Who we are
Lumo is operated by Individual Entrepreneur Vadym Chukhniuk, a sole proprietor registered in Ukraine. We decide how your personal data is used — in data-protection terms, we are the controller.
Questions about your data: support@lumomusic.app. A real person (the founder) reads that inbox.
The short version
We collect what we need to run a piano-learning service: your email, your account details, your learning progress, and your subscription status. We do not use advertising trackers, third-party analytics, or cookies for tracking. We do not sell your data. We never see your card number.
The website and the waitlist
When you visit lumomusic.app, Cloudflare, Inc. serves and protects the page and provides anonymous, aggregate visit statistics (page views, country, device, referring site). This uses no cookies, does not identify you, and is not linked to anything else here. Standard technical data such as your IP address appears in our providers’ server logs; we do not use it to identify or track you.
If you join the waitlist, we collect your email address, your optional answer to whether you have a keyboard that connects to your computer, and a source tag showing which of our links brought you here. We use the email to send you a confirmation you must click (double opt-in) and then occasional updates about the beta and the launch; the keyboard answer only to order invitations; the source tag only to see which channels work. The list is stored and sent by Kit (ConvertKit, Inc., USA). You can unsubscribe with the link in every email or by writing to support@lumomusic.app, and we keep your details until you do or until we retire the waitlist.
The Lumo app: what we collect
Account information you give us. Email address, password (stored only as a cryptographic hash — we cannot read it), first and last name, and optionally your age, country, your declared starting level and a short note about your experience, a profile picture if you upload one, your time zone, and display preferences (theme, text size, notification settings).
Authentication data. A session refresh token, and short-lived codes we send you for email verification and password resets.
Your learning data. Lesson progress and scores, practice sessions, which pieces you played, favourited or are working on, challenge attempts and results, XP and level, streaks and streak freezes, achievements, and league membership. This is the core of the product — it is what lets us show your progress.
Product analytics. We record a small number of events — that you verified your email, that you reached a subscription prompt, whether your browser found a MIDI keyboard — with your account identifier and a timestamp, in our own database. We do not record IP addresses for analytics and we do not use any third-party analytics service.
Payment data. Payments are processed by PayPro Global, Inc. (Toronto, Ontario, Canada — “PayPro Global”), our authorised reseller and merchant of record. We never receive or store your card details. From PayPro Global we receive your subscription status, plan, renewal date and their transaction identifiers. PayPro Global processes the billing information you give them under their own privacy policy, shown at checkout.
MIDI input. Notes played on your keyboard are processed to score your practice. We store the results (notes hit, timing, score), not a recording.
Microphone audio (beta feature, when offered). If you use microphone practice, audio from your microphone is streamed to our practice engine and analysed in real time to detect the notes you played. The audio is not stored. Only the resulting note and score data is kept, like any other practice session. You can use Lumo without ever enabling the microphone; your browser asks for your permission first.
Support correspondence. If you email us, we keep the message and our reply so we can help you and keep a record of what was agreed.
What we do not do
- No advertising or marketing trackers, no pixels, no Google Analytics, no third-party session recording.
- No cookies for tracking. Your login token and display preferences are stored in your browser’s local storage because the app cannot work without them.
- We do not sell, rent or trade your personal data.
- We do not use your learning data to build profiles for anyone but you.
Why we may use your data, legally
To provide the service and perform our contract with you: account, learning data, subscription. Because we have a legitimate interest: security, preventing abuse, and understanding in aggregate how the product is used so we can improve it. To meet legal obligations: accounting records of our sales. With your consent: microphone access, and the waitlist and product-update emails, which you can withdraw at any time.
Who we share it with
We use a small number of service providers, and only for the purposes described here:
| Provider | What it does | What it sees |
|---|---|---|
| Amazon Web Services (USA, us-east-1) | Hosting, database, file storage, transactional email (verification codes, password resets) | All app data, stored on their infrastructure |
| PayPro Global, Inc. (Canada) | Payments, invoicing, tax as merchant of record | Your billing details, which you give directly to them |
| Kit (ConvertKit, Inc., USA) | Waitlist and product announcements | Your email address, keyboard answer and source tag, if you joined the waitlist |
| Cloudflare, Inc. (USA) | Serves and protects the public website; cookieless visit statistics | Technical data such as IP address in standard logs; anonymous aggregate visit stats |
We may also disclose data if the law requires it, or to protect our rights or the safety of others.
Where your data is
The app runs on Amazon Web Services in the United States (us-east-1); the website is served by Cloudflare. The operator is in Ukraine, so your data is accessed from Ukraine. Where personal data of people in the European Economic Area or the United Kingdom is transferred outside those areas, we rely on the appropriate safeguards available to us, including standard contractual clauses with our providers.
How long we keep it
| Data | Retention |
|---|---|
| Account and learning data | While your account exists; erased when you delete your account |
| Product analytics events | While your account exists; deleting your account deletes them |
| Anonymous record that an account was deleted | Kept as an aggregate statistic — no name, no email, no identifier, dated by week only |
| Waitlist email and answers | Until you unsubscribe or ask us to delete them, or until we retire the waitlist |
| Support email | 24 months |
| Accounting records of our sales | As long as tax law requires. PayPro Global, as the seller of record, keeps the transaction records of each purchase; we keep PayPro Global’s payout statements and transaction identifiers — never card details |
Your rights
You can ask us to: give you a copy of your data; correct anything wrong; delete your account and data; restrict or object to a particular use; or withdraw consent you previously gave.
Deleting your account. You can do this yourself, at any time, without asking us: Profile → Account → Danger Zone → Delete account. You re-enter your password to confirm, and the deletion happens immediately. It cannot be undone.
Deleting your account erases your profile, your practice history and progress, your streak and XP, your achievements, your league standings, your favourites, your saved settings, your profile picture, and your analytics events. If you have an active subscription, we cancel it with our payment provider at the same moment.
The only thing that remains is an anonymous record that an account was deleted — the week it was created, the week it was deleted, and a few counts such as how many days were practised. It carries no name, no email and no identifier, and we cannot link it back to you. We keep it so that people who leave still count in our statistics; without it, our own retention figures would quietly flatter us.
Everything else. Email support@lumomusic.app for a copy of your data, a correction, a restriction, or to withdraw consent. We will not charge you for this and will not make it difficult.
If you are in the EEA or the UK you can also complain to your national data-protection authority. If you are in California, we do not sell or share personal information as those terms are defined by California law.
Security
Passwords are stored hashed. Traffic is encrypted in transit. Access to production data is limited to the founder. You can change your password at any time in Profile → Account; changing or resetting it signs out anyone else who was using your account. No system is perfect: if a breach affects your personal data, we will tell you and the relevant authority as the law requires.
Children
Lumo is built for adults. You must be 16 or older to hold an account or join the waitlist, and 18 or older to buy a subscription. We do not knowingly collect data from children under 16; if we learn we have, we delete it.
Changes
If we change this policy in a way that materially affects you, we will email you before it takes effect. The current version is always here, with its effective date at the top.
Contact
Individual Entrepreneur Vadym Chukhniuk
Ukraine
support@lumomusic.app