Privacy Policy

The short version

• Lumi can be played offline. It uses the internet to sign in, back up children's progress, check subscriptions, download stickers, and show ads in the free version.
• Signing in is optional and uses the Google Play Games account on the device. When signed in, children's profiles and progress are backed up to our servers so they can be restored on another device.
• The free version shows ads that are tagged as directed to children, limited to a G rating, not personalized, and never shown during a game. Subscribers with the no-ads benefit see no ads.
• We count how the app is used with Google Analytics for Firebase, without the advertising ID, to see how families find Lumi. We do not sell personal information, and there is no chat or way for children to contact other people.
• You can delete a child, or your whole account with everything synced to it, from inside the app at any time.

Information stored on your device

The app saves the following on your device:

• Child profiles created by the guardian: a name or nickname, age, avatar color, and optional notes.
• Learning progress: game results, stars, stickers earned, levels, play statistics, and screen time settings and usage.
• App settings, such as language and sound preferences.
• Guardian lock: if you set a guardian password, it is stored only as a salted, one-way hash, never in plain text.
• If you sign in: your sign-in session, kept in the device's secure storage, and downloaded sticker images.

Signing in

Lumi signs in with Google Play Games, and only from guardian mode, so a child opening the app never signs in. After the guardian has signed in on a device, Lumi signs back in automatically on that device when it opens. You can sign out at any time in guardian mode, and Lumi will not sign in automatically again on that device until you sign in yourself.

When you sign in, we receive from Google your Play Games player IDs, display name, and profile picture link. We do not receive your email address or password. We use this to create and recognize your Lumi account.

Children's data we back up

While signed in, the app syncs each child on the device with your account so the same children and progress appear on all your devices. This includes:

• The child profile: name or nickname, age, avatar color, and guardian notes.
• Progress: stars, stickers earned, levels, play statistics, and screen time settings and usage.
• Round history: for each finished round, the game, date and time, duration, whether it was completed, score, stars, and any sticker earned. We keep the latest 100 rounds per child.

Subscriptions and purchases

Subscriptions are sold and billed by Google Play. We never see your card or payment details. To confirm a subscription and unlock its benefits, we receive from Google Play the purchase token, order ID, product, status, start and expiry dates, renewal status, whether it is a test purchase, and the country or region of the purchase, as part of Google Play's record of the subscription, and we link this to your Lumi account.

Ads

The free version shows ads from Google AdMob. Every ad request is tagged as directed to children and limited to content rated G. The app does not access the device's advertising ID, and under this setting Google does not show personalized or interest-based ads. AdMob may still process technical information such as IP address, device type, and app version to deliver ads, limit how often they appear, measure them, and prevent fraud, as described in Google's privacy policy.

Ads appear only in limited places: a full-screen ad before some higher levels, and ads in the guardian's progress page and guardian mode. There are no ads on the home screen or inside a game, and we never use ads that reward children for watching.

Usage statistics

Lumi uses Google Analytics for Firebase to count how the app is used, so we can see how many families install Lumi, how many found it through our own ads on Google, and how many subscribe. It records events such as the app being opened for the first time, app sessions, and subscription purchases, together with technical details such as device model, operating system, app version, and an approximate country or region. Each installation gets a random app instance ID, which changes if the app is reinstalled.

This is set up for a children's app: the app does not read the advertising ID or the Android ID, ad personalization signals are turned off, and no names, child profiles, notes, or game content are recorded. We use these statistics only to understand and improve Lumi and to measure our own campaigns, which are aimed at parents and guardians. They are never used to show ads to children or to build advertising profiles. Google keeps this data for no longer than 14 months.

How we use information

We do not sell personal information, use it for advertising profiles, or share children's information with advertisers.

• To run your account, back up and restore children's progress, and keep your devices in sync.
• To confirm subscriptions, provide their benefits, and deliver sticker images to subscribers.
• To keep the service secure, prevent abuse and fraud, and fix problems.
• To count installs, sessions, and subscriptions, and to measure how well our own ads for Lumi reach parents and guardians.
• To answer your questions and support requests.

Who we share information with

Inside Lumi, only authorized staff can view account and synced data, through an internal admin tool, and only to provide support and operate the service.

• Google, as the provider of Play Games sign-in, Play billing, AdMob ads, and Google Analytics for Firebase, as described above.
• Service providers that host and operate our servers for us, under obligations to protect the data.
• Authorities, when required by law or to protect the rights and safety of our users or others.

Fingerprint and face unlock

If you turn on biometric unlock for the guardian lock, verification is handled entirely by your device's operating system. Lumi only receives a yes/no result and never has access to your fingerprint, face, or any other biometric data.

Children's privacy

Lumi is used by children but managed by guardians. Children do not sign in, create accounts, or enter contact details; sign-in uses the guardian's Play Games account on the device, and child profiles are created and controlled by the guardian. We collect children's information only to provide the app's features described above, never to show children personalized ads or to build advertising profiles. A guardian can review, change, or delete their children's information at any time in the app or by contacting us. We aim to meet the requirements of the Children's Online Privacy Protection Act (COPPA), the GDPR, Indonesia's Personal Data Protection Law (UU PDP), and Google Play's Families Policy.

Keeping and deleting your data

• Delete a child in the app: the child is removed from this device and, when signed in, from your other devices at their next sync. On our servers the child's personal data and round history are deleted; we keep only a deletion record (the child's ID, the time, and the account it belonged to; no name, notes, or progress) so your other devices know to remove the child.
• Delete your account in guardian mode: all children's data synced to the account is permanently deleted, and your name, profile picture, and sign-in details are removed. Children stay on the current device until you delete them there.
• Sign out: syncing stops, and the data already on our servers stays until you delete your account.
• Purchase records may be kept as long as required for accounting, legal, and fraud-prevention purposes. Deleting your Lumi account does not cancel a Google Play subscription; cancel it in Google Play.
• How to delete your account: open Lumi, go to Profile, switch to Guardian mode, and tap "Delete account". The account and everything synced to it are deleted at once.
• No longer have the app? Email [email protected] with the Play Games name you signed in with. We confirm the request by email and delete the account within 30 days. We keep that email as a record that the account was deleted.
• Uninstalling the app removes its data from the device, but not from our servers. To remove that, delete your account in the app first, or email [email protected].

Security

Data is sent over encrypted connections (HTTPS), sign-in sessions are kept in the device's secure storage, and access to our servers and admin tools is restricted. No system is completely secure, but we work to protect your information and will act promptly if a problem occurs.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your and your children's personal information, to withdraw consent (for example by signing out or deleting your account), and to complain to a data protection authority. To make a request, email [email protected]. We may ask you to confirm you own the account before acting on it.

Where data is processed

Our servers and Google's services may be located outside your country. Wherever it is processed, your information is protected as described in this policy.

Device backups

If your device's own backup service (for example, Android backup to your Google account) is enabled, the operating system may include app data in that backup. That backup is controlled by your device settings and your backup provider, not by us.

This website

The public pages of lumi-fun.com do not use cookies, analytics, or tracking. Like any web server, our hosting may keep standard technical logs (such as IP address and browser type) for security and reliability.

Changes to this policy

If the app's data practices change, we will update this page and the date above before the change takes effect, and for significant changes we will also let you know in the app.

Contact us

Questions about this policy or your data? Email Kreatif Labs at [email protected].