Privacy Policy

This policy explains what information Lumi-nus (“we,” “us”) collects when you use our language-learning app at lumi-nus.com (the “Service”), how we use it, and the choices you have. If you don't agree with this policy, please don't use the Service.

1. Information we collect

Account information

We use Keycloak, a self-hosted identity provider, to handle sign-in. When you create an account, we receive your email address, display name, and a unique account identifier from Keycloak. We do not store your password ourselves — Keycloak handles authentication directly.

Learning data

To provide spaced-repetition study, we store the decks and cards you create, your review history and ratings, your chosen learning and base languages, your timezone, and your interface theme preference.

Content you upload

If you add images to a card or a deck cover, we store those images to display them back to you. If you submit a dictionary entry (an admin-only feature), we store the words, readings, and definitions you provide.

Technical information

Like most web services, our infrastructure providers log standard request information (IP address, timestamps, and similar metadata) for security and reliability purposes. We do not currently run any third-party analytics or advertising trackers on the Service.

2. How we use your information

• To create and maintain your account and keep it in sync across your devices.
• To schedule your reviews (using the FSRS spaced-repetition algorithm) and generate example sentences that reuse vocabulary you already know.
• To apply your timezone and theme preferences.
• To communicate with you about your account (e.g. email verification).
• To maintain the security and integrity of the Service.

3. How we share information

We do not sell your personal information. We share information only with the service providers that help us run Lumi-nus, and only to the extent needed for them to perform that function:

• Google Cloud Platform — hosting, file storage (uploaded images and generated audio), and task scheduling.
• Neon — our database provider, where your account and learning data is stored.
• Modal — generates the spoken audio for dictionary words and example sentences. Receives text, not your account details.
• DeepInfra — generates example sentences from a target word and a list of vocabulary you already know. Receives word lists, not your account details.
• ElevenLabs — used internally to quality-check generated dictionary audio. Will also power real-time spoken conversation practice once that feature launches — at that point your spoken audio for that feature will be processed by ElevenLabs, and this policy will be updated accordingly before it does.
• SendGrid — delivers account-related emails, such as email verification.

We may also disclose information if required by law, or to protect the rights, property, or safety of Lumi-nus, our users, or others.

4. Cookies

We use a session cookie to keep you signed in. This cookie is required for the Service to function and is not used for advertising or cross-site tracking.

5. Data retention

We retain your account and learning data for as long as your account is active. Dictionary content (words, readings, generated audio) is shared, non-personal reference data and is retained independently of any individual account.

6. Your rights and choices

You can review and update your language, timezone, and theme preferences at any time from Settings. To request a copy of your data, or to request that we delete your account and associated data, contact us at the address below — we'll process deletion and export requests manually while we build a self-service option. Depending on where you live, you may have additional rights under local law (for example, the GDPR if you're in the EU/UK); contact us and we'll do our best to help.

7. Children's privacy

Lumi-nus is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will remove it.

8. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access-controlled storage of secrets and credentials. No online service can guarantee absolute security, so we can't promise your information will be free of unauthorized access, but we work to reduce that risk.

9. International data transfers

Our infrastructure is hosted on Google Cloud Platform. Depending on your location, using the Service may involve transferring your information to a country other than your own.

10. Dictionary & audio content licensing

Some of the dictionary and reference data behind Lumi-nus comes from third-party open data sources, which carry their own attribution requirements. See our Licenses & Attribution page for details.

11. Changes to this policy

We may update this policy as the Service changes. We'll update the “Last updated” date above when we do, and for material changes we'll make a reasonable effort to let you know directly.

12. Contact us

Questions about this policy, or requests regarding your data, can be sent to [email protected].