Lumen Kids — Privacy Policy

Effective Date: April 13, 2026 · Version 1.0 · Developed and operated by Lumenix Labs

1. Introduction

Welcome to Lumen Kids ("the App", "our Service"). Lumen Kids is a curated educational video application designed for children, operated by Lumenix Labs ("we", "us", or "our").

We are deeply committed to protecting the privacy and safety of children and families who use our Service. This Privacy Policy explains in detail what information we collect, how we use it, how we protect it, and your rights as a user and/or parent or guardian.

By downloading, accessing, or using Lumen Kids, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

This policy is written in plain language to ensure it is understandable to parents, guardians, and users across all regions.

2. Who We Are

Lumen Kids is developed and operated by Lumenix Labs, an independent software developer. For all privacy-related inquiries, you may contact us at:

Email: [email protected]

We will respond to all privacy inquiries within 30 days of receipt.

3. Scope of This Policy

This Privacy Policy applies to:

• All users of the Lumen Kids mobile application (iOS and Android)
• All users of the Lumen Kids website and landing pages
• Any related services operated by Lumenix Labs in connection with Lumen Kids

This policy does not apply to third-party websites, services, or applications that may be linked from our platform.

4. Information We Collect

4.1 Parent / Guardian Account Information

When a parent or guardian creates an account, we collect:

• Email address (used for account creation, verification, and communication)
• Password (stored in encrypted, hashed form — we never store plain-text passwords)
• Subscription status and billing history (processed by our payment provider; we do not store full card details)

We do not collect your real name, phone number, home address, or any government-issued identification.

4.2 Child Profile Information

When a parent creates a child profile within the App, we collect:

• Nickname (a display name chosen by the parent — does not need to be the child's real name)
• Birth month and birth year (used solely to serve age-appropriate content and comply with children's privacy laws)

We do not collect:

• The child's full date of birth (day is not required)
• The child's real name
• The child's photograph or biometric data
• The child's location
• Any direct contact information from the child

Children do not create accounts and cannot interact directly with our backend services. All account management is handled exclusively by parents or guardians.

4.3 Usage Data

We may collect anonymised and aggregated usage data to improve the Service, including:

• Videos watched and time spent viewing
• Features accessed within the App
• Crash reports and performance diagnostics

This data is collected at the session level and is not tied to personally identifiable information of the child.

4.4 Device Information

We may collect limited device information for security, fraud prevention, and app functionality, including:

• Device type and operating system version
• App version
• Unique device identifiers (for session management purposes only)

We do not use device identifiers for advertising profiling.

4.5 Information We Do NOT Collect

We explicitly do not collect:

• Precise geolocation data
• Biometric or facial recognition data
• Contacts or address book information
• Social media profiles or credentials
• Microphone or camera data
• Sensitive personal information such as race, ethnicity, religion, or health data

5. How We Use Your Information

We use the information we collect for the following purposes only:

• To create and manage your account and authenticate your identity
• To deliver age-appropriate educational content to child profiles
• To process your subscription payments (via our payment provider)
• To send transactional emails such as account verification, password reset, and subscription receipts
• To improve the App through anonymised analytics and crash reporting
• To enforce our Terms of Service and prevent abuse
• To comply with applicable laws and legal obligations

We do not use your personal information for:

• Targeted advertising or behavioural profiling
• Selling or renting data to third parties
• Automated decision-making that produces legal or significant effects on individuals

6. How Our Content Works — AI Vetting Disclosure

Lumen Kids uses an automated AI-powered content review pipeline to screen and approve educational videos before they are made available in the App. This process occurs entirely on our backend systems.

Important: Users — including children — do not interact with any AI features. The AI is used exclusively by Lumenix Labs as an internal curation tool. When a child watches a video on Lumen Kids, they are viewing content from a pre-approved library, not interacting with an AI system.

No personal data of users or children is shared with or processed by our AI systems. The vetting pipeline operates on publicly available video metadata only.

7. Children's Privacy — COPPA, PDPA & International Compliance

7.1 Our Commitment

Lumen Kids is designed for use by children under the supervision of a parent or guardian. We take our obligations under children's privacy laws extremely seriously.

7.2 COPPA (United States)

We comply with the Children's Online Privacy Protection Act (COPPA). Specifically:

• We do not knowingly collect personal information directly from children under the age of 13
• All accounts are created and managed by parents or guardians
• Child profiles contain only a nickname and approximate age (month and year of birth)
• Parents may request deletion of their child's data at any time (see Section 11)
• We do not condition participation on the disclosure of more personal information than is reasonably necessary

7.3 PDPA (Malaysia & Singapore)

We comply with the Personal Data Protection Act 2010 (Malaysia) and the Personal Data Protection Act 2012 (Singapore). We collect only the minimum personal data necessary to provide our Service (data minimisation principle), maintain appropriate security measures, and provide access and correction rights to all users.

