This is a placeholder privacy notice for Lumo AI while we draft the full policy with our legal advisors. The TL;DR while we’re in public preview:

Your sources stay yours. Anything you upload (PDF, text, YouTube URL) is used to generate your learning artifacts and then stored in your account. We do not sell or share it.
Auth. Sign-up uses Supabase Auth. We store your email + display name + role; nothing else by default.
Demo IP hashing. The public demo at /demo rate-limits by hashed IP (HMAC-SHA-256, rotatable secret). We never store the raw IP.
Model provider. Generation runs on Claude Opus 4.7 via OpenRouter. OpenRouter and Anthropic process the source content you submit; their terms apply downstream.
Children. Lumo serves Class 5–8 students; a full COPPA/GDPR-K notice will land before general availability.
Contact. Reach the maintainer via the GitHub repo linked in the footer once you have an account.

The full policy will replace this placeholder before launch.