Privacy Policy

Last updated: September 3, 2025

Privacy Summary

Lumeno collects basic account information and your academic content to provide AI tutoring services. We use Enterprise APIs that never train on your uploads, store everything securely on AWS, and never sell your data. You own and control all your academic materials.

1. Data Controller Information

Data Controller: Lumeno Education, Corp.

Address:

Lumeno
605 West 42nd Street
62w
New York, New York 10036
United States

Email: admin@lumenoai.com

We are the data controller responsible for your personal information when you use our AI-powered learning platform.

2. Information We Collect

Account Information

  • Name and email address
  • School or university affiliation
  • Academic year and major of study
  • Account preferences and settings
  • Profile information you choose to provide

Academic Content

  • PDF documents and course materials you upload
  • Course names and organizational structure you create
  • Study notes, summaries, and annotations
  • Practice questions and quiz responses
  • Chat conversations with our AI tutor

Usage Information

  • Basic platform usage (anonymized analytics via Google Tag Manager)
  • AI token usage for service optimization
  • Study progress and learning milestones
  • Performance on practice questions you generate
  • Authentication session data

3. How We Use Your Information

AI Tutoring Services:

  • Generate summaries and explanations of your uploaded documents
  • Answer questions about your course materials
  • Create practice questions based on your content
  • Provide personalized study recommendations
  • Organize your courses and academic materials

Platform Operations:

  • Maintain secure user accounts and authentication
  • Provide customer support when you contact us
  • Improve our AI tutoring through anonymized usage analytics
  • Send important account notifications
  • Ensure platform security and prevent abuse

5. Information Sharing

We never sell your personal information or academic content.

Service Providers

  • AI Providers: Enterprise APIs (OpenAI, Anthropic) that contractually never train on your content
  • Cloud Hosting: AWS for secure storage and processing
  • Authentication: AWS Cognito for secure login
  • Analytics: Google Tag Manager for basic, anonymized usage metrics

Legal Requirements

  • When required by law or legal process
  • To protect user safety and platform security

6. Data Security

Enterprise-Grade Security Measures

  • Encryption: All data encrypted in transit (TLS) and at rest (AES-256)
  • Access Controls: Strict authentication and authorization protocols
  • Enterprise APIs: AI providers with contractual no-training guarantees
  • Regular Monitoring: Continuous security monitoring and threat detection
  • Data Isolation: Your content remains private and separate from other users

7. Data Retention

We keep your information only as long as needed:

  • Account Information: While your account is active, plus 30 days after deletion
  • Academic Content: Until you delete it or close your account (you have full control)
  • Chat History: Stored with your documents until you delete them
  • Usage Analytics: Anonymized platform metrics retained for service improvement
  • Authentication Data: Cleared when you log out or tokens expire

You can delete individual documents, courses, or your entire account at any time.

8. Your Privacy Rights

Under CCPA, GDPR, and other privacy laws, you have the following rights:

Access & Portability

  • Access your personal information
  • Download your data in a portable format
  • Know what data we collect and how we use it

Control & Deletion

  • Correct or update your information
  • Delete your account and data
  • Restrict or object to processing

Transparency

  • Know if we sell your data (we don't)
  • Understand data sharing practices
  • Receive non-discriminatory treatment

Communication

  • Opt out of marketing communications
  • Withdraw consent where applicable
  • File complaints with supervisory authorities

How to Exercise Your Rights: Contact us at admin@lumenoai.com or use your account settings. We'll respond within 30 days and verify your identity before processing requests.

9. International Data Transfers

Our platform operates using cloud services that may process data in different locations, primarily within Canada and the United States. When data crosses borders, we ensure:

  • Enterprise-grade security standards are maintained
  • All service providers meet strict privacy requirements
  • Your academic content remains encrypted and protected
  • No data is used for AI model training regardless of location

10. Cookies and Tracking Technologies

We use minimal tracking technologies:

  • Authentication: Cognito/Amplify tokens to keep you logged in
  • Google Tag Manager: Basic analytics for platform improvement (anonymized)
  • Local Storage: Course data and user preferences on your device

We don't use tracking cookies for advertising or detailed behavioral analysis.

11. Student Privacy Compliance

As an educational platform, we comply with:

  • FERPA: Family Educational Rights and Privacy Act protections for student records
  • COPPA: Special protections for users under 13 years old
  • Academic Integrity: Supporting honest academic work and proper attribution
  • Institutional Compliance: Working with schools to respect their privacy policies

12. Policy Changes

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We'll notify you of significant changes through:

  • Email notifications to your account
  • Prominent notices on our platform
  • Updates to the "Last Updated" date above

Continued use of Lumeno after policy changes means you accept the updated terms.

13. Contact Information & Complaints

Privacy Questions & Data Requests:

  • Email: admin@lumenoai.com
  • Support: Through your account dashboard
  • Mail: Lumeno, 605 West 42nd Street, 62w, New York, New York 10036, United States

Complaints & Supervisory Authorities:

  • EU residents: Contact your local Data Protection Authority
  • California residents: File complaints with the California Attorney General
  • We're committed to resolving privacy concerns promptly and fairly

Your trust and academic success are our top priorities. We're committed to protecting your privacy while providing world-class AI-powered learning experiences.