Privacy Policy

LumiLearn is operated by reArm ACADEMY CJSC, a company registered in the Republic of Armenia, which acts as the data controller for the data described below. You can reach us at nairi@rearmenia.com for any privacy question or request.

Where an academy, school or employer invites you to LumiLearn, that organisation decides which programs, lessons and evaluations you take part in. For that content we act on their instructions as a processor, and their own privacy notice applies alongside this one.

• Account data. Your name, email address and profile picture. If you sign in with Google, we receive only your basic profile and email address from Google — never your password, and no access to your Gmail, Drive or other Google data.
• Workspace data. The academy, programs, lessons, tags and roles you belong to, and who invited you.
• Teaching content. Lesson recordings, audio, transcripts, slides, homework and other material uploaded by you or by your academy.
• Learning and feedback data. Questions asked in live Q&A, survey and feedback answers, quiz responses and scores, attendance and completion.
• Evaluation results. AI-generated teaching-quality analyses and speech evaluations derived from lesson recordings.
• Technical data. IP address, browser and device type, timestamps, pages visited and error logs, collected to keep the service secure and working.

We do not sell personal data, and we do not use it to serve advertising.

• To create and secure your account and let you sign in.
• To run the product: programs, lessons, live Q&A, surveys, quizzes and reporting.
• To produce AI teaching-quality evaluations and feedback analytics for your academy.
• To send service messages such as invitations, reminders and security notices.
• To detect abuse, debug failures and improve reliability and performance.
• To meet legal, accounting and tax obligations.

Our legal bases are performance of a contract with you or your academy, our legitimate interest in operating and securing the service, your consent where we ask for it, and compliance with legal obligations.

LumiLearn transcribes lesson recordings and runs automated pedagogy analysers over the transcript to produce a teaching-quality report. These reports are shown to the teacher and to the academy administrators who own the program. They are decision support, not an automated decision with legal effect — a human at your academy decides what to do with them. A teacher can always request the reasoning behind a report and contest it by writing to us or to their academy.

We share personal data only with service providers who process it on our behalf:

• Supabase — database, authentication and file storage.
• Google Cloud and Firebase — application hosting, and Google sign-in.
• Google (Gemini) — AI models used to transcribe and analyse lesson content. Content sent to these models is not used to train them.
• Telegram — only if your academy enables the optional Telegram integration, and only for the messages exchanged through it.

We also disclose data where we are legally required to, or to protect our rights, users or the security of the service. If our business is transferred, data moves with it under this policy.

We are based in Armenia and our providers operate data centres in the European Union and the United States, so your data may be processed outside your country. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard with each provider.

Workspace and teaching content is kept for as long as your academy keeps its account, and is deleted or returned within 90 days of that account closing. Account data is deleted within 30 days of you closing your account. Backups roll off within a further 30 days. Security and billing logs are kept for up to 12 months, and financial records for as long as Armenian law requires.

You can ask us to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw consent where we relied on it. Write to nairi@rearmenia.com and we will respond within 30 days. If your account was created by an academy, we may forward your request to them and help them action it. You can also complain to your local data protection authority.

Data is encrypted in transit and at rest, access is restricted by role and enforced at the database level, and administrative access is limited to staff who need it. No system is perfectly secure, so we also maintain a breach process and will notify affected users and regulators where the law requires.

LumiLearn is sold to academies and schools, not directly to children. Where a learner under 16 is enrolled, the academy is responsible for obtaining parental consent before creating the account, and we process that learner's data only on the academy's instructions.

We use cookies and similar local storage only to keep you signed in, remember your language and appearance settings, and secure form submissions. We do not use advertising or cross-site tracking cookies.

If we change this policy we will update the effective date above and, for material changes, notify account owners by email before the change takes effect.