Privacy Policy

1.1 Commitment to Privacy. Luminous (“we,” “us,” or “our”) respects the privacy of our users. This Privacy Policy outlines the types of information we collect through our web-only interactive learning platform, how we use and safeguard that data, and your rights regarding your personal information.

1.2 Scope. This policy applies strictly to data collected directly via our web application hosted on Vercel and utilizing Supabase database infrastructure.

We collect only the minimum necessary information required to operate our interactive learning features, process authentication, and manage subscriptions.

2.1 Account Registration Data. When you sign up, we collect your email address and a password. Authentication is handled by our identity provider, Clerk, which stores and verifies your credentials securely; we never see or store your plaintext password.

2.2 Authentication Tokens. We utilize standard browser session cookies and local storage tokens to keep you securely signed into your account.

2.3 Educational Progress Data. To provide tracking features, we record your lesson completions, individual quiz answers, and overall module or topic progression.

2.4 Virtual Economy Data. We track your balances of virtual, non-monetary currency (“Lumens” and “Shards”), along with any in-app upgrades or cosmetic customization choices (e.g., selected theme, fonts, and sound settings).

2.5 Feedback and Communication. Any text, bug reports, or suggestions you voluntarily input via our suggestions form are stored in our database alongside your identifier for review.

2.6 Server-Side Analytics. We log basic usage event data server-side (such as lesson start and completion counts, timestamps, and quiz metrics). We do not integrate third-party client-side analytics SDKs (such as Google Analytics or Mixpanel).

2.7 Payment Information. Payment processing for our “LumenMax” tier is handled entirely by our third-party payment processor. Luminous does not collect, view, transmit, or store your credit card numbers, billing addresses, or banking details.

We process your personal information based on legitimate business operations to provide and maintain the Service. Specifically, we use your data to:

• Maintain your account, authenticate your login sessions, and secure the web application.
• Persist and display your academic progress, quiz accuracy, and educational milestone achievements.
• Manage and enforce daily access structures, item shops, and reward calibrations via the Lumens and Shards system.
• Confirm subscription entitlements and billing status communicated by our payment processor.
• Analyze aggregate, server-side system activity to identify technical bugs, improve curriculum sequencing, and optimize the overall application experience.
• Read and address your submitted technical questions or feature suggestions.

4.1 Essential Cookies. We use essential session cookies strictly to track authentication state. These cookies allow the application to verify your identity as you move from page to page.

4.2 No Behavioral Tracking. We do not use advertising tracking cookies, marketing pixels, or cross-site tracking mechanisms. You can configure your browser to reject cookies, but doing so will prevent you from logging in and utilizing the interactive features of the platform.

5.1 Infrastructure Environment. Our web application is built on Next.js and hosted via Vercel’s deployment infrastructure. Our primary data storage layer is a PostgreSQL database managed and securely hosted by Supabase cloud infrastructure.

5.2 Security Measures. Account authentication and credential storage are handled by Clerk, a dedicated identity provider, using industry-recognized security practices. Data is transmitted securely using HTTPS encryption.

5.3 Administrative Access. The Operator reserves the right to directly access the raw database infrastructure solely for administrative support, debugging production errors, manually restoring data, or seeding new educational content.

5.4 Disclaimer. While we employ reasonable technical safeguards to protect your personal data, no method of transmission over the internet or cloud storage is 100% secure. We cannot guarantee its absolute security.

6.1 Strict Data Sharing Policy. We do not sell, rent, trade, or distribute your personal data to ad networks, data brokers, or behavioral analytics entities.

6.2 Core Sub-Processors. We share data only with the cloud infrastructure tools absolute necessary to render the service:

• Vercel Inc. (Web application hosting and routing)
• Supabase, Inc. (Secure database architecture and authentication infrastructure)
• Our Payment Processor (Subscription processing and transaction execution)

7.1 Active Lifecycle. We retain your account details, usage patterns, and learning logs for as long as your registered account remains active within our database.

7.2 Purging Records. If you submit a formal request to delete your account, your data (including progress logs and virtual currency balances) will be promptly deleted from our active production database. Please note that residual transactional indicators or log elements may remain briefly within encrypted system backups until those backups are systematically overwritten.

8.1 Access, Correction, and Deletion. Regardless of geographic location, we provide all users with fundamental control over their data. You have the right to look at the profile metrics we keep, update inaccuracies in your account details, or command the absolute deletion of your entire user profile.

8.2 Exercising Rights. To request access, correction, or permanent deletion of your data, please email the operator directly at harryx2011@gmail.com using the email address associated with your account.

9.1 Age Restrictions. Luminous is designed and built for individuals who are at least 13 years old. We do not knowingly target or collect personal information from children under the age of 13.

9.2 Remediation. If you are a parent or guardian living in Florida or elsewhere in the United States and discover that your child under 13 has created an account on Luminous, please notify us immediately at harryx2011@gmail.com. Upon verification, we will immediately delete the associated account and wipe all corresponding records from our system.

10.1 Updates. We may adjust or expand this Privacy Policy over time to reflect updates in technical services or legal provisions. Any revisions will be marked by an updated “Effective Date” posted clearly at the top of this document.

10.2 Review. We encourage you to routinely check this page to stay informed about how we process and protect your data.

For any privacy-focused questions, data deletion requests, or compliance inquiries, please write to us at harryx2011@gmail.com.