Privacy

Last updated 16 August 2026

Lumina is operated by Praneeti Singh. This describes exactly what it stores and who else sees it, written from what the code actually does rather than from a template.

What is stored

• Your email address — to identify your account and sign you in.
• Your password, hashed — using scrypt with a per-account salt. The original password is never stored and cannot be recovered from the hash, which is also why there is no password reset.
• Your name, if you gave one. It is optional.
• Your study sets — the notes, flashcards and quiz generated from your material.
• The text of text-based sources you import — pasted notes, DOCX text, transcripts — so the tutor can quote the original wording. PDFs and images are not stored; only what was generated from them.
• Your review history — which card you graded, how, and when; time spent studying; quiz scores. This is what every progress figure is computed from.
• Payment records — the transaction reference you submit and when your plan runs to. No card or bank details ever reach this service.
• Signup and failed sign-in counts, keyed to an IP address or email, to limit abuse.

Who else sees your material

To generate a study set, your material is sent to Google's Gemini API. There is no way to produce the notes without doing this. What you send is subject to Google's own terms and privacy policy, and free-tier API usage in particular may be used by Google to improve their products — if your material is confidential, do not import it.

Your data is stored in a database hosted by Turso, and the site runs on Vercel. Both can technically access data on their infrastructure.

What is not done with it

• Your material is not sold, shared, or shown to other users.
• No advertising, no tracking pixels, no third-party analytics, no third-party cookies. Nothing about you is sent to another company for measurement.
• The only cookie set is the one that keeps you signed in.
• Page views are counted on this site alone, to know whether anyone is using it. Each visit records the page and a one-way hash of your address and browser that changes every day — enough to count two people apart within a day, useless for following anyone across days. Your IP address itself is never stored.
• Nothing is used to train any model by this service. What the AI provider does on their side is governed by their terms, linked above.

Other people cannot see your data

Every database query is filtered by the signed-in account. Another user cannot open, list, or delete your study sets — attempting to reach one returns “not found” exactly as if it did not exist.

Deleting it

• Export — Settings has a one-click export of everything you have, as a plain file you can read without this app.
• Erase — Settings also erases every study set and every review you have logged. It cannot be undone.
• Full account deletion — email the address below and your account and its data will be removed.

How long it is kept

Your study sets and review history are kept until you delete them. Abuse counters age out within a day. Payment records are kept as a record of the transaction.

Security, honestly

Passwords are properly hashed, sessions are signed, and traffic is encrypted. But Lumina is run by Praneeti Singh, one person, not a security team, and there is no third-party audit. Use a password you do not use anywhere else, and do not import anything you would be harmed by losing control of.

Children

Lumina is not directed at children under 13, and accounts should not be created for them.

Contact

Questions, or to have your account deleted: lumina082012@gmail.com