LumaTutor is an online reading, writing, and study practice service operated by RYANELLA INC.. This Privacy Policy explains how we collect, use, disclose, and protect information when parents, guardians, students, and administrators use LumaTutor.

Student accounts are intended to be created and managed by a parent or legal guardian. Child-specific practices are described in our Children's Privacy Notice.

Parent account information. Name, email address, password hash or authentication provider, language preference, timezone, account settings, login records, and support communications.

Student profile information. Student name, grade, birth month and year when provided, English level, learning goals, current book, home language, student login code, PIN hash, and parent-student relationship records.

Learning information. Assigned passages, practice sessions, level tests, answers, writing drafts and final responses, notes, highlights, saved vocabulary, scores, AI feedback, tutor events, integrity signals, lesson reviews, and progress reports.

Payment and subscription information. Stripe checkout status, plan, credit purchase, amount, currency, tax, receipt links, refund status, subscription identifiers, and related billing events. We do not store full card numbers.

Technical and security information. IP address, browser user agent, device and browser metadata, timestamps, server logs, error logs, audit logs, and service usage events.

Cookies and similar technologies. We use cookies and local storage for login sessions, security, preferences, and basic service operation. If analytics are enabled, analytics identifiers may be used to understand site usage and improve reliability.

We use information to operate LumaTutor, authenticate users, create and manage parent and student accounts, provide tutoring and writing practice, generate feedback, score responses, manage credits and subscriptions, process payments, send transactional emails, provide support, prevent abuse, debug errors, monitor security, and improve service quality.

We may use aggregated or de-identified information to evaluate product reliability, pricing, content quality, and learning outcomes. We do not use de-identified information to identify a parent or student.

LumaTutor uses AI systems to provide tutoring feedback, writing review, scoring support, vocabulary explanations, content safety checks, and administrative drafting or repair tools.

To provide those features, we may send relevant passages, prompts, student responses, writing, notes, selected text, grade or level information, and limited session context to AI service providers. We limit this sharing to what is reasonably needed for the requested tutoring or operational function.

AI output may be incomplete or incorrect. We use AI as educational support, not as a substitute for professional instruction, legal advice, medical advice, mental health care, or emergency services.

We do not sell personal information. We do not knowingly sell or share children's personal information for cross-context behavioral advertising.

We disclose information to service providers only as needed to operate, secure, bill, and support LumaTutor. These providers may include hosting and database providers, payment processors, email providers, authentication providers, AI providers, logging and monitoring providers, and analytics providers if analytics are enabled.

Current categories of providers include Amazon Web Services for hosting, database, content delivery, and email infrastructure; Stripe for payments and subscriptions; Google for optional Google sign-in; and AI model providers used for tutoring and operational AI features.

We may also disclose information if required by law, to protect students or users, to investigate security or payment issues, to enforce our Terms, or in connection with a business transfer such as a merger, acquisition, financing, or sale of assets.

Parents can update account settings, language preference, child profile details, student PINs, and some learning settings in the parent portal.

Parents may contact us to request access, correction, deletion, export, account closure, or child data review. We may need to verify the requester's identity and authority before acting on a request.

Parents may revoke consent for continued collection and use of a child's information. If the information is needed to provide the student account, revocation may require disabling or deleting the student profile.

We use technical and organizational safeguards such as HTTPS, password and PIN hashing, role-based access controls, admin access limits, audit logs, operational monitoring, and restricted access to production systems.

No online service can guarantee perfect security. Parents should keep account passwords, student codes, and student PINs secure.

We keep account, billing, credit, audit, and learning records for as long as reasonably needed to provide the service, maintain progress history, comply with legal and accounting obligations, resolve disputes, protect service integrity, and enforce our agreements.

Child personal information is not kept indefinitely for its own sake. When we no longer have a legitimate reason to retain it, we will delete, de-identify, or securely dispose of it according to our retention practices and legal obligations.

Some records may remain in backups or security logs for a limited period after deletion from active systems.

LumaTutor is designed for parent-managed student accounts. A parent or legal guardian must create student profiles and provide consent before a child uses student tutoring features.

See our Children's Privacy Notice for child-specific information, including the information collected from children, parent consent, parent review and deletion rights, and child data sharing practices.

Depending on where you live and whether a privacy law applies to LumaTutor, you may have rights to know, access, correct, delete, export, or restrict certain uses of personal information. We will respond to verified requests as required by applicable law.

We will not discriminate against users for exercising privacy rights.

We may update this Privacy Policy as LumaTutor changes. If we make material changes, we will update the date above and provide additional notice when required by law or when practical for the change.

LumaTutor is operated by RYANELLA INC..

Email: support@lumatutor.com