This Privacy Policy explains how Lumi Study ("Lumi Study", "we", "us", or "our") collects, uses, shares, and protects information when you visit lumistudy.org and use our AI study tools (together, the "Service"). By using the Service, you agree to the practices described here.
The short version
- You give us notes, files, photos, and messages so our AI can turn them into study packs.
- To generate results, your content is sent to our AI providers (OpenRouter and Google) for processing. We don't sell your data, and we don't use your study content to train our own AI models.
- We don't keep the notes, files, or photos you submit on our servers after your result is generated — copies you save stay in your own browser.
- Accounts and payments are handled by Clerk and Stripe; we never see your full card number.
- You can access, export, or delete your account data at any time — just email us.
1. Information we collect
Information you provide
- Account information. When you create an account, our authentication provider Clerk collects your name, email address, and sign-in credentials (or the profile details from a third-party login you choose to use). We receive your user ID, email, name, and subscription plan status.
- Study content. The text notes, documents and PDFs, images or photos of notes, and chat messages you send to LumiBot — i.e., the material you ask the Service to process.
- Payment information. When you subscribe to a paid plan, payments are processed by Stripe through Clerk Billing. We receive limited billing details (such as your plan, subscription status, and the card brand or last four digits where made available) but never your full card number or security code.
- Communications. If you contact us (for example, by emailing lumistudy.org@gmail.com), we receive your message and contact details.
Information collected automatically
- Usage and device data. Our hosting provider Cloudflare automatically logs technical data such as your IP address, browser type, device and operating system, referring pages, and timestamps, for security, abuse prevention, and reliability.
- Fair-use counters. To enforce per-plan usage limits, we store short-lived counters tied to your account ID or, for signed-out visitors, an identifier derived from your IP address. These counters reset on a daily and monthly cycle and then expire automatically.
- Local storage. We store small amounts of data in your browser — not on our servers — to remember preferences such as your light/dark theme, demo text, and in-progress quiz and flashcard state.
- Cookies. Clerk sets essential cookies needed to keep you signed in and to secure your session. See Cookies & local storage.
2. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service and your account;
- Generate your study materials and LumiBot replies (which requires sending your content to our AI providers — see section 3);
- Authenticate you and keep your account secure;
- Process payments, manage subscriptions, and prevent billing fraud;
- Enforce per-plan usage limits and protect the Service from abuse, spam, and misuse;
- Respond to your requests and provide customer support;
- Understand how the Service is used so we can fix problems and improve it;
- Comply with our legal obligations and enforce our Terms of Service.
3. How AI processes your content
To turn your input into clean notes, flashcards, quizzes, study plans, and LumiBot replies, the content you submit is transmitted through our servers (hosted on Cloudflare) to our AI gateway, OpenRouter, which routes it to the underlying AI model (currently Google's Gemini). The generated result is then returned to you.
- Purpose-limited. This processing happens only to fulfill your request and produce your study materials.
- No training on your content. We do not use your study content to train our own AI models, and we do not sell it.
- Not stored by us. Lumi Study does not save the notes, documents, or photos you submit to a database on our servers; they are held only transiently to generate your result. Any copies you choose to save remain in your browser's local storage on your own device.
- Provider handling. Your content is processed by the providers above under their own terms and privacy policies, which may involve transient logging on their systems.
- Please don't submit sensitive data. Avoid including highly sensitive personal information — such as government ID numbers, health records, financial account numbers, or passwords — in your notes or images.
6. Data retention
- Account data is retained while your account is active and is managed through Clerk. If you delete your account, your profile data is deleted in line with Clerk's processes.
- Submitted study content is not retained on our servers after your result is generated.
- Fair-use counters expire automatically (daily counters within roughly 48 hours; monthly counters within roughly a month).
- Server logs are retained by Cloudflare for a limited period for security and operational purposes.
- Billing records may be retained by us, Clerk, or Stripe for as long as required for accounting, tax, and legal compliance.
- Local storage stays on your device until you clear it.
7. Data security
We protect your information using industry-standard measures, including encryption in transit (HTTPS/TLS), reputable infrastructure and identity providers (Cloudflare, Clerk, and Stripe), and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
8. Your rights & choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access & portability — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete data (you can update most profile details directly in your account).
- Deletion — request that we delete your account and associated personal data.
- Restriction & objection — ask us to limit or stop certain processing.
- Withdraw consent — where we rely on consent, you can withdraw it at any time.
If you are in the European Economic Area or the United Kingdom, these rights arise under the GDPR / UK GDPR, and you may also lodge a complaint with your local data protection authority. If you are a California resident, the CCPA/CPRA gives you rights to know, delete, and correct your personal information and to opt out of its "sale" or "sharing" — note that we do not sell or share personal information in that sense — and we will not discriminate against you for exercising your rights.
To exercise any of these rights, email us at lumistudy.org@gmail.com. We may need to verify your identity before acting on your request.
9. International data transfers
We and our service providers may process and store your information in the United States and other countries that may have data protection laws different from those in your jurisdiction. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers. By using the Service, you understand that your information may be transferred to and processed in these locations.
10. Children's privacy
The Service is intended for users who are at least 13 years old. If you are under 18 (or the age of majority where you live), you may use the Service only with the involvement and consent of a parent, guardian, or school. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
11. Third-party links
The Service may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review their privacy policies.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, provide a more prominent notice where appropriate. Your continued use of the Service after an update means you accept the revised Policy.
13. Contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at lumistudy.org@gmail.com.
See also our Terms of Service.