Privacy Policy
Last updated: April 2026.
1. Data we collect
- Parent account: email, display name, photo (via Google sign-in), Firebase UID, chosen plan, preferred currency, timezone.
- Child profile: username, age, grade, curriculum, avatar, consent timestamp.
- Learning data: subject selections, diagnostic answers and scores, lessons generated, MCQ answers, Ask Lumi messages, knowledge notes you entered.
- Billing: Paystack transaction references + authorization codes. We never see your card number.
- Analytics: parent-level events via PostHog (US Cloud). We mask every input and text node in session recordings. Child-facing routes are blocklisted from recording entirely.
2. How we use it
Child data feeds the AI curator and lesson generator so Lumi gets better at teaching your specific child. Parent data supports billing, trial management, and customer support. Safety flags are reviewed only by trained admins with the safety_reviewer role.
3. What we don't do
- We don't sell your data. Ever.
- We don't advertise to children.
- We don't train third-party models on your child's conversations. Gemini's API terms preclude training on API traffic by default.
4. Safety flags (plan §16)
If a child's input contains a crisis keyword (e.g. self-harm language), Lumi responds with a canned helpline message and alerts our safety team. You will receive a parent-notification email so you can check in. We retain the raw flag text for 30 days for review, then reduce it to a hash.
5. Retention
Child lesson transcripts and Ask Lumi messages: 24 months rolling. Parent billing records: 7 years (tax/regulatory). AI cost ledger: 36 months. You can request deletion of your account at any time from Profile → Delete account.
6. Your rights (NDPA / GDPR-equivalent)
- Access: email adanma@hipreponline.com and we'll export.
- Deletion: via the app or email.
- Correction: via the app.
- Portability: we'll provide a JSON export on request.
7. Third parties we use
- Firebase Auth (Google) — authentication.
- Supabase — database + storage.
- Google Gemini — AI lesson generation + Ask Lumi.
- ElevenLabs — voice playback.
- Paystack — payments.
- Mailgun — transactional email.
- PostHog — parent-level analytics (US Cloud).
8. Contact
Data concerns: adanma@hipreponline.com. Support: adanma@hipreponline.com.