Privacy Policy

Summary: protecting children's privacy

Lumey is designed to keep children's journaling private and secure.

Children's journal entries are private by default; only the parent/guardian account holder can view them unless explicitly shared.
We collect only minimal personal data needed to operate the App: parent email, child nickname, age range, journal entries, photos and voice input your child adds to entries, subscription status, and aggregated app interactions.
Data is never sold or used for advertising.
Analytics are aggregated, anonymized, and used solely to improve the app.
Data is retained only as long as necessary to provide the app functionality or comply with legal obligations. Parents may request deletion or export at any time.
Verified parental consent is required for children under 13.

Lumey complies with COPPA (U.S.) and PIPEDA (Canada).

Overview

This Privacy Policy explains how Woodbine Media & Technology (“we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use the Lumey mobile application (the “App”) and related services (collectively, the “Services”).

Lumey is a parent-guided journaling app for children under the age of 13, designed to be managed by parents or legal guardians. Protecting children's privacy and complying with applicable privacy laws is core to how Lumey is built.

1. Who This Policy Applies To

This Privacy Policy applies to:

Parents or legal guardians who create and manage Lumey accounts
Children under 13 who use the App under parental supervision

Children may not create accounts on their own.

2. Laws We Comply With

We are committed to complying with applicable privacy laws, including:

The Children's Online Privacy Protection Act (COPPA) (United States)
The Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada)
Applicable App Store and Google Play child safety requirements

3. Information We Collect

We collect only the information necessary to operate Lumey.

A. Information collected from parents / guardians

Name and email address
Account credentials
Subscription and payment status (processed by Apple or Google; we do not store full payment details)
Support communications
Sign-in method. If you choose to sign in with Google, we receive your email address and basic profile information from Google to create and authenticate your account. We do not receive your Google password.

B. Information collected from children

First name or nickname (no last names required)
Age range or birth year (for age-appropriate features)
Journal entries and responses
App usage data necessary for core functionality
Photos your child chooses to attach to a journal entry
Voice recordings, when your child uses voice-to-text to dictate an entry. Speech is transcribed by your device's built-in speech recognition service (provided by Apple on iOS and Google on Android), subject to that provider's privacy policy. Lumey does not store audio recordings.

We do not require location, surname, phone numbers, identification or social media accounts.

Children's personal data is collected only with verified parental consent. Parental consent is obtained through account creation, payment verification, or other methods permitted under applicable law. Parents may withdraw consent and request deletion of their child's data at any time.

5. How We Use Information

We use collected information solely to:

Operate and maintain the App
Provide journaling features and insights to parents
Personalize age-appropriate prompts
Respond to support requests
Improve App performance and reliability
Generate AI-assisted insights, topic summaries, and conversation sparks for parents

To provide AI features, journal entry text is sent to a third-party AI processing provider. Photos and voice recordings are never sent for AI processing. AI features require parental opt-in and can be disabled at any time in Settings.

Children's content is never used for advertising, marketing, profiling, or commercial purposes.

We do not sell personal information. We may share limited data only with:

Service providers who help operate the App — including hosting, storage, analytics, and AI processing — under strict confidentiality obligations
Apple and Google, as required for app distribution and subscriptions
Legal authorities, if required by law

Children's journal entries remain private by default and are accessible only to the parent or guardian account holder.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. No system is 100% secure, but protecting children's data is a top priority.

8. Data Retention

We retain personal data only for as long as necessary to provide the services or comply with legal obligations. Parents may request deletion of their account and their child's data at any time.

9. Parent Rights

Parents or legal guardians have the right to:

Review their child's personal information
Request correction or deletion
Withdraw consent for data collection
Request a copy of stored data

Requests can be made by contacting Lumey Support through the contact form found in the Help & Support section of the Lumey App.

10. Third-Party Services

Children may not link social media or third-party accounts. Parents may optionally use Google Sign-In to access their own account.

11. International Data Transfers

If data is processed outside your country of residence, we ensure appropriate safeguards are in place in accordance with applicable law.

12. Changes To This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to parents through the App or by email. Continued use of Lumey after updates constitutes acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests related to privacy or children's data, contact Lumey Support through the contact form found in the Help & Support section of the Lumey App.