Privacy policy

Lumo is a learning app for children, managed by their parents. We collect as little as possible, we never show ads, and we never sell data. This page explains, in plain words, what we store and why.

The short version

• You can use Lumo without any account at all — everything then stays on your device.
• If a parent signs in (with Google), we store the parent's email and each child's first name, year group and learning progress so it can sync between your devices.
• Our server is in France (EU). No ads, no third-party analytics, no data sales — ever.
• You can delete a child's profile, or your whole account and everything in it, from inside the app.

Using Lumo without an account

Lumo works fully offline. Without a sign-in, all profiles and progress are stored only on your device and are never sent to us. Deleting the app (or a profile) removes them.

If a parent signs in

Accounts are for grown-ups only — children never sign in and never have accounts. A parent can sign in with Google to back up progress and use the same account on more than one device. We then store:

• About the parent: your email address, your name as Google provides it, and your Google account identifier. We never see or store a password.
• About each child: the first name (or nickname) you chose, the picked character, the school year group, and learning progress (topics practised, scores, stars, streaks). We suggest using just a first name or a nickname.
• Question reports: if a child flags a question as wrong, the question text is sent to us so we can fix it.

That is the whole list. We do not collect birth dates, photos, locations, contacts, or anything from outside the app.

Children and consent

Child profiles are created and managed by a parent or guardian, inside a grown-up-gated area of the app. The parent decides whether any data leaves the device (by choosing to sign in or not), and can remove it at any time.

Where data is stored

Synced data is stored on our own server in France, in the European Union, hosted with OVH. It is sent over an encrypted connection (HTTPS). On your device, sign-in tokens are kept in the phone's secure storage.

Server logs

Like almost every web service, our server keeps short technical access logs (your IP address, the time, and the page requested) to keep the service secure and diagnose problems. These logs are rotated automatically and only a limited amount is kept — older entries are deleted as new ones arrive, typically within days to a few weeks. They are not used for tracking or profiling.

What we never do

• No advertising of any kind, and nothing designed to nudge children to spend more time or money.
• No third-party analytics or tracking SDKs.
• No selling, renting or sharing of personal data with anyone.
• No messages to children. We only ever contact the parent, and only about the account.

Deleting your data

You are in control, from inside the app (Grown-up zone):

• Delete one child: removes that child's profile and progress from your devices and from our server.
• Delete your account: permanently erases your account, every child profile, all progress and reports from our server, and signs this device out. This is immediate and cannot be undone.

You can also just sign out and never sync again — or use the app fully offline from the start.

Your rights (UK GDPR)

You have the right to access, correct, export or erase the personal data we hold about you and your children, and the right to complain to the ICO (ico.org.uk). For anything this app's built-in tools don't cover, contact us and we will help.

Contact

Questions about privacy or your data: privacy@lumo-learning.com

Changes

If this policy changes in a way that matters, we will show the update in the app before it takes effect.