Last updated: November 8, 2026 · Version 4.1
Lumi ("we," "us," or "our") is a family of educational apps operated by YourSpace LLC, available at lumi-academy.org: Lumi Academy, an interactive Pre-K–8 homeschool curriculum for children ages 2–14; Lumi High, a homeschool curriculum for grades 9–12; and Lumi Lingo, a language-learning app (Spanish, French, Mandarin, Japanese, Russian, and American Sign Language) for learners of any age. Lumi High and Lumi Lingo are included with every Lumi Academy plan and can also be purchased on their own; all three are built and operated the same way — parent- or guardian-managed accounts, no personal information asked of children, no chat or messaging for children, no advertising, no data sold — and this single policy applies to all of them. Where a practice is specific to one app rather than shared across all three, it's called out explicitly below.
The Children's Online Privacy Protection Act (COPPA) and our own values require that we protect children's privacy with the highest care. Here is exactly how we comply:
Only parents or legal guardians may create Lumi Academy accounts. No child under age 13 (or any age) may register independently. When you create an account, you confirm that you are the parent or legal guardian of any child learner profiles you add.
We obtain verifiable parental consent before any information is collected in connection with a child's educational activity. By creating a parent account and adding a child profile, you provide consent for us to collect and use the educational data described in this policy. You may withdraw consent at any time by requesting account deletion (see Section 5).
We do not ask children for personal information, and children cannot chat with or send messages to other people anywhere in Lumi. Information about a child learner profile is entered by the parent or created by the child's lesson activity (such as scores and the answers a child taps or types in a lesson). The following data is stored:
| Data Type | What It Is | Purpose | Who Provides It |
|---|---|---|---|
| Child's first name or nickname | Display name for the learner profile | Personalization | Parent |
| Age range | Age bracket (e.g., "6–8") | Curriculum selection | Parent |
| Grade level (optional) | Grade selection for Academy or High track | Lesson alignment | Parent |
| Lesson history & scores | Which lessons were completed and performance scores | Progress tracking, adaptive curriculum | System (generated by activity) |
| Lesson answers (work samples) | For each lesson question: the question, the child's first answer (the choice tapped, or a short typed answer, trimmed to 80 characters), and whether it was correct (Academy) | Printable work samples for homeschool portfolios, parent review | System (generated by activity) |
| Lesson time & attendance | How long each lesson took (capped at 30 minutes) and which days had lessons (Academy) | Attendance and instructional-hour records for homeschool compliance | System (generated by activity) |
| Learning accommodation settings (optional) | On/off preferences such as an easy-read font, larger text, or extra time on timed games. These are display preferences only; we never ask for or store a diagnosis (Academy) | Making lessons easier to read and use | Parent |
| Standardized test results (optional) | Test name, date, grade tested, and national percentile scores, if the parent chooses to record them (Academy) | State compliance records, progress reports | Parent |
| Lumi Jobs entries and goals | Job names, notes and dates a parent sets up, the status of each job the learner marks done (waiting, approved or not yet), and an optional savings goal and wishlist | Running Lumi Jobs, the allowance record and Lumi Bucks | Parent (jobs and approvals) and the learner's taps |
| Lumi Bucks balance | How many Lumi Bucks a learner has earned (and, when purchases are offered, bought) | The in-app store and Jobs | Earned in the app; bought by the parent |
| Standards references | For completed lessons that have one, a reference to a related education standard code (for example Common Core or TEKS) (Academy/High) | Educational reporting, progress reports | System (generated by activity) |
| GPA & course credits | Grade-point and credit tracking for a high-school transcript (Lumi High only) | Transcript generation for homeschool records | System (generated by activity) |
| Language lesson sessions | Which language, topic, and how many answers were correct per session (Lumi Lingo only) | Progress tracking, spaced-repetition review | System (generated by activity) |
| XP, level, badges, streak | Gamification metrics, shared across all three apps | Motivation and engagement | System (generated by activity) |
We do not collect: voice recordings (no app in the Lumi family requires a child to speak into a microphone — every exercise is answered by tapping or typing), photos, videos, biometric data, precise geolocation, social media identifiers, or any information beyond what is listed above.
Lumi used to offer two optional ways for children to take part in Lumi Circles, each turned on only by a parent: a kids' room inside a co-op (cards built from a child's learning progress for children 6 and older, and typed messages for children 10 and older if the parent allowed it), and Kids Square (typed messages for children 10 and older). Both ended on November 7, 2026. Children can no longer post, type messages, or be turned on for either feature, and Lumi Circles is now for parents only.
