Privacy Policy

Lumex is an educational game. We collect exactly as much as we need for the game to work and get better. There are no ads, no ad trackers and no selling of data. Last updated October 9, 2026.

Who we are

The personal data operator is Akhmedkhan Timurovich Sharapudinov; contact: support@lumexquest.ru. Data is stored on our own server in Russia (Moscow). We view a copy of the anonymised events in the PostHog analytics service — more on that below.

This policy is part of the Lumex rules together with the Terms of Use. Consent to personal data processing when creating an account is a separate document — the Consent to Personal Data Processing.

Legal basis

We process account data based on the consent you give by tapping “Create account” (a link to it is right under the button), and to perform the Terms of Use. Anonymised events — to keep the game working and fix it. For children under 14, the account is created and consent is given by a parent or legal guardian.

Without an account

You can play without registering at all. In that case all your progress — paths, experience, daily streak, mistakes — is stored only in the memory of your browser or app. We can’t see it and can’t restore it: clearing the browser erases it for good.

With an account

• Email — so you can sign in from another device.
• Password — we store only an irreversible hash of it; we don’t have the password itself.
• Profile name — whatever you entered yourself; it can be anything.
• Learning progress — paths, experience, rewards and the mistake log, so we can bring back topics that haven’t stuck yet.

Nothing else: no phone number, no address, no age, no contact list.

Leaderboard

Only accounts appear on the leaderboard. Other players see your nickname, hero, level and XP, never your email. If your nickname looks like a first and last name, the leaderboard shows only the first name and the initial of the last name. For the “My country” tab we look up your country from your network address using an offline database on our own server, and store only the two-letter country code; the address itself is not saved or sent anywhere. To be removed from the leaderboard, email support@lumexquest.ru.

Invites and sharing

The “Invite a friend” link contains your device’s random number and your nickname, if you set one — so your friend sees who invited them. Your friend’s device remembers that number, and we see how many invited people started playing; we learn nothing else about the friend. If the friend installs the app from the App Store, the number can’t be passed along — so when the link is opened we keep an encrypted fingerprint of the network address for 2 days (not the address itself) and count the invite if the app is first launched from that same address. The “Share my result” card is drawn right on your device and goes only where you send it; it never reaches our server.

Energy, chests and rewards

Your energy balance is kept on the server — for the account or the device number — as a number and the time it last changed. Rewards, heroes and other in-game items are stored with your progress.

Notifications

Reminders in the app are local: with your permission, the device itself schedules them, and the time adapts to when you usually practise (those hours are stored only on the device). We do not send notifications from a server and do not receive a token for them. You can turn them off in iPhone settings.

What the model sees

Tasks and routes are written by a language model. It receives the wording of the goal, the name of the route, the topic of the current lesson, the difficulty level and your latest answers — whether they were right or wrong. Your name, email, account ID and any information about your identity are not sent.

If you attach a photo to your goal yourself (a textbook page, homework, flashcards), the model looks at it once and retells what is on it as text — the path and tasks are built from that text. We do not store the photo itself, neither on the server nor in your account. Please don’t photograph faces, documents or personal data.

The model may run directly with its provider (Anthropic) or via the gateway of our technology partner, depending on which channel is available. The amount of data sent is the same either way and is described above. Anthropic does not use these requests to train its models; when the gateway is used, the partner’s terms apply.

Anonymised events

To understand where the game is confusing, we count events — a visit, “named a goal”, “started a lesson”, “finished a lesson” — and log app errors. Each event is linked to a random number that lives in your device’s memory and cannot be used to identify a person. If you are signed in, your account number (not your email or name) is added to the events.

We also view these events, along with screen transitions and button taps, in the PostHog analytics service (servers in the European Union). Your email, name, task answers and goal texts are not sent there; session recording is turned off. Your connection address is used only to determine your country and is not stored. Lumex has no advertising identifiers or pixels; data is not used for advertising and is not shared for tracking across apps.

Cookies and device storage

The website sets only the cookies it needs to work: signing in (session) and the chosen site language. Progress without an account, settings and the random device number are kept in browser or app storage. The PostHog analytics service keeps its own random number there too. There are no advertising or third-party tracking cookies. Clearing site data in your browser erases all of this.

International transfers

The main database is on our server in Russia. Data that leaves Russia: anonymised events — to PostHog (European Union), and requests to the language model — to Anthropic (USA), including through the technology partner’s gateway. Model requests do not include your email, name or account number; please don’t write personal data — yours or anyone else’s — in your goals. Apple shows us aggregated app download statistics in App Store Connect.

Children

The game is designed for ages six and up. Children don’t need an account — without one we store nothing about them except the anonymised events described above, used only to support the internal operation of the game, never for advertising or profiling.

When an account is created, we ask only for the year of birth — we don’t store the year itself, only a flag that the person is under 14. If they are under 14, the account is created only with a player code: we don’t collect email or other contact details, and the nickname is never shown on the leaderboard. This is how we comply with the U.S. Children’s Online Privacy Protection Act (COPPA) for children under 13. We don’t ask for gender, city or photos, and we don’t show ads.

A parent may at any time review what is stored in their child’s account, ask us to delete it, or refuse further processing — write to support@lumexquest.ru with the player code. If you learn that a child under 14 provided an email address anyway, contact us and we will delete it.

How to delete your data

In the app: “Settings” → Delete account. This erases your email, password and all cloud progress immediately and permanently. You can also simply write to support@lumexquest.ru — we’ll delete it manually within 10 business days and reply.

Your rights

You can find out what data we hold about you, ask us to correct, delete or stop processing it, withdraw your consent and get an answer to any question about your data — write to support@lumexquest.ru, we reply within 10 business days. If you believe we violate your rights, you may complain to the data protection authority (in Russia — Roskomnadzor; in the EU — your national authority) or go to court.

Residents of different countries

United States. We do not sell or “share” personal information as those terms are defined by U.S. state privacy laws (including California’s CCPA/CPRA), we don’t show ads and we don’t build advertising profiles. We don’t collect contact information from children under 13 (COPPA) — see “Children”. We don’t respond to Do Not Track signals differently because we don’t track you across sites.

European Union and United Kingdom. Our legal bases are your consent and performance of the Terms (GDPR Art. 6(1)(a) and (b)). You have the right to access, rectify, erase, restrict, object to processing and to data portability; you may lodge a complaint with your national supervisory authority.

Russia. We comply with Federal Law No. 152-FZ “On Personal Data”: the main database is stored on a server in Russia, consent is a separate document, and we reply to requests within 10 business days.

How long we keep data

Account data — for as long as the account exists. Anonymised events and error logs — no longer than a year, after which they are no longer useful. Database backups are overwritten on a rolling basis.

Who we share data with

The language model provider and the gateway through which requests reach it, and the PostHog analytics service — only to the extent described above. We don’t sell or exchange data, don’t use ad networks and don’t share anything with third parties for marketing purposes.

Changes

If these rules change, we’ll update this page and the date at the top. We’ll announce significant changes inside the game.