This is a placeholder privacy notice for Lumo AI while we draft the full policy with our legal advisors. The TL;DR while we’re in public preview:

Your sources stay yours. Anything you upload (PDF, text, YouTube URL) is used to generate your learning artifacts and then stored in your account. We do not sell or share it.
Auth. Sign-up uses Supabase Auth. We store your email + display name + role; nothing else by default.
IP hashing for abuse prevention. We rate-limit by hashed IP (HMAC-SHA-256, rotatable secret) and never store the raw IP. This now covers three things: anonymous review submissions, password-reset requests, and — for accounts less than 24 hours old — the number of generations coming from one network. That last one applies while you are signed in: it exists to stop bulk account creation being used to consume AI capacity, and it stops applying once your account is a day old.
Generation requires an account. As of 12 August 2026 we no longer generate study material for signed-out visitors. Uploads, transforms, flashcard explanations and audio all require sign-in, so the source content we process is always tied to an account rather than to an anonymous session.
Model provider. Generation runs on Claude Opus 4.7 via OpenRouter. OpenRouter and Anthropic process the source content you submit; their terms apply downstream.
Children. Lumo serves Class 5–8 students; a full COPPA/GDPR-K notice will land before general availability.
Contact. Reach the maintainer via the GitHub repo linked in the footer once you have an account.

The full policy will replace this placeholder before launch.