7.4 GDPR (European Union & UK)

For users in the European Union or United Kingdom, our legal bases for processing personal data are:

• Contractual necessity — to provide the Service you have subscribed to
• Legitimate interests — for fraud prevention, security, and service improvement
• Legal obligation — to comply with applicable laws

We do not rely on consent as a legal basis for processing children's data. Parents and guardians in the EU/UK have the rights described in Section 11.

7.5 Global Users

Regardless of your country of residence, we apply the same high standard of data protection to all users globally. We do not offer reduced privacy protections based on jurisdiction.

8. Sharing of Information

We do not sell, trade, rent, or share your personal information with third parties for commercial purposes. We share data only in the following limited circumstances:

8.1 Service Providers

We use carefully selected third-party service providers who process data on our behalf:

• Supabase — Database and backend infrastructure (data hosted on secure cloud servers)
• RevenueCat — Subscription and in-app purchase management
• Apple App Store / Google Play Store — Payment processing for in-app purchases

All service providers are contractually required to process your data only for the purposes we specify and to maintain appropriate security standards.

8.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Lumenix Labs, our users, or the public.

8.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity. We will notify affected users via email and provide the option to delete their account prior to any such transfer.

9. Data Storage and Security

We implement industry-standard technical and organisational security measures to protect your personal data, including:

• Encryption of data in transit using TLS/HTTPS
• Passwords stored using strong one-way hashing algorithms
• Access controls limiting data access to authorised personnel only
• Regular security reviews of our infrastructure

While we take data security seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any identified vulnerabilities.

Your data is stored on servers operated by Supabase. For information on their security practices, please visit supabase.com.

10. Data Retention

We retain your personal data only for as long as necessary to provide the Service and comply with our legal obligations:

• Account data is retained for the duration of your active subscription plus 90 days after account deletion, to allow for dispute resolution
• Child profile data (nickname, birth month and year) is deleted immediately upon account deletion
• Anonymised usage analytics are retained for up to 24 months
• Payment transaction records are retained for 7 years as required by financial regulations

You may request deletion of your data at any time as described in Section 11.

11. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

11.1 Access

You may request a copy of the personal data we hold about you or your child.

11.2 Correction

You may update or correct inaccurate personal data by accessing your account settings or contacting us.

11.3 Deletion

You may request deletion of your account and all associated data, including child profiles. To do so, contact us at the email address in Section 2. We will process your request within 30 days.

11.4 Data Portability

Upon request, we will provide your personal data in a commonly used, machine-readable format.

11.5 Objection and Restriction

You may object to certain processing activities or request that we restrict processing of your data in certain circumstances.

11.6 Parental Rights

Parents and guardians have the right to review, correct, or delete any personal information associated with their child's profile at any time. To exercise these rights, contact us at the email in Section 2.

11.7 How to Exercise Your Rights

Please contact us at [email protected]. We will verify your identity before processing any request and respond within 30 days.

12. Cookies and Tracking Technologies

The Lumen Kids mobile application does not use advertising cookies or cross-site tracking technologies.

Our website and landing pages may use essential cookies for functionality (such as remembering language preferences). We do not use third-party advertising or analytics cookies on our website without your consent.

13. Third-Party Content and Links

Lumen Kids displays educational videos sourced from YouTube. Video content is delivered via YouTube's embedded player. YouTube's own Terms of Service and Privacy Policy apply to the delivery of their video content. We encourage parents to review YouTube's Privacy Policy at policies.google.com.

We do not control YouTube's data practices. However, all content displayed within Lumen Kids has been pre-screened and approved by our team, and child profiles do not have access to the broader YouTube platform through our App.

14. International Data Transfers

Lumen Kids serves users globally. Your personal data may be processed in countries other than your country of residence, including countries where data protection laws may differ from those in your jurisdiction.

Where we transfer data internationally, we ensure that appropriate safeguards are in place, including contractual protections with our service providers, to maintain the same level of data protection regardless of where data is processed.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the Effective Date at the top of this document
• Notify registered users via email at least 14 days before changes take effect
• Display a prominent notice within the App

Your continued use of Lumen Kids after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account before the changes take effect.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lumenix Labs
Email: [email protected]

We take all privacy inquiries seriously and will respond promptly.

This Privacy Policy was last updated on April 13, 2026. © Lumenix Labs. All rights reserved.