Privacy Policy
Lumina was designed to know as little as possible about you. Here, in plain English, is what stays on your device, what goes through our servers, why, and for how long.
Last updated: November 13, 2026
1. Who we are
Lumina is published by Dev Altitude, a company based in France (41 rue Aglophile Fradin, 86100 Châtellerault, France). Contact for privacy questions: juridique@dev-altitude.com.
2. Your child's binder: we have no access to it
Child profiles, notes, deadlines, contacts and documents are encrypted on your device (AES-256-GCM, with a key derived from your passcode) and saved only in your browser. They are never sent to our servers. Your passcode is neither stored nor transmitted.
As a result, we cannot read, recover or delete that information for you. It disappears if you clear the site's data in your browser or use “Forgot passcode?”. Encrypted backups and PDF summaries only leave your device if you choose to export or send them.
Automatic evaluation summaries are written by a language model that runs inside your browser. The model is downloaded from our server, but the content of your documents never leaves your device.
3. What goes through our servers
| Information | Why | How long |
|---|---|---|
| Beta sign-up: email address, newsletter choice, referral code, who referred you, sign-up date | Keep you posted about the beta and the launch, run the referral program | Until you ask us to delete it, or 3 years after the end of the beta |
| Conversations with the assistant | Answer your questions about Lumina | Not stored by Lumina |
| Improvement ideas you agree to send through the assistant (rewritten without names or contact details) | Improve Lumina | Up to 3 years |
| Server logs (IP address, page requested, date) | Security and reliability | 14 days |
| Emails you send us | Reply to you | 3 years after our last exchange |
Your beta email is never linked to your binder or to your children's information.
4. The assistant
The “Questions?” bubble uses artificial intelligence. What you type is sent to our server and then to our AI provider to produce the answer. Do not type your child's name or health information there: unlike your binder, these messages are not encrypted on your device. We do not store conversations. When you agree to send an improvement idea, the assistant rewrites it without personal details (email addresses and phone numbers are removed automatically) and it is saved anonymously.
5. Service providers
- Ligne Web Services (LWS) (France): hosting of the website and services.
- Anthropic (United States): AI model behind the assistant. Messages are not used to train its models.
- Brevo (France): emails to beta testers and internal emails.
- Stripe (United States): payments, once paid plans open. Card details are entered at Stripe and never shared with us.
Your information may therefore be processed in France and in the United States.
6. What we don't do
- We do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the past 12 months.
- We use no advertising cookies, no trackers and no analytics tools, so there is no cookie banner.
- We do not collect sensitive personal information about you or your child on our servers.
- We do not knowingly collect personal information from children under 13: Lumina is meant for parents and caregivers.
7. Your rights (California, Texas, Florida and other states)
Depending on where you live, laws such as the California Consumer Privacy Act (as amended by the CPRA), the Texas Data Privacy and Security Act and Florida's privacy laws give you rights over your personal information. We honor the following requests from every user, wherever they live in the United States:
- Know and access the personal information we hold about you, and get a copy.
- Correct inaccurate information.
- Delete your information (for example, your beta sign-up).
- Opt out of the sale or sharing of your information and of targeted advertising: we do neither.
- Non-discrimination: exercising your rights never changes the service you get.
To make a request, email juridique@dev-altitude.com from the address you used to sign up, or ask an authorized agent to do it for you. We may need to verify your identity. We respond within 45 days. If we deny a request, you can appeal by replying to our answer; Texas residents may then contact the Texas Attorney General. The information in your binder is in your hands only: you can export it (PDF summary, encrypted backup) or erase it at any time on your device.
8. Security
The website is served over HTTPS only, with a security policy that prevents the page from sending data to other domains. The binder locks automatically after 5 minutes of inactivity. See also our Terms of Service and Legal notice.
9. Changes
If we change this policy, we will update the date at the top of this page and, for significant changes, let beta testers know by email. More information about your rights in California: oag.ca.gov/privacy/ccpa.