Records from these features. As of November 7, 2026, we hold no children's messages, posts, or parent permission records from either feature. We keep a log of when Lumi staff opened the restricted safety area for these features, which we delete 12 months after each entry. If any other record from these features is found, we delete it on the schedule that applied when it was collected:
| What | When we delete it |
|---|---|
| Children's messages, posts and progress cards, and text held for safety review | 30 days after it was sent or caught |
| Records of blocked messages, self-harm alerts and notes to parents, with no message text | 90 days |
| Reported messages and report cases | Messages: 90 days after we close the report, and no later than 12 months. Record of the action, with no message text: 12 months after closing. |
| Co-op membership | 90 days after leaving |
| Parent permission and co-op approval records | 3 years after permission ended |
| Records of who opened restricted chat records | 12 months |
When we must keep something longer. We keep specific records longer only when one of these applies: we made a report to the National Center for Missing and Exploited Children, which federal law requires us to preserve for one year; a government agency or court requires it; or we reasonably expect a legal claim. We keep only the related records, limit access, review the need every 6 months, and delete them when the need ends.
How we delete. We delete records from our live systems so they cannot be read and take reasonable steps to prevent access during deletion.
Your choices. A parent can ask to see or delete any information about their child from these features at [email protected].
We never display third-party advertising to child users. We never use children's data for behavioral advertising. We never sell, rent, or share children's data with advertisers or marketing companies.
We only collect the minimum information necessary to provide the educational service. Child profiles use nicknames or first names — no last names, contact information, or social identifiers are required or stored.
| Data Type | Purpose |
|---|---|
| Email address | Login, account management, service communications, billing |
| Name (optional) | Personalizing account communications |
| Subscription & payment status | Access control; payment is processed by Square (we do not store card numbers) |
| Lumi Bucks purchase history (when purchases are offered) | Amounts and dates of Lumi Bucks purchases; payment details stay with Square. Lumi Jobs has no chat, images or video |
| Lumi Circles profile | Display name (first name and last initial), picture, state, an optional short bio and interests, what you say you are looking for in a co-op, and the age ranges of your children (never their names or exact ages). When you ask to join a co-op, its admins see this profile with your request |
| Lumi Circles posts and groups | Global feed posts, replies and reactions (visible to all paying members); co-op memberships and roles, join-request answers, meetup RSVPs and sign-ups, co-op posts, replies, reactions, shared-goal totals, and an optional contact card that only approved members of that co-op can see. Admins can see members' profiles and join-request answers |
| Lumi Circles agreement record | Each time you open Circles and agree to the rules, we record the version you agreed to, the time, and a running count |
| Lumi Circles reports and moderation records | Reports between members, a saved copy of the reported content, content we hid while it is reviewed, removal and strike counts, bans, and records of messages blocked by our rule-based filters, kept for safety and fair enforcement. Lumi staff can see these |
| Support chat conversations | Messages you send to our support assistant in the parent area, its replies, and a record of any change it made to your account after you said yes (with an undo copy for 24 hours). We use these to answer you and to follow up. See the Anthropic entry in Section 6 |
| Device identifiers | Firebase authentication and app security |
You have the following rights with respect to your account and your child's data. All requests are processed within 7 business days.
You can view all data associated with your account and child profiles at any time through the Lumi Academy app. You can also generate a formal Progress Report from the Parent Dashboard that includes all lesson history, standards references, and performance data.
You can update your child's name, age range, and grade level directly in the Parent Dashboard at any time.
You may request deletion of your account and all associated data (including all child profiles and educational records) in two ways:
30-day recovery copy. When an account is deleted, its data is removed from the app. So that a family who deleted by mistake can get their children's records back, we keep a copy in a locked recovery store for 30 days, which only the account owner (by asking our support) and Lumi staff can restore. After 30 days the copy is permanently deleted. If you want the copy deleted sooner, say so in your request and we will delete it within 7 business days.
You may withdraw your consent for us to collect and process your child's educational data at any time by requesting account deletion as described above.
