LuminaryTechnologyLabs, Inc. ("Lumi," "Company," "we," "us," or "our") is committed to protecting the privacy of our users and their families. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at www.withlumi.ai (the "Site") and use any services accessible through the Site (collectively, the "Service").
Lumi provides AI-powered executive function coaching tools designed for neurodiverse families, particularly for children between the ages of 5 and 12, always led by and used through parents or guardians ("Parents"). The Service is designed for use by adults on behalf of their families.
By accessing or using the Site or Service, you agree to this Privacy Policy and our Terms of Use. If you do not agree with the practices described in this policy, please do not use our Site or Service.
Please read this Privacy Policy carefully. This policy contains important information about our data practices, including how we handle information related to children.
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you voluntarily provide when using our Site and Service. This includes:
Mailing List
If you sign up to hear from us, we collect your email address and nothing else.
Creating an Account
Lumi is live. When you start an account or subscribe, you are taken to our app at app.withlumi.ai, and the app's Privacy Policy governs what happens from that point. Checkout is handled by Stripe — see Section 1.3.
Behavioral Assessments
Our Site offers executive function assessments that allow Parents to better understand their child's and their own behavioral patterns. When you complete an assessment, we collect:
- Your responses to behavioral questions (e.g., agreement/disagreement ratings about everyday behaviors such as task completion, time management, and organization). These questions are behavioral in nature and are not clinical, diagnostic, or medical instruments.
- Optionally, a child's first name and age. We do not ask for a last name, and there is no field for one. The name field is free text, so please enter a first name or a nickname only.
- Your email address, which is required to deliver your assessment results.
We treat assessment data as sensitive information given that it relates to children's behavioral patterns and neurodevelopmental characteristics, even though it is not clinical or medical data.
AI Chat Interactions
Our Site includes a demo chat feature and assessment-based chat interactions that simulate the Lumi coaching experience. When you use these features, we collect the content of your chat messages and the AI-generated responses. In the demo, you interact with pre-selected fictitious profiles and do not input personal information. In the assessment-based chat, the conversation relates to the assessment data you have already provided.
1.2 Information Collected Automatically
When you visit our Site, certain information is collected automatically through analytics technology provided by PostHog, our analytics service provider. This may include:
- Device information (browser type, operating system, device type)
- Usage data (pages visited, time spent on pages, navigation paths, click and form-submission patterns, performance, and errors)
- Referrer and campaign-attribution information, such as the site or campaign that brought you to Lumi and standard UTM parameters
- Persistent device, session, and window identifiers stored in cookies or similar browser storage
- Session recordings on permitted marketing pages, which help us understand how a page or flow is working
- IP address (which may be used to approximate general geographic location)
In PostHog session recordings, Lumi masks the values of all form inputs and masks editable text surfaces. We also block elements that we explicitly mark as protected and remove credentials and query strings from captured URL attributes and network metadata. Ordinary non-input text rendered on a customer-facing marketing page may be visible in a recording so that we can understand the page and the visitor's path through it. Direct visits to Lumi's internal administration, studio, test, and debug pages do not initialize PostHog. If a visitor instead reaches an excluded internal page through client-side navigation, Lumi stops replay, clears queued telemetry, and discards rather than sends telemetry for that page.
We use this information to understand how visitors use our Site, evaluate acquisition funnels, improve the user experience, and diagnose technical issues. We do not intentionally send name or email in structured PostHog event fields. Ordinary non-input text visible in a recording may nevertheless include a name or other context rendered on the page. If a visitor later creates or uses a Lumi account, PostHog's persistent pseudonymous visitor identifier may be connected to the stable pseudonymous account identifier used in the App so that Lumi can understand the journey from marketing visit to product use.
1.3 Information We Do Not Collect
We want to be transparent about what we do not collect on this Site:
- We do not ask for a child's last name, home address, phone number, or photograph, and there is no field for any of them.
- We do not store payment or financial information. If you subscribe, checkout is handled by Stripe, which receives your card details directly — we never see or store them.
- We do not collect Social Security numbers, government-issued identification, or similar identifiers.
- We do not ask for clinical, medical, or diagnostic information. Our assessments are behavioral tools, not medical instruments. Free-text fields will accept whatever you write, so please share only what you are comfortable storing with us.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and deliver the Service: Processing your assessment responses to generate executive function insights, powering AI chat interactions, and delivering assessment results to your email.
- To communicate with you: Sending updates you have signed up for, responding to inquiries, and providing information about Lumi.
- To improve our Service: Analyzing assessment data and chat interactions to evaluate and improve the quality, accuracy, and helpfulness of our AI-powered tools. This includes reviewing how our AI systems perform and identifying areas for improvement.
- To maintain and protect our Site: Monitoring for technical issues, ensuring security, and preventing misuse.
- To understand usage patterns: Using analytics data to understand how visitors interact with our Site and to improve the user experience.
- To comply with legal obligations: Responding to legal requests and meeting regulatory requirements.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share information only in the following circumstances:
AI Processing Provider
Assessment data and chat messages are processed using artificial intelligence technology provided by Anthropic, PBC ("Anthropic"). When you submit an assessment or engage in a chat interaction, your inputs are sent to Anthropic's API for processing. Under Anthropic's Commercial Terms, which govern API usage, inputs and outputs are not used for model training. Anthropic retains API data for up to 30 days for trust and safety purposes and may review data flagged for safety. We encourage you to review Anthropic's privacy practices at anthropic.com/legal/privacy.
Analytics Provider
We use PostHog for website analytics. PostHog collects usage data as described in Section 1.2 to help us understand Site usage patterns. PostHog processes this data on our behalf and in accordance with our instructions.
