Privacy Policy

1. Who we are and who this applies to

Luumo ("Luumo," "we," "us"), operated at www.theluumo.com, is an AI-powered Socratic tutoring product for Class 6–12 students (typically ages 10–18), used under the account and supervision of a parent or legal guardian ("you," the "parent"). This policy covers both the parent account you create and the child profile(s) you set up on your child's behalf. Luumo is not directed at children browsing or signing up on their own — every child profile is created and controlled by a verified parent account.

2. Information we collect

• Parent account data: name, email address, and hashed password (we never store your plaintext password).
• Verifiable parental consent record: confirmation that a ₹1 identity-verification charge was completed via Razorpay. We do not see or store your card or UPI details — Razorpay handles that directly.
• Child profile data: first name, age, grade, school board (e.g. CBSE, ICSE), interests, and the ethical/values framework and "Moral Compass" settings you configure.
• Conversation content: the text of tutoring sessions between your child and Luumo. Voice input is transcribed to text in real time; the audio recording itself is never saved — only the transcript is processed, and then only if you've opted in to session history (see Section 4).
• Derived learning insights: if you opt in to data retention for a child, we generate session-level scores (reasoning, curiosity, resilience) and short summaries for your parent dashboard.
• Safety incident records: if a message is flagged by our safety moderation system, we keep a short, truncated record (category and snippet) regardless of your data-retention setting, so you always have visibility into safety events.

3. How we use this information

• To operate the tutoring conversation itself — generating Luumo's Socratic replies.
• To verify you are a parent/guardian before any child data is collected (see Section 6).
• To scan messages in real time for safety concerns and alert you if something needs your attention.
• To generate the parent-facing insight reports you've opted in to.
• To operate, maintain, and improve the product, and to comply with legal obligations.

We do not use your child's data to serve advertising, and we do not sell personal data.

4. Your controls over your child's data

Every child profile has a "Privacy & data" control panel where you can, at any time:

• Turn session history off (the default). When off, we do not generate insight reports, and a session's conversation content is deleted as soon as that session ends — only the topic, duration, and timestamp are kept for continuity.
• Export everything we hold for a child — profile, session transcripts, insight reports, and safety records — as a downloadable file.
• Delete a child's profile entirely. This immediately and permanently removes every session, message, insight report, and safety record tied to that profile.

5. Before your child's message reaches our AI

Before any message is sent to our AI provider or saved in our database, an automated filter attempts to redact personal details a child may share mid-conversation — full names, phone numbers, email addresses, street addresses, and school names. This is a real-time heuristic filter, not a certified data-loss- prevention system, and may occasionally miss unusually phrased personal information; please advise your child not to share sensitive personal details in the chat regardless.

6. Verifiable parental consent

Before any child profile can be created, we require a small identity-verification charge processed by Razorpay. This satisfies the "verifiable parental consent" requirement common to children's privacy laws — it confirms a real adult with a valid payment method, not a child, is creating the account.

7. Real-time safety monitoring

Every message your child sends is screened by an automated content-moderation system before Luumo responds. If a message is flagged, the lesson pauses, your child receives a calm, reassuring message instead of a tutoring response, and we email you immediately with the category of concern. This safety check runs regardless of your session-history setting — you can never opt out of safety monitoring for your child.

8. Third parties we work with

• AI model providers (e.g. OpenAI) — process conversation text to generate tutoring replies and safety moderation results. We configure our requests to opt out of default response storage where the provider supports it.
• Sarvam AI — converts your child's speech to text and Luumo's text replies to speech, supporting Indian languages. Audio is processed transiently and not stored by us.
• Razorpay — processes the parental identity-verification charge (UPI, cards, netbanking). We never receive your full card or UPI credentials.
• Resend — delivers safety-alert emails to your parent account email address.

9. Data retention

Session content is retained only for children whose parent has opted in to session history, and only until the parent deletes that child's profile or turns retention off. Safety incident records are retained independently of this setting, as described in Section 3. Parent account records are retained for as long as your account is active.

10. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your and your child's personal data, and to withdraw consent at any time. The in-product controls in Section 4 cover access, export, and deletion directly. To exercise any other right, or to delete your parent account entirely, contact us at privacy@theluumo.com.

11. Changes to this policy

We'll update the "last updated" date above whenever this policy changes, and will notify parent accounts by email of any material change to how we handle your child's data.

12. Contact us

Questions, requests, or concerns about this policy can be sent to privacy@theluumo.com. Our website is www.theluumo.com.