Last updated 9 September 2026

Terms of Service

These terms govern your use of LumioAI (the "Service"), operated by Hanna Parkohmenko, of Hughed Drive, contact [support email] ("we", "us"). By using the Service you agree to them. If you do not agree, do not use the Service.

1. What the Service is

LumioAI is a study tool: an infinite drawing board, an AI assistant that can look at your work, and generated study material such as lessons, quizzes, flashcards and language courses. You can also attach a picture or a document (PDF, Word, text) to a message, or put a link in one - a Google Docs or Drive file shared publicly, a PDF, or a web page - and the Service will fetch it and read its text so the assistant can work from it.

2. Eligibility and accounts

• You must be at least 16 years old, or 13 with the consent of a parent or guardian who accepts these terms on your behalf.
• Accounts are personal. You are responsible for keeping your password secret and for everything done through your account.
• Public registration is not currently open. Access is by invitation.

3. Your content

Everything you create - boards, notes, images and documents you upload, chat messages - remains yours. You grant us only the limited licence needed to store it, display it back to you, and send it to the AI providers listed in the Privacy Policy so the Service can function. We do not use your content to train our own models, and we do not sell it.

4. Acceptable use

You agree not to:

• break the law, or use the Service to harm, harass or deceive anyone;
• upload content, or link to a document, that you have no right to upload or share;
• attempt to break, overload, reverse engineer or gain unauthorised access to the Service or the accounts of others;
• resell the Service or use it to build a competing product;
• use automated means to consume AI capacity beyond normal personal study.

5. AI output

The assistant is generated software. It can be wrong, incomplete or out of date, including in explanations, worked solutions, grading and language material. Check anything that matters. The Service is a study aid and is not professional, medical, legal or financial advice, and is not a substitute for your own work where an institution requires it.

You are responsible for complying with your school's or university's rules on the use of AI assistance.

6. Availability and changes

We aim to keep the Service running but do not promise uninterrupted availability. We may change, suspend or discontinue features, and may set or adjust usage allowances. If we make a change that materially reduces a paid plan you are on, we will tell you in advance and you may cancel.

7. Plans and payment

Paid plans are described inside the app, under Upgrade. Billing is not open yet and no payment is currently taken. When it opens, plans renew monthly until cancelled, prices are in US dollars and exclusive of any tax that applies to you, and cancellation takes effect at the end of the paid period. Refunds are covered by the Refund Policy.

8. Ending your use

You may stop using the Service and delete your content at any time. We may suspend or close an account that breaks these terms, or where required by law, giving notice where it is reasonable to do so.

9. Liability

Nothing here limits liability that cannot be limited by law, including for death or personal injury caused by negligence, or for fraud. Subject to that, and to the fullest extent the law allows: the Service is provided "as is"; we are not liable for indirect or consequential loss, lost profits, or lost data where you had a reasonable opportunity to keep your own copy; and our total liability in any twelve month period is limited to the greater of the amount you paid us in that period, or fifty US dollars.

If you are a consumer, you keep all rights the law gives you and these limits apply only so far as the law permits.

10. Changes to these terms

We may update these terms. For material changes we will give reasonable notice before they take effect. Continuing to use the Service afterwards means you accept the updated terms.

11. Governing law

These terms are governed by the laws of [country / state], and the courts there have jurisdiction. If you are a consumer, you may also bring proceedings in the courts of the country where you live, and you keep the protection of that country's mandatory consumer law.

12. Contact

Write to [support email].

Last updated 9 September 2026

Privacy Policy

This explains what LumioAI collects, why, and what you can do about it. The controller is Hanna Parkohmenko, of Hughed Drive, contact [support email].

What we collect

• Account - your username and a hashed password. Passwords are stored with scrypt and are never recoverable in plain text.
• Your work - boards, drawings, text, images you paste or upload, chats with the assistant, generated lessons and quizzes, and your scores and progress. A small picture of each board is also stored, so the assistant can look at a board you point it at from elsewhere in the app.
• Documents you attach, and links you paste - when you attach a PDF, a Word file or plain text, or put a link in a message, we extract the text and send it with that one message. The extracted text, the file itself and the fetched page are not stored: your chat history keeps only the name and the length.
• Session data - a session identifier, the time of your last visit, your IP address and browser user agent, kept to keep you signed in and to detect abuse.
• Usage counters - how many AI tokens you have used, so allowances can be enforced.

