Privacy Policy

2. Data We Collect

• Account data - name, email address, hashed password, subscription status
• Usage data - materials practised, topics completed, chat sessions, flashcards used
• Progress data - subject and topic performance, streak counts
• Chat content - messages you send to the tutor, stored to maintain conversation history
• Payment data - processed securely by Stripe; we do not store card details
• Device data - browser type, IP address for security and analytics

4. Legal Basis for Processing

• Contract performance - to provide the Service you have signed up for
• Legitimate interests - to improve the Service and prevent fraud
• Legal obligation - where required by law
• Consent - for optional marketing communications

6. Data Sharing

We do not sell your personal data. We may share data with:

• AI providers - to process chat messages
• Payment processors - to handle subscription billing
• Hosting providers - to operate the Service
• Law enforcement - when required by law

9. Your Rights

Under UK GDPR, you have the right to:

• Access - request a copy of your personal data
• Rectification - correct inaccurate data
• Erasure - request deletion of your data
• Restriction - limit how we process your data
• Portability - receive your data in a machine-readable format
• Objection - object to processing based on legitimate interests

To exercise any of these rights, email [email protected].

1. Who We Are

Lumiq ("we", "us", "our") operates the Lumiq GCSE revision platform at lumiq-learning.co.uk. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For data protection enquiries, contact us at [email protected].

5. AI Processing

Messages you send to the Lumiq tutor are processed by third-party providers to generate responses. These providers act as data processors under our instructions. We recommend you do not include sensitive personal information in chat messages.

7. Data Retention

We retain your account data for as long as your account is active. Chat session history is retained for 12 months by default. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

8. Cookies

We use essential cookies to maintain your session and authentication state. Cloudflare Turnstile may set cookies when you complete the registration captcha. You can control cookies through your browser settings, though disabling essential cookies may affect functionality.

10. Children's Privacy

The Service is directed at students aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us and we will delete it promptly.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), hashed password storage, and access controls.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or via a notice on the Service.

14. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.