Infrastructure — Vercel and MongoDB Atlas
Our Site runs on Vercel. Assessment sessions are stored in MongoDB Atlas, in a cluster hosted in the United States (N. Virginia).
Email — SendGrid and Kit
We use SendGrid to deliver assessment results to your email address, and Kit to manage mailing lists you have joined.
Content — Sanity
Our blog and help content is managed in Sanity. It does not receive your personal information.
Bot Protection — Cloudflare
Some public tools use Cloudflare Turnstile to distinguish people from automated traffic.
Payments — Stripe
If you subscribe, Stripe processes the payment and receives your card details directly.
Advertising Measurement — Meta
Meta's advertising tools may run only on paid campaign landing pages under /c/*. The browser integration records page views and lead actions; it does not send a signup or completed-registration event.
Legal and Safety Disclosures
We may disclose your information if we have a good-faith belief that disclosure is reasonably necessary to: (a) comply with applicable law, regulation, legal process, or enforceable governmental request; (b) enforce our Terms of Use, including investigation of potential violations; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect against harm to the rights, property, or safety of Lumi, our users, or the public as required or permitted by law.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Site of any change in ownership or use of your personal information.
4. Children's Privacy
Protecting children's privacy is especially important to us given the nature of our Service.
Our Site and Service are designed for use by Parents and adults. Children under the age of 13 should not use this Site directly or submit any information to us. Lumi's currently enabled product is parent-led: children do not have a direct login, chat, or assessment experience, and parents and caregivers provide the information about a child.
Depending on the features a parent or caregiver uses, child-related information may include a child profile's first name and birth month and year; behavioral assessment responses and neurological context provided by a parent; routines, strategies, checklists, coaching activity, and feedback that a caregiver creates; files or images a caregiver uploads where uploads are available; and a caregiver's voice input when voice features are used. Current child-profile forms do not ask for grade.
If we learn that we have collected personal information directly from a child under the age of 13 without verifiable parental consent, we will take steps to delete that information as promptly as possible. If you believe that a child under 13 has provided personal information to us directly, please contact us at hey@withlumi.ai.
5. Data Retention
We retain different types of information for different periods based on the purpose for which the information was collected:
We are an early-stage product and have not yet implemented automated retention limits. Today, assessment responses, chat interactions and mailing-list addresses are retained until you ask us to delete them.
We do not currently state a fixed retention period for marketing analytics records, including session recordings.
Setting and enforcing retention periods for the remaining categories is work we have scoped and not yet completed. We would rather tell you that than publish a schedule we do not enforce.
You may request deletion of your personal information at any time by contacting us at hey@withlumi.ai. We will process deletion requests within 30 days. Please note that anonymized and aggregated data that can no longer be associated with you is not subject to deletion requests.
6. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
All Users
- Right to access: You may request a copy of the personal information we hold about you.
- Right to deletion: You may request that we delete your personal information.
- Right to correction: You may request that we correct inaccurate personal information.
- Right to opt out of communications: You may unsubscribe from our email communications at any time by following the unsubscribe link in any email or by contacting us.
To exercise any of these rights, please contact us at hey@withlumi.ai. We will respond to your request within 30 days.
California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, and the right to correct. The rights described above under "All Users" are available to everyone, wherever you live.
We do not sell your personal information. We have never done so and have no plans to.
Meta advertising tools may run only on paid campaign landing pages under /c/*. The browser integration records page views and lead actions; it does not send a signup or completed-registration event. To control advertising cookies, you can block third-party cookies in your browser, use your device's tracking controls, or email us at hey@withlumi.ai.
Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing, service quality, or access based on exercising these rights.
7. How We Protect Your Information
We implement reasonable administrative, technical, and physical security measures designed to protect the information we collect. These measures include encryption of data in transit and at rest, access controls limiting who within our organization can access personal information, and secure data storage practices.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
8. Artificial Intelligence Disclosure
Our Service uses artificial intelligence and large language model (LLM) technology to process assessment data and generate insights about executive functioning patterns. It is important that you understand the following:
- AI-generated insights are informational only. They are not clinical diagnoses, medical advice, therapeutic recommendations, or substitutes for professional evaluation by qualified healthcare or educational professionals.
- Your assessment inputs and chat messages are processed by Anthropic's AI technology via their API. Under Anthropic's Commercial Terms, API inputs and outputs are not used for model training. Anthropic may retain data for up to 30 days and review data flagged for trust and safety purposes.
- AI outputs may contain inaccuracies or may not fully represent your or your child's unique circumstances. We encourage you to use Lumi's insights as one of many inputs in understanding your family's executive functioning dynamics.
- We may use assessment data and chat interactions to evaluate and improve the performance of our AI systems, subject to the data retention periods described in Section 5.
9. Cookies and Tracking Technologies
We use cookies and similar technologies for the basic functionality of our Site. On permitted marketing surfaces, PostHog uses cookies and browser storage to maintain a pseudonymous visitor identifier, connect activity across sessions and Lumi subdomains, and collect the analytics, referrer, campaign-attribution, and session-recording information described in Section 1.2.
We use the following types of cookies:
- Essential cookies: Required for the basic functionality of our Site.
- Marketing analytics: PostHog page, interaction, performance, error, attribution, and session-recording data on permitted marketing surfaces, as described in Section 1.2.
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that some features of our Site may not function properly if cookies are disabled.
10. Links to Other Websites
Our Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected through our Site and Service.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date at the top of this policy. For significant changes, we will also send a notice to the email address associated with your account or mailing-list subscription. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your privacy rights, please contact us at:
LuminaryTechnologyLabs, Inc.
Email: hey@withlumi.ai
Website: www.withlumi.ai