We do not run advertising or third party analytics, and we do not build profiles of you.

Why we may use it, and on what basis

• To provide the Service - performance of our contract with you.
• To keep it secure - our legitimate interest in preventing abuse, including login rate limiting.
• To meet legal obligations where they apply.

Who else sees it

To make the assistant work, the content of your request is sent to the AI provider that answers it:

• DeepSeek - receives your question and, where relevant, a picture of the board you are working on, images or document text you attach, and the contents of another board when you ask the assistant to read one. It also receives the titles of your boards and study material so it knows what you already have.
• Google Cloud Text-to-Speech - receives only the short phrase to be spoken, and only if you have enabled it with your own API key.
• Sites you link to - when you paste a link, our server fetches that address so the assistant can read what is there: a Google Doc or Drive file, a PDF, or an ordinary page. The site sees a request from our server, not from you, and nothing about your account is sent to it. A Google file must already be shared with anyone who has the link. Addresses on private networks are refused.
• Our hosting provider - stores the server the Service runs on.

These providers process the data under their own terms, and what they do with what we send is governed by those terms rather than by us. We do not sell your data, share it for advertising, or use your content to train any model of our own.

Where it is stored

Data is held on our server in [hosting country]. AI providers may process requests outside your country, including outside the European Economic Area. Where that happens, transfers rely on the safeguards those providers offer, such as standard contractual clauses.

How long we keep it

• Your work is kept until you delete it or close your account.
• Text from an attached document is used for that one message and is not written to the database.
• Sessions expire after 30 days of inactivity.
• Failed login records are discarded within 24 hours.
• Synthesised speech is cached so the same phrase is not regenerated.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Write to [support email] and we will respond within one month. You can also complain to your local data protection authority.

Children

The Service is not directed at children under 13. If you believe a child has given us personal data, contact us and we will delete it.

Security

Traffic is encrypted with TLS. Passwords are hashed, session tokens are stored only as hashes, and requests that change data are protected against cross-site forgery. No system is perfectly secure, so please keep your own copies of work you cannot afford to lose.

Last updated 9 September 2026

Cookie Notice

LumioAI uses a small number of cookies, and all of them are strictly necessary for the Service to work. There are no advertising, analytics or tracking cookies, which is why you are shown a notice rather than a consent choice: there is nothing optional to turn off.

What is set

• gs_session - keeps you signed in. HttpOnly, Secure, SameSite=Lax. Expires after 30 days.
• gs_csrf - a token your browser sends back so we can tell a real request from a forged one. Secure, SameSite=Lax, 30 days.

Local storage

We also keep a few small preferences in your browser's local storage, which never reach our server: the last board you had open, the section you were last in, which board the practice chat is pointed at, which introductions you have already seen, and whether you have dismissed this notice.

Turning them off

You can block or delete cookies in your browser settings, but the Service cannot keep you signed in without them.

Last updated 9 September 2026

Refund Policy

Right to cancel (EU, UK and similar)

If you are a consumer in the European Union or the United Kingdom, you have 14 days from the start of a subscription to cancel it and receive a refund, without giving a reason.

Because the Service is delivered immediately, we will ask you to agree at checkout that supply begins straight away and to acknowledge that you lose the right to cancel once it has been fully performed. Where you have used the Service during those 14 days, we may deduct an amount in proportion to what you used before cancelling.

Everyone else

Outside those regions we offer the same 14 day window on a first subscription as a matter of policy.

Renewals

Monthly renewals are not refundable once the new period has started, except where the law says otherwise or where the Service was substantially unavailable. You can cancel at any time and keep access until the end of the period you have paid for.

If something goes wrong

If the Service is broken or materially not as described, tell us. Consumer law gives you rights to a repair, a replacement or a refund, and this policy does not limit them.

How to ask

Email [support email] from the address on the account. Approved refunds go back to the original payment method, normally within 14 days.