Privacy

What we never do

• No microphone, no camera, no photo upload. There is no record button anywhere in this app, for her or for you. Her voice and her face never exist here in the first place.
• No ads and no advertising code. No ad network, no ad SDK, no pixel, nothing that follows anybody anywhere.
• No analytics and no third-party trackers. Not Google Analytics, not anything else.
• Nothing about her is public. No profile, no gallery, no share link. There is no way for a stranger to see her name or her videos.
• Nothing is sold, ever. Not her name, not your notes, not to anybody, for any price.

Which companies see something, and exactly what

Three companies are involved in making one video. Each one gets the smallest piece it needs to do its job, and nothing else. This is the whole list.

Google's cloud services run under business terms that say customer data is not used to train their models. The Claude account that writes Lumi's lines is a personal Max plan, and confirming its training setting is on Jesse's own list; until that is confirmed and dated here, treat the first name and note that go to Anthropic as not verified either way. We would rather say that than imply something we have not checked.

Everything we store

The app stores the following information during this private preview.

• Your email address and your name, from the Google account you signed in with.
• Her first name, and how to say it if you spelled that out.
• Her birth month and year. Not the day. It is used for one thing: picking which missions suit her age.
• The first names of people and pets you tell Lumi about, and how to say them. No last names and no ages. Nothing else about them, beyond whether each one is a sister or brother, a grown-up, a pet or a friend, which is only so Lumi knows a dog is a dog.
• The word she calls you, the one you pick when you write, so Lumi can say who wrote to her. “Daddy”, “Nana”, whatever it is at your house.
• The notes you write about her day.
• The missions, whether each one was finished, tried or set aside, and the optional line you wrote about what was hard.
• The videos Lumi sent her, their still images, and the words she says in each one.
• The keepsake: the dates and titles of the things she has done.
• A count of how many times you tapped “Hear it” in the past hour, so nobody can run up a bill.

Please do not put last names, addresses, schools, phone numbers or other sensitive details in your notes. Free text can contain information we do not ask for.

How long we keep it

• The note you wrote: 30 days after its video is made. Once Lumi has said it, the raw note has done its job and the text is deleted.
• The “what was hard” line: 14 days after the mission closes. It never goes into a printed keepsake.
• Videos and the keepsake: while the account is open, and 90 days after you close it. Those 90 days exist so a family who changes their mind still has the videos.

A job runs every night at 3:15 in the morning, Pacific time, and does the first two deletions itself. It is not a policy somebody has to remember.

Checking when the deletion job last ran...

Deleting everything

Open the parent page, tap the menu, and choose “Delete everything”. You type DELETE to confirm. New family changes are locked while owned cloud data is removed. If a letter is currently being made, wait for it to finish and retry. A failed cleanup can be retried without starting a new request.

The cloud cleanup removes:

• Her record, her name and her birth month.
• Every note you ever wrote and every mission.
• Every video file and every still image, deleted from storage.
• The keepsake.
• Pronunciation audio stored under your account ownership prefix.
• Your MyPrincess parent record, purchase receipts and letter-request receipts.

It shows a receipt before you sign out. A minimal deletion marker remains to prevent new work and make retries safe. The Firebase sign-in identity is shared with other products and is not deleted here. Historical pronunciation audio without ownership metadata, old local worker files and logs, and provider-retained copies need separate review. Use fictional details during the private preview. To request a review of those remaining records, write to jd@drdashe.com and we will do it and confirm.

About the child

The child has no account. She cannot sign in, cannot type, and cannot reach anything outside her own letters. The parent is the only user, and the parent is the author of everything Lumi says. Lumi never sees anything you did not write.

This is a family app in use by its own family. Before any stranger's child uses it, a children's privacy lawyer reads this page and the code behind it. That has not happened yet, and this sentence stays here until it does.