Privacy, in plain language first and precise language second. Both are true.
Yes, and we built it that way on purpose.
Your conversations are never saved on our servers. Not recorded, not logged, not reviewed. Your conversation waits on your own device for a few hours (four on Moonlight, a day on Flashlight) so you can pick up where you left off. After that, it lives only in your memory and your heart, never in LUMA’s database.
If you subscribe, LUMA remembers your family between visits, but what she keeps is a short note card, not a diary: names, ages, what you're working on together, and a few sentences of summary. Never the conversation itself. That note card is encrypted, visible only to you, and deleted the moment you delete your account. If you cancel Flashlight but keep your account, LUMA holds onto it for 90 days in case you come back, then deletes it.
LUMA thinks using Claude, an AI made by Anthropic. Your messages are processed by their service to generate her replies, and they are not used to train AI models.
One honest note: LUMA is a thoughtful companion, not a vault for emergencies or legal records. For anything involving a child's immediate safety, please reach a human right away.
The specifics, stated plainly.
Your first name; your children's names, age bands and brief notes; current concerns; communication preferences; a short rolling summary written by LUMA; your email address for sign-in; and your subscription status. Nothing else.
There is deliberately no place in our system where a transcript could be saved. LUMA itself never stores your IP address; like every website, our hosting and sign-in providers see it briefly to keep things secure, and their logs clear within a week. The free limit is counted against a random id your browser keeps, which says nothing about you; the counts themselves expire within hours. No photos or images of any kind.
Under LUMA’s replies you can tap a thumbs up or thumbs down. We count these taps and keep nothing else. Each count records only whether it was up or down, whether the conversation was Moonlight or Flashlight, the week, and which reply in the conversation it was. We never keep any words from you or from LUMA. A count isn’t connected to your name, email, account, device, or internet address. Counts are deleted after 90 days, and we keep only monthly totals that aren’t connected to anyone. If you’d like to tell us more, you can write to hello@raisinghumans.ai. That message goes to an inbox, never to LUMA’s database.
Checkout and billing are handled entirely by Stripe. We only ever learn whether a subscription is active. If a payment fails there is a grace period, so a billing hiccup never makes LUMA forget your family.
Profiles are stored in a professionally managed, encrypted database (Supabase, US region). Each family's row is locked to their own login by a rule the database itself enforces. No one can ever see another family's information.
You see your own information through your login. The system administrator has technical access for maintenance and is bound by the same commitment: no reading profiles out of curiosity, no sharing, ever. No advertisers, no analytics companies, no data brokers. We do not sell or share your data.
You can delete your account yourself at any time. Everything goes with it: profile, subscription record, usage counts, and your Flashlight subscription is cancelled. Not "flagged for deletion." Removed. (Our encrypted backups clear on their own within 7 days.) Stripe, our payment processor, keeps billing records as the law requires. If you cancel Flashlight but keep your account, your note card is kept for 90 days in case you come back, then deleted. Message counts are cleared after 90 days for everyone.
Caregivers tell LUMA about their children. Children themselves are not users of LUMA and no information is collected from them directly.
Questions about any of this? Ask LUMA directly, or write to Cindi.
Ask LUMA