We do not sell, rent, or share personal information with third parties for their own purposes. We share data only with the following service providers. Most are bound by their contracts with us to use it only to provide services to us. YouTube is used under its standard public terms, and Google's privacy policy covers what it receives:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Google (Firebase and Google Cloud) | Sign-in, database, file storage, hosting, cloud functions, push notifications, and the computers that run Lumi's own character voices (the voices are made on Lumi's own server software on Google Cloud, not by an outside voice company) | Account data, lesson records, and the words to be read aloud, which can include a child's first name (encrypted in transit and at rest) |
| Square | Payment processing on our website | Email address only; card data goes directly to Square and is never stored by us |
| Apple | In-App Purchase, when you subscribe inside the iOS app | Apple handles the payment under your Apple ID. The Lumi app passes us the purchase receipt from Apple (the StoreKit transaction) and its status; we do not receive your card details |
| Resend | Sending our emails (sign-in help, receipts and account notices, progress summaries, support replies) | Your email address and the content of the email, which can include your child's first name and progress |
| Anthropic | Our support assistant: the support chat in the parent area is answered by an automated assistant built on Anthropic's Claude | Your support messages and, when needed to answer you, details from your own account: subscription status, your learners' first names, age ranges, grade levels and lesson progress. Never card details or passwords. Lumi's lessons do not use this service |
| Brave Search | Web results in Lumi Browser, only when a parent has turned web search on for a child (or when a grown-up or teen searches the web) | Only the search words, sent from Lumi's server with safe search set to strict by default (a grown-up can choose a moderate setting for their own searches; safe search reduces unsuitable results but cannot promise there will be none). Never a name, account or device ID, or location. Brave sees the request as coming from Lumi, not from your family. Lumi does not save children's search words. Brave's handling of the words it receives is covered by Brave's own privacy policy |
| ElevenLabs | Text-to-speech audio for Lumi Lingo's lessons (every answer choice is read aloud so a child never has to speak into the device) | The lesson words to be read aloud only — no account or device details |
| YouTube (Google) | Playing the videos in the Lumi video library and karaoke songs, through YouTube's embedded player in privacy-enhanced mode (youtube-nocookie.com) | The video pictures and the player load from YouTube's servers, which receive the device's IP address. YouTube says that in privacy-enhanced mode it does not store information about a viewer until a video is played. Once a video plays, YouTube receives the video watched and may use cookies or similar storage under Google's privacy policy. Lumi sends YouTube no name or account details |
| Venmo or Cash App | Paying commissions to adults in our Creator Referral Program | The Creator's payout handle and the amount. No children's data |
When the app loads, your device also fetches fonts and code files from Google Fonts and public code libraries (such as cdnjs and jsDelivr). Like any website, these see your device's IP address, but we send them no account or child information. If a future feature needs a new service provider, we will add it to this list before that feature is turned on.
Lumi Browser search. Kids under 13 search the Lumi Library by default, which Lumi hosts itself. If a parent turns on web search for a child, or for grown-up and teen searches, Lumi's server sends only the search words to Brave Search to get web results, with safe search set to strict by default (a grown-up can choose a moderate setting for their own searches) and Lumi's own filters. Safe search reduces unsuitable results but cannot promise there will be none. We never send Brave who is searching, a name, an account or device ID, or location. We do not save children's search words; we keep only a daily count of searches for billing and abuse prevention. Brave's handling of the words it receives is covered by Brave's own privacy policy.
What Lumi Browser keeps. Lumi does not keep children's search words. For each search profile we keep: a daily count of searches, for daily limits and the bill (400 days); a weekly list of school topics picked from a fixed list, never the words (63 days); "Ask a grown-up" requests, which say the kind of search and the child's reason, never the words (deleted when you answer, or after 30 days); reports a family makes about a result, with its address and the reason (180 days); the parent's search settings, and the parent's recorded OK (the wording version, the time and how it was given) when web search is turned on for a child under 13; and research notebook pages, which are facts a child types in their own words with where they found them (12 months, or until a parent or child deletes the page). If a child's search shows they may be hurt or need help, we keep only the kind of search for 30 days for safety review. If a grown-up's search looks like it is seeking sexual material involving children, we block it and keep those words for 30 days for safety review. A parent can see and delete all of this in Settings, with the Parent PIN, and closing the account deletes it, except the parent's recorded OK, which we keep for 3 years after the permission ends as proof of consent.
Lumi Browser notebook. Children can type short notes (up to 400 characters) and save an article with its source in their notebook. We do not ask children for personal information, and the notebook reminds them not to put names, addresses or phone numbers in their notes. Notes that look like personal information, such as an email address, phone number or street address, are not saved. A grown-up can see and delete notebook pages from the Parent dashboard. Notebook pages are kept for up to 12 months, and they are deleted when the account is deleted.
Lumi desktop app. The Lumi app for computers sends Lumi a few simple counts so we know the app works: when it is installed, opened and closed, how long it was open, whether it was used offline, the app version and the type of computer, plus a random install code. If a parent is signed in, these counts are linked to the family account. The app never records children's names, anything typed, pages visited or what is on the screen, and no outside companies receive these counts.
