Privacy

What we never do

• No microphone, no camera, no photo upload. There is no record button anywhere in this app, for her or for you. Her voice and her face never exist here in the first place.
• No ads and no advertising code. No ad network, no ad SDK, no pixel, nothing that follows anybody anywhere.
• No analytics and no third-party trackers. Not Google Analytics, not anything else.
• Nothing about her is public. No profile, no gallery, no share link. There is no way for a stranger to see her name or her videos.
• Nothing is sold, ever. Not her name, not your notes, not to anybody, for any price.

Which companies see something, and exactly what

Three companies are involved in making one video. Each one gets the smallest piece it needs to do its job, and nothing else. This is the whole list.

Google's cloud services run under business terms that say customer data is not used to train their models. The Claude account that writes Lumi's lines is a personal Max plan, and confirming its training setting is on Jesse's own list; until that is confirmed and dated here, treat the first name and note that go to Anthropic as not verified either way. We would rather say that than imply something we have not checked.

Everything we store

The complete list. If it is not here, we do not have it.

• Your email address and your name, from the Google account you signed in with.
• Her first name, and how to say it if you spelled that out.
• Her birth month and year. Not the day. It is used for one thing: picking which missions suit her age.
• The notes you write about her day.
• The missions, whether each one was finished, tried or set aside, and the optional line you wrote about what was hard.
• The videos Lumi sent her, their still images, and the words she says in each one.
• The keepsake: the dates and titles of the things she has done.
• A count of how many times you tapped “Hear it” in the past hour, so nobody can run up a bill.

No last name. No address. No school. No gender. No phone number. No location. We do not ask, so we cannot store it.

How long we keep it

• The note you wrote: 30 days after its video is made. Once Lumi has said it, the raw note has done its job and the text is deleted.
• The “what was hard” line: 14 days after the mission closes. It never goes into a printed keepsake.
• Videos and the keepsake: while the account is open, and 90 days after you close it. Those 90 days exist so a family who changes their mind still has the videos.

A job runs every night at 3:15 in the morning, Pacific time, and does the first two deletions itself. It is not a policy somebody has to remember.

Checking when the deletion job last ran...

Deleting everything

Open the parent page, tap the menu, and choose “Delete everything”. You type the word DELETE so it cannot happen by accident, and then it happens immediately, not after a wait and not after an email.

It removes, in one step:

• Her record, her name and her birth month.
• Every note you ever wrote and every mission.
• Every video file and every still image, deleted from storage.
• The keepsake.
• The saved audio of her name.
• Your parent record.

It tells you the number of each thing it deleted, and then signs you out. We keep no copy, no archive and no backup of it afterwards. If you would rather ask a person, write to jd@drdashe.com and we will do it and confirm.

About the child

The child has no account. She cannot sign in, cannot type, and cannot reach anything outside her own letters. The parent is the only user, and the parent is the author of everything Lumi says. Lumi never sees anything you did not write.

This is a family app in use by its own family. Before any stranger's child uses it, a children's privacy lawyer reads this page and the code behind it. That has not happened yet, and this sentence stays here until it does.