Privacy Policy

The controller of your personal information is [LEGAL NAME], [ADDRESS]. Privacy contact: help@lumiboo.app.

• Account data: your email, your password (stored only as a hash by our authentication provider; we never see it), app language, your plan, how many stories you've created, and sign-up and sign-in dates. Legal basis: contract.
• Guest sessions: if you try the app as a guest, we create an anonymous account with no email. Legal basis: contract.
• Child profiles entered by the parent: first name or nickname, age, things they love, things to avoid, and their preferred story mood. Used only to personalize stories. Legal basis: contract.
• Story inputs and results: theme, lesson, feeling, main character and mood; the generated story (title, text and narration script), the narration audio, the chosen background sound, and your favorites. Legal basis: contract.
• Preferences: narrator voice per language, story mood, and background sounds on or off. Legal basis: contract.
• Usage and technical data: app event logs (error and warning codes, the step that failed, short technical details such as the story settings, your plan, the page, and your browser or device type), problem reports you choose to send (your description and, if you choose, technical details such as app version and screen size), and a salted hash of guest IP addresses for guest abuse limits (never the raw IP). Legal basis: legitimate interests (security, abuse prevention, reliability).
• Story ratings and feedback: your 👍 or 👎, any reasons you pick, an optional comment (up to 500 characters), and the rated story's settings (theme, mood, language, narrator voice, background sound and narration version). We use them only to improve stories and narration. Legal basis: legitimate interests (improving the service).
• Safety reviews: if you pick "Something inappropriate", we create a safety report with the story's settings. The story's text is attached ONLY if you tick the box to share it with the Lumiboo team; without that consent the report carries metadata only. You can withdraw consent by changing your rating. Legal basis: consent.
• Payment problem reports: the charge date, amount, last 4 digits of the card and Paddle order or receipt ID, if you choose to give them. We never ask for or store full card numbers. Legal basis: contract and legitimate interests (solving your issue).
• Report contact: registered users are answered at their account email; guests may leave an optional email. Legal basis: legitimate interests.
• Payment data: Paddle, as Merchant of Record, collects and stores your payment details and billing address on its secure pages; you never type them into Lumiboo and we never see full card numbers. When you open Settings → Billing, we display your card brand, last 4 digits and expiry, your billing details and your invoices, fetched from Paddle at that moment and not stored by us. We store only your Paddle customer and subscription IDs, your subscription status, its renewal or end date, and your story-pack purchases (transaction ID, number of stories and date). Legal basis: contract and legal obligations.
• Premium waitlist: the email and language you leave so we can tell you when Premium opens. Legal basis: consent; you can ask us to remove it.

Lumiboo is for parents and guardians. We don't knowingly collect personal information directly from children, and children don't create accounts.

Child details are entered by the parent, kept to a minimum (we suggest a first name or nickname), never used for advertising, never sold, and can be edited or deleted anytime.

If you delete a child profile, stories already made for that child stay in your library (and may include the name you entered) until you delete them or your account.

• Anthropic (story writing): receives the story brief, including the child's first name, age, likes and things to avoid if you picked a child. It also receives the finished story to prepare the narration script.
• ElevenLabs (narration): receives the story's title and text to create the audio. Our background sounds were made with ElevenLabs from our own descriptions, with none of your data.
• Lovable and Lovable Cloud, built on Supabase (app hosting, database, authentication, file storage and account and app emails such as confirmation, password reset and alerts to our team when you send an urgent problem report).
• Paddle (payments, as Merchant of Record).
• Google Fonts: the app loads its typefaces from Google, so your browser sends Google your IP address and browser details when downloading them.

We don't sell personal data or use it for advertising, and we have no ad trackers.

Our database, authentication and audio files are hosted in the United States (Oregon, AWS us-west-2). Providers may process data in other countries under their own safeguards.

• Encryption in transit (HTTPS) and at rest by our hosting provider.
• Row-level security, so each account can only access its own data.
• Audio is kept in private storage and delivered through links that expire after one hour.
• API keys are kept server-side only.
• IP addresses are stored only as hashes, never raw.
• Admin access is limited, protected by two-step verification, audit-logged, and shows account metadata only: never child details or audio, and story text only when you shared it for a safety review (every view is logged).

No system is 100% secure, but we work hard to protect your data.

• Guest accounts with no activity are deleted after 30 days, along with their stories, children and audio.
• Guest IP hashes are deleted after 7 days.
• Account data is kept until you delete your account. Deleting it immediately removes your profile, children, stories, audio, ratings and comments, waitlist entry and problem reports.
• Ratings and comments are kept until you delete the story or your account, and are deleted with them.
• App event logs are deleted after 90 days.
• Problem reports (including any story text you shared for a safety review) are kept while we work on them; resolved reports are deleted 12 months after they were sent.
• Admin audit records (which action was taken, when, and on which account, which may include its email) are kept for security and accountability.
• Paddle keeps billing records as required by law.
• Deleted data may remain briefly in our hosting provider's routine backups.

You can ask for access, correction, deletion and portability, object to how we use your data, and withdraw consent. Write to help@lumiboo.app; we reply within 30 days.

In the app you can delete stories (Library), child profiles and your whole account (Settings).

We only use what's needed to keep you signed in and remember your preferences. Your browser stores your sign-in session, app language, last child picked and story text size.

No advertising or third-party tracking cookies.

If we change this policy, we'll update this page and its date, and tell you in the app or by email about material changes.

Contact: help@lumiboo.app