Lumi Duels. Duels are quick math rounds for learners in grades 1 to 12. There is no chat, no typing and no messages: players only tap answers. Duels are on for each learner unless a parent turns them off, which takes one tap in the Parent dashboard, and practice against the computer always stays open. Live rounds only run at set times each day (3:30 pm and 7:00 pm, 30 minutes each, in your family's own time zone). If no one is waiting, a learner plays a recorded earlier round from another player, labeled as a practice round. Other players can see a child's Lumi Pets pet name (picked from Lumi's own list, never the child's real name), their guide character, an earned title such as "Math Spark", and which answers were right and how fast. They never see a child's name, photo, age, grade or account. Grown-ups play in a separate league, shown only to other grown-ups by their Lumi Circles display name (first name and last initial). Children and grown-ups never play each other, and two players from the same family are never matched. Each week the top players by points appear on a board and in a championship bracket that shows names as above, titles and points. For each learner we keep the on/off setting and when it was changed, a level, points, win counts and titles. For each round we keep the questions, whether each answer was right, how long it took, the score and the opponent's pet name, so you can replay it and see it in the Parent dashboard. We also keep a recorded copy of finished rounds, which can be played to other players as a practice round (pet name, guide, title, and right or wrong with the time for each question; no account details). Lumi Bucks earned in duels are added within daily and weekly limits, and children can never bet, stake or lose Bucks. We keep your family's time zone to run the daily times. No outside company receives duel information. We keep duel records while your account is active and delete them when you delete your account. Other families' replay history may still show your child's pet name (or a grown-up's Circles display name) as an opponent, with no link to your account.
All data is encrypted in transit using HTTPS/TLS. Data at rest is protected by Google Firebase's security infrastructure, which includes AES-256 encryption and SOC 2 Type II certification. We use Firebase Security Rules to ensure that each parent can only access their own account and children's data.
We retain account and educational data for as long as your account is active. Upon account deletion, we delete personal data (parent account, child profiles, lesson history, standards records) within 7 business days, except the 30-day recovery copy described in Section 5.3, records from ended features described in "Children's Circles features that have ended," and records under a legal hold, which we keep longer as described in "When we must keep something longer." Support chat conversations are kept for 12 months after the last message, as a record of the help we gave, and are then deleted automatically. The 24-hour undo copy of a change made by the support assistant is deleted within 7 days after it expires. Both are deleted right away when you delete your account (they are not kept in the 30-day recovery copy), and you can ask us to delete your support chats sooner at any time. Anonymized, aggregated usage statistics (no personal identifiers) may be retained for service improvement purposes.
Progress reports generated through the Parent Dashboard list your child's completed lessons, subjects, scores and time, and, for lessons that have one, a reference to a related education standard code (such as Common Core or TEKS). These references are a guide for your records; Lumi does not claim that its curriculum is aligned to or meets any set of standards. You can use the reports for homeschool portfolios or co-op records; check your own state's requirements.
Lumi Academy uses browser local storage and session storage to maintain login state and cache lesson progress for a smooth offline-capable experience. We do not use third-party tracking cookies, behavioral advertising pixels, or cross-site tracking technologies. The one exception we know of is YouTube's embedded video player, which Lumi runs in YouTube's privacy-enhanced mode: YouTube says it does not store information about a viewer until a video is played, and once a video in the Lumi video library plays, YouTube may set its own cookies under Google's privacy policy (see Section 6). Inside the Lumi apps (Lumi Academy, Lumi High, Lumi Lingo and Lumi Circles) we do not use Google Analytics or any other outside analytics or advertising tools. Our public website pages, such as our home page and articles for parents, use Google Analytics to count visits and see which pages are helpful; those pages are for grown-ups and are not part of a child's learning. You can block this with your browser's privacy settings or Google's opt-out tool. We also keep our own product event counts, such as which area was opened, the age band, and the device type (phone, tablet or computer). These events contain no account ID, child ID, name, or typed text, and are kept for 90 days. Each visit also carries a random session code (10 characters, created each time the page loads and kept only for that visit, not linked to the account or any child), used to see the order of steps in a visit.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app on or before the date they take effect. The updated policy will always be available at lumi-academy.org/privacy-policy.
For any privacy questions, data requests, or COPPA inquiries, please contact our Privacy Officer:
We are committed to responding to all privacy-related inquiries within 5 business days.
This Privacy Policy is governed by the laws of the United States. Lumi Academy operates in compliance with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506), the Family Educational Rights and Privacy Act (FERPA), and applicable state privacy laws.