Privacy Policy
Last updated: June 9, 2026
Lumini is a platform for AI-personalized children's stories, designed to be used by families. We take privacy — especially children's privacy — very seriously. This Policy explains what data we collect, how we use it, who we share it with, and what your rights are.
This Policy was drafted with COPPA (USA), the GDPR and GDPR-K (Europe), the LGPD (Brazil), and the Australian Privacy Act (Australia) in mind. Every Lumini account is created and managed by a responsible adult.
1. Who we are
Lumini is operated from Sydney, Australia. We are the controller of the personal data processed through our website (meetlumini.com), our webapp (app.meetlumini.com), and our mobile apps.
For any privacy or data-protection matter, contact our privacy lead at privacy@meetlumini.com.
2. What data we collect
Parent / guardian data
- Name and email address.
- Authentication credentials (sign-in via Google, Apple, or email).
- Plan and subscription information (no full card data — see Payments).
Child data — provided by the parent
This data is entered solely by the responsible adult to personalize the stories. The child does not provide data directly.
- The child's first name or nickname.
- Age or age range.
- Interests, likes, and personality traits.
- Family members and important people (social atom), when the parent chooses to share them.
Usage data
- Generated stories, favorites, and reading/narration preferences.
- Mode settings (Bedtime, Adventure) and language.
- Basic technical data (device type, error logs, performance metrics) to keep the service running.
3. How we use data
- Personalize stories for your family — this is the primary use.
- Operate, maintain, and improve the product and the pedagogical quality of stories.
- Process subscriptions, payments, and the trial period.
- Send essential communications about your account and the service.
- Comply with legal obligations and keep the platform secure.
We NEVER use your family's data for advertising targeted at children, and we do not sell personal data to third parties. We do not build advertising profiles of children.
4. Legal basis for processing
Under the GDPR and LGPD, we process personal data based on:
- Performance of a contract — to provide the service you signed up for.
- Consent — in particular parental consent for processing the child's data, which can be withdrawn at any time.
- Legitimate interests — to improve the product and keep it secure, in a proportionate manner.
- Legal obligation — where the law requires retention or disclosure of certain data.
5. Sharing with third parties
We work with carefully selected service providers who process data only on our behalf and under contract:
- Anthropic (Claude API) — processes the text needed to generate the story. Your data is not used to train models.
- ElevenLabs — generates the audio narration from the story text.
- Supabase — database, authentication, and storage of account and story data.
- Stripe — payment processing on the webapp. It only receives the parent data needed for payment, NEVER child data.
- RevenueCat / Apple / Google — subscription management in the mobile apps.
- Resend — transactional email delivery.
- Sentry and Axiom — error monitoring and operational logs.
We may also disclose data if required by law or to protect rights, safety, and the integrity of the service.
6. Parental consent and children's privacy
Every Lumini account is created by a responsible adult (18 or older). By entering a child's data, the parent represents that they have authority to do so and consents to the processing of that data as described in this Policy.
In line with COPPA and GDPR-K, we do not knowingly collect personal data directly from children. Child Mode offers a playful reading and listening interface and does NOT collect additional data from the child.
The parent may review, correct, or delete the child's data at any time and withdraw consent by contacting privacy@meetlumini.com. If we learn that we have collected data from a child without proper parental consent, we will promptly delete that information.
7. Your rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you and your family.
- Correct inaccurate or outdated data.
- Delete your data ("right to be forgotten").
- Export your data in a machine-readable format (portability).
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- Object to certain processing or request that processing be restricted.
- Lodge a complaint with a data-protection authority (ANPD in Brazil, OAIC in Australia, or the relevant EU authority).
To exercise any of these rights, write to privacy@meetlumini.com. We will respond within the timeframes required by applicable law.
8. Data retention and deletion
We keep personal data only for as long as necessary to provide the service and meet legal obligations.
- Stories and profile data remain available while the account is active.
- After cancellation, stories and associated data are deleted or anonymized within 90 days, unless a legal obligation requires retention.
- You can request complete, immediate account deletion at any time via privacy@meetlumini.com.
9. Data security
We use appropriate technical and organizational measures to protect data: encryption in transit (HTTPS/TLS), access controls, environment segregation (dev/staging/production), and continuous monitoring. No system is 100% secure, but we work to reduce risk and respond quickly to incidents.
10. International data transfers
Lumini is operated from Australia and serves users worldwide. Your data may be processed in countries other than your own, including on our service providers' servers. When we transfer data internationally, we put appropriate safeguards in place (such as standard contractual clauses) to ensure a level of protection consistent with applicable law.
12. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the date at the top of the page and, where appropriate, notify you. Continued use of the service after changes constitutes acceptance of the updated version.
13. Contact
Questions about privacy? Contact the Lumini privacy lead at privacy@meetlumini.com. For other matters, write to hello@meetlumini.com.