Privacy Policy
Effective date: 1 June 2026
Lumen is an IB study platform. This policy explains what personal information is collected, why it is collected, which services help process it, and what controls users have over it.
Information we collect
- Account data such as your email address, password hash, year level, and theme preference.
- Study content such as subjects, notes, chats, flashcards, grade entries, tasks, and uploaded criteria sheets or term planners.
- Optional study memory text that you choose to save for reuse across chats.
- Session data stored in a cookie so you can stay signed in.
- Product usage events at feature level, such as when notes or flashcards are created. These events do not store the full content of your notes or chats.
Collection notice
Lumen collects this information directly from you when you register, sign in, upload study material, save workspace content, or use AI-assisted features. Some information is needed to run the service. If it is not provided, parts of the product such as account access, saved workspaces, or AI study tools may not function.
Why we collect it
- To let you create an account, sign in, and recover access if needed.
- To persist your study workspace across sessions.
- To generate study outputs that use your subjects, notes, criteria, and planners as context.
- To monitor product reliability and understand which features are being used.
Where your data is stored
Lumen runs on Railway. Account and study data may be stored or processed outside Australia depending on the deployment region and service providers in use at the time.
Third-party services
Lumen sends study inputs to external processing services when you use AI-assisted features such as note generation, chat, OCR extraction, and practice marking. Lumen also uses Resend to send transactional emails such as verification and password reset links. Depending on configuration, these providers and infrastructure services may process data in countries such as the United States.
Who can access your data
Your study content is intended to be accessible only to you while signed in. Administrators may access stored data when necessary for maintenance, debugging, abuse prevention, or legal compliance.
Security
Lumen uses server-side sessions, password hashing, and transport-security controls to reduce the risk of unauthorised access. No internet service can guarantee absolute security, so users should still choose strong passwords and protect access to their devices and email accounts.
How long we keep it
Your data remains stored while your account exists. You can delete your account from settings, which removes your stored study data tied to that account.
Your rights and choices
- You can change your password from settings.
- You can request a reset email if you lose access to your password.
- You can update or clear your saved study memory from settings.
- You can delete your account from settings.
- You can ask for access to, or correction of, personal information Lumen holds about you by contacting the privacy address below.
Children and school-aged users
Lumen is likely to be used by school-aged students. Users should avoid uploading information that is unrelated to study support or that they do not want reused in AI-assisted features. As of 1 June 2026, Australia’s Children’s Online Privacy Code is still being developed, and Lumen should be reviewed against that code before 10 December 2026 if it remains in scope.
Complaints and data breaches
If you have a privacy complaint, contact Lumen first using the details below so the issue can be investigated. If Lumen is covered by the Australian Privacy Act and a data breach is likely to result in serious harm, affected users may also need to be notified in line with the Notifiable Data Breaches scheme.
Updates to this policy
This policy may change as Lumen evolves. The effective date above will be updated when changes are published.
Contact
Questions, access requests, correction requests, and privacy complaints can be sent to privacy@lumenib.com.
Back