Lumna LMS privacy policy

What data do we collect when you create an account?

What you type in the signup steps, and a little that signing in records:

• Your name and your email address.
• A password, which we store hashed so that nobody can read it.
• Your academy’s name, its address, its colours and its default language.
• When you sign in, we record your IP address and your browser type with the session, to protect your account.
• Your phone number, if you choose to give it.

Does Lumna’s site set cookies?

On your first visit, the informational pages of this site, such as the homepage, pricing and the FAQ, set one cookie. It records the page you landed on and the time and, if the link you followed carried campaign tags or another site sent you, those tags and that site’s name, never its full address. It lasts 90 days, and later visits do not change it. If you create an academy, it is saved with the academy once, so Lumna learns which of its marketing brings new academies. When you create an account, a temporary cookie keeps your answers between the signup steps, and when you sign in, a cookie keeps you signed in. Google Analytics, which measures visits to the informational pages, sets its own cookies, whose names start with _ga, on this site alone. None of these is an advertising cookie.

Does the site use analytics or tracking tools?

Yes, on its informational pages only. Umami counts visits without cookies and without knowing who you are. Google Analytics measures how visitors use these pages and sets its own cookies on this site alone. We also use Google Search Console to see how the site appears in search results, and it places nothing in your browser. None of these tools runs on an academy’s site or inside your account.

Who is responsible for the data of an academy’s students?

Each academy is responsible for its students’ data, and Lumna stores and processes it on the academy’s behalf. Each academy’s data is kept separate from every other academy’s, and its students are not visible to another academy. An academy may add its own advertising tracking tools to its site, and that decision is the academy’s. If you are a student of an academy on Lumna, ask your academy about your data.

Can Lumna’s team see my academy’s data?

Yes, for support and oversight only, and every look is recorded. Lumna’s team can see:

• The names, email addresses, phone numbers and roles of the academy’s owner and team.
• The academy’s students: their names, email addresses and phone numbers, and the courses they are enrolled in, with the dates.
• Each time someone on Lumna’s team opens these, we record who looked, at which academy and on which screen. The record keeps no copy of the data shown.
• For support, Lumna’s team may sign in as one of an academy’s users, for a limited time and with a recorded reason. The session is read-only unless a second reason is recorded, and it can never move money, delete anything, change the academy’s team or students or send bulk email. Every session is recorded, and the academy is not notified.

Questions about privacy