Parental consent

Version 1.0 (beta) · Wording version: consent-he-2026-10-15.2 · Last updated: 2026-10-15 · The Hebrew text is the original.

Screen 1: Before you start (opening a family account)

Lumaylo is made for children aged 7 to 11. A family account needs your consent as a parent.

• Kept: your children's progress, your settings, a first name for each child, and feelings a child picks in the calm corner (for them only, 60 days). No surname, address or phone.
• Children's names are never sent to AI services, and there are no ads or tracking.
• You can delete the whole family at any time from the parent area, and all of its data goes with it.

Links: Terms of use · Privacy policy

☐ I am the parent or legal guardian of the children who will use Lumaylo, and I act with the agreement of the other parent, if there is one. ☐ I have read and agree to the terms of use and the privacy policy. ☐ I agree that Lumaylo keeps my children's data as described here.

[ Open the family account ]

*After opening, every AI feature is off. You can turn them on in the parent area, for each child separately.*

Screen 2: AI features (one switch per feature, per child)

AI is software that writes, speaks or draws. We use Google's Gemini, through Google Cloud. What the child writes, says or draws in a feature you turned on is sent to Google to get an answer. Google does not train its models on this data. Google may hold a request in memory only (not on disk) and delete it within 24 hours at the latest; we are working to switch this off. Some processing happens in the United States.

When you turn a feature on, you also agree that its data is transferred to Google for processing, including in the United States.

Everything not listed here works without AI: lessons, practice, games, music and the calm corner.

Written chat with the guide

What it is: the child writes back and forth with the guide character, which explains, asks and encourages. Sent to Google: what the child writes, part of the earlier conversation, and things the guide remembers (if memory is on). Children's names are removed before sending. Kept by us: the written conversation, for 7 days. You can read it. The child sees "parents can read the conversations" in every chat. If off: the guide uses our fixed lines, and there is no free conversation.

Voice chat and speaking practice

What it is: the child talks to the guide by voice and it answers by voice; in English speaking practice the app checks the word was said clearly. When the microphone is open: only while the child holds the talk button, up to 45 seconds at a time. Where the voice goes: in a conversation, to Google in real time. In speaking practice, to our own scoring server (in memory only), and in some exercises once to Google to be turned into text. Kept by us: only the text of the conversation, for 7 days. The recording is not kept anywhere. If off: no microphone. Speaking practice works with an "I said it!" button.

*The microphone is also used in the piano, to hear which notes are played. There the sound is processed on the device only and sent nowhere.*

Read-aloud (cloud voice)

What it is: the app reads sentences aloud: in English, in lessons, and what the guide says. Sent to Google: the sentence itself, as text. The child's name, and every other child's name in the family, is removed before sending. Kept by us: the sentence's audio file, without a name, so it is not sent again. If off: the device's own voice reads, or captions appear. No sentence is sent.

The guide's memory

What it is: the guide remembers small things the child shared ("loves dolphins") so conversations feel personal. Sent to Google: parts of conversations, to extract short facts. Kept by us: a list of memories that you see, correct and delete. Memory never keeps health, address, school, phone, friends' full names, religion or origin. A memory unused for 12 months is deleted. If off: the guide does not remember between conversations.

AI in creation

What it is: "draw anything", studio "magic", and magic furniture for the house. Sent to Google: the child's request (after a safety check) and their drawing. Kept by us: the resulting creation, with the child's other creations. If off: the studio works without magic.

Photo helper (character from a photo)

What it is: when opening a profile, a parent may choose "from a photo": from one photo we guess how to start the painted character. Sent to Google: the photo, once, only to read features visible in it: skin tone, hair and eye colour, hair length and texture, freckles, glasses, face shape, eye shape and size and cheek fullness, approximately. Never read or kept: origin, race, religion, health or age. Kept by us: nothing of the photo. It is in memory only while being read and is deleted at once. Only the painted character is kept. Result: a guess only. The face is chosen by hand, and everything can be changed.

Screen 3: What else is in your hands (in the parent area)

• See what is kept about each child, read conversations and the AI log.
• Download everything in one file.
• Delete a child or the whole family. Deletion is final.
• Get an alert if the child wrote or said something worrying.
• Change any consent at any time. Turning off stops sending from now on. To delete what was already kept, use "Delete".
• Choose a parent PIN and change it. Only the PIN opens the parent area.

Decision record (stored with each decision)

[date and time] · [child: profile id] · [feature] · on/off · decided by: [parent] · wording version consent-he-2026-10-15.2