This Children's Privacy Notice explains how LumaTutor collects, uses, discloses, and protects personal information from children who use parent-managed student accounts.

LumaTutor is operated by RYANELLA INC.. A parent or legal guardian must create and manage each student profile. Students do not create independent public accounts.

When a parent creates a student profile, the parent is asked to consent to the collection and use of child information described in this notice. This notice is intended to provide direct notice to the parent before child tutoring features are used.

Profile information. Child name, grade, birth month and year when provided, English level, learning goals, current book, home language, student login code, PIN hash, and parent-student relationship records.

Learning content. Reading passages assigned to the student, questions, answers, writing plans, drafts, final writing, notes, highlights, saved words, review items, scores, tutor feedback, and progress reports.

Session and safety information. Practice timestamps, session progress, tutor events, pasted text signals, page-away signals, failed or paused tutor tasks, and safety-related review flags.

Technical information. IP address, browser user agent, device and browser metadata, login events, error logs, and security logs.

We use child information to provide reading and writing practice, select appropriate content, generate tutoring feedback, score responses, show progress to parents, personalize practice levels, save vocabulary and notes, support lesson review, prevent abuse, troubleshoot errors, secure accounts, and operate LumaTutor.

We may use aggregated or de-identified learning information to improve content quality, reliability, and product design. We do not use de-identified information to identify a child.

LumaTutor uses AI systems to provide feedback, scoring support, hints, vocabulary explanations, writing review, and safety checks.

To provide these features, we may send relevant passage text, prompts, student responses, writing, notes, selected words or sentences, grade or level information, and limited session context to AI service providers.

We limit AI provider sharing to what is reasonably needed for the tutoring or operational function. AI output is educational support and may be incomplete or incorrect.

We do not sell children's personal information. We do not knowingly share children's personal information for cross-context behavioral advertising.

We share child information with service providers only as needed to operate, secure, bill, and support LumaTutor. These providers may include hosting and database providers, email providers, payment processors for parent billing records, authentication providers, AI providers, logging and monitoring providers, and analytics providers if analytics are enabled.

Current categories of providers include Amazon Web Services for hosting, database, content delivery, and email infrastructure; Stripe for payment and subscription processing for parent accounts; Google for optional parent Google sign-in; and AI model providers used for tutoring and operational AI features.

We may disclose child information if required by law, to protect students or users, to investigate security or payment issues, to enforce our Terms, or in connection with a business transfer such as a merger, acquisition, financing, or sale of assets.

Before a student profile can be created, the parent must confirm that they are the parent or legal guardian and consent to LumaTutor collecting and using the child's information as described in this notice.

We record the consent version, timestamp, parent account, student profile, IP address, browser user agent, and consent text for audit purposes.

If we materially change how we collect, use, or disclose child information in a way that requires new consent, we will ask for additional consent before applying that change to the child profile when required by law.

Parents can review child profiles, learning sessions, scores, saved words, and account settings in the parent portal.

Parents can update child profile details, reset student PINs, disable student login, remove a child profile from active parent screens, or contact support to request access, correction, deletion, de-identification, export, or account closure.

When a parent requests permanent deletion or de-identification, we will verify the requester's identity and authority, review whether any limited records must be retained for billing, security, dispute, legal, backup, or audit reasons, and then delete or de-identify information that is no longer reasonably necessary.

Parents may refuse to allow further collection or use of a child's information and may revoke consent by contacting us. If the information is reasonably necessary for the student account or tutoring feature, revocation may require disabling or deleting the student profile.

We may need to verify the requester's identity and authority before acting on a request.

LumaTutor does not provide public student profiles, public posting, open chat rooms, or social features that allow a child to publicly disclose personal information through the service.

We do not display behaviorally targeted advertising to students.

We use reasonable safeguards designed to protect the confidentiality, security, and integrity of child information, including HTTPS, PIN hashing, access controls, audit logs, operational monitoring, and restricted admin access.

We also take reasonable steps to work with service providers that are expected to protect the confidentiality, security, and integrity of information they process for us.

We retain child information only as long as reasonably necessary for the purpose for which it was collected, including providing tutoring, maintaining progress history for parents, supporting billing and audit integrity, securing the service, resolving disputes, and complying with legal obligations.

When child information is no longer reasonably needed, or when a verified parent deletion request can be honored, we will delete, de-identify, or securely dispose of it according to our retention practices and legal obligations.

Some information may remain in backups, security logs, or legally required records for a limited period after deletion from active systems.

Operator: RYANELLA INC.

Email: support@lumatutor.com