tutor responds with support information. That message is not stored, not logged, and not sent to any AI provider.

AI answers and AI grades can be wrong. A grade from Luumo is an estimate to help you practise — it is not a prediction of your actual AP score.

A small number of companies that run parts of Luumo for us. Nobody else, ever, for money.

We do not sell your personal information, share it for advertising, or use it to target ads. This is not conditional on your age or on any setting.

These companies process data on our behalf:

• Vercel — hosts the website.
• Neon — runs the database where your account and progress live.
• Anthropic — provides the AI used by the tutor, explanations, and grading.
• Resend — sends our emails.
• Upstash — rate limiting, to stop abuse of the service.
• Sentry — collects error reports when something breaks. Personal details are stripped out before they are sent.
• Google and Apple — only if you choose to sign in with them.

Lesson videos are hosted on YouTube and play inside Luumo. We use YouTube’s privacy-enhanced mode, so Google does not set advertising cookies before you press play. Once you play a video, Google receives your IP address and their own privacy policy applies.

We may also share information if the law requires it, or if Luumo is ever sold or merged — in which case this policy continues to apply to the information transferred.

Only as long as it is useful, with real limits we actually enforce.

• Your account and study history — until you delete your account.
• Security sign-in records — 180 days, then deleted automatically.
• Device records — 30 days after a device was last used.
• Unfinished signups — deleted as soon as the signup link expires, usually within 30 minutes.
• Used password-reset codes — deleted a week after they expire.
• Stored AI answers — deleted once nobody has asked that question for several months.

Almost everything goes immediately. Two small things stay, and we would rather tell you than pretend otherwise.

Deleting your account removes your profile, practice history, scores, streaks, saved subjects, written answers, flashcard progress, and email preferences. This is immediate and cannot be undone.

Two things deliberately remain:

• A limited security record that your account existed, signed in, and was deleted. It is kept for safety and abuse prevention, and is deleted after 180 days.
• A count of AI features used, kept for cost accounting. Your account ID and device identifier are removed from these records at the moment of deletion, so they can no longer be connected to you.

Luumo is for ages 13 and up. Because our users are minors, we apply stronger protections by default rather than on request.

You must be at least 13 to create a Luumo account. We ask for your date of birth once at signup to check this, and we do not store it. If you tell us you are under 13, we do not create an account; if an account has already been created through a sign-in provider, we delete it.

Because nearly all of our users are minors, we apply these protections to everyone:

• No selling of personal information, ever.
• No advertising, no ad targeting, and no advertising trackers.
• No profiling for anything other than helping you study.
• We collect the minimum we need, and delete it on a schedule.

If you are a parent or guardian and believe a child under 13 has an account, email Lummo-privacy@ikubes.com and we will delete it and any associated information.

Only what is needed to keep you signed in and remember your preferences.

• A sign-in cookie that keeps you logged in. Without it you would have to sign in on every page.
• A current subject cookie so the app opens on the subject you were last studying.
• Local storage in your browser for your theme choice, the last unit you opened, and which videos you have watched. This stays on your device.

We use privacy-focused analytics that measure page performance and visit counts. There are no advertising cookies, no cross-site tracking, and no Google Analytics, Meta Pixel, or similar. We honour Global Privacy Control signals where they apply.

Encryption in transit, hashed passwords, and access limits on our side.

Traffic between your browser and Luumo is encrypted. Passwords are stored as a hash, not as text. Device identifiers are stored as one-way scrambles rather than raw values, and staff tools show phone numbers only in a masked form.

No online service can promise perfect security. If a breach ever affects your information, we will tell you.

If we make a meaningful change, we will update the date at the top of this page and email registered users. Continuing to use Luumo after a change means the updated policy applies.

Questions about privacy, requests about your data, or reports about an under-13 account: Lummo-privacy@ikubes.com. We aim to respond within 30 days.