Lumio - Personalized audio bedtime stories for your kidBetaLumio

Privacy Policy for Lumio

Effective Date: April 10, 2026

1. Introduction

Welcome to Lumio Stories (“we”, “our”, “us”). We provide an AI-powered storytelling application that helps create personalized audio bedtime stories for children.

This Privacy Policy explains how we collect, use, store, and share your information when you use https://lumiostories.com/.

2. Information We Collect

2.1 Account & Authentication Data

When you sign in, we collect and store:

  • Unique user ID (uid)
  • Name
  • Email address
  • Profile picture (photoURL)
  • Authentication provider (e.g., Google)
  • Locale (language/region)

Authentication is handled via Firebase Authentication, and we use a secure HTTP-only session cookie (lumio_session) to manage sessions.

2.2 Account Metadata & Usage State

We store the following in our database:

  • Account creation and update timestamps
  • Last login time
  • Product-related state (e.g., token balance, onboarding completion)

2.3 Child Profiles

You may optionally create profiles for children. These may include:

  • Name
  • Gender
  • Birth year
  • Interests
  • Avatar (generated image)

We store this data to personalize story generation.

2.4 Story Content

When you generate or save stories, we store:

  • Story metadata (title, language, description)
  • Story content (text)
  • Story length
  • Associated child profile snapshot
  • Audio file references
  • Visibility settings (private/public)
  • Favorites and saved stories

2.5 Audio Data

Generated story audio is stored as MP3 files in secure cloud storage and linked to your account.

2.6 Voice Cloning

If you choose to create a voice clone, we may collect and store:

  • Voice recordings you upload for cloning
  • A voice clone identifier used for narration

If you create a voice clone, the voice clone is securely stored on Lumio’s ElevenLabs account.

2.7 Analytics & Technical Data

We use Google Analytics for basic analytics, which may automatically collect:

  • Device information
  • App usage data (e.g., page views)
  • General interaction signals

2.8 Server Logs

We may collect limited technical logs (e.g., errors) to maintain and improve the service.

3. How We Use Your Information

We use your data to:

  • Provide and operate the app
  • Generate personalized stories
  • Create audio narrations
  • Maintain your account and session
  • Improve product performance and reliability
  • Monitor usage and fix issues

4. Third-Party Data Processing

Some data is sent to third-party services to provide core functionality:

AI Story Generation

We use OpenAI to generate story text. Data sent includes:

  • Child profile attributes (age derived from birth year, gender, interests)
  • Story inputs (actors, prompts, language)

Text-to-Speech

We use ElevenLabs to generate audio narration. Data sent includes:

  • Story title and full text

These providers process data according to their own privacy policies.

5. Data Storage & Security

  • Data is stored using Firebase services (Firestore, Authentication, Cloud Storage)
  • Session cookies are HTTP-only and securely managed
  • Access is restricted to authorized systems and processes

We take reasonable measures to protect your data, but no system is 100% secure.

6. Data Retention

We retain your data:

  • As long as your account is active
  • As needed to provide the service
  • Until you request deletion

7. Your Rights

Depending on your location (including the EU), you may have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data
  • Restrict or object to processing
  • Request data portability

8. Children’s Privacy

Lumio Stories is designed for use by parents or guardians.

We do not knowingly collect personal data directly from children.

Child-related data (profiles) is:

  • Provided by a parent/guardian
  • Used only for story personalization

9. Cookies

We use:

  • Essential cookies (e.g., lumio_session) for authentication and security
  • No advertising cookies

10. International Data Transfers

Your data may be processed in countries outside your own, including the United States, via our service providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

12. Contact

If you have questions about this Privacy Policy, contact: