LumiJar: Direct Notice to Parents (COPPA)

Effective date: October 18, 2026

This is the full version of the notice LumiJar shows you before you add a child. It explains exactly what we collect about your child, what we do with it, who we share it with, how long we keep it, and how you consent, and how to change your mind at any time.

LumiJar is a product of Lumiti, LLC. You, the parent or guardian, own the account and stay in control of your child's information.

Questions or requests: privacy@lumijar.com
Full details: Privacy Policy

What we collect about your child

• A first name or nickname you choose, never a legal full name.
• An age band you pick (broad ranges such as 5–7, 8–11, and 12+). We never ask for a birthdate or an exact age.
• An optional birthday month: just the month, used only so the fairy can celebrate.
• An avatar your child picks.
• What your child does in the app on their linked device: the name they invent for their tooth fairy, sorting their virtual money, goals and wishlist items, including a link to a wished-for item if they add one, short reasons they give with a request, and short notes on cash they log, chores they mark done, and the teeth they log on their baby-tooth chart (which tooth, what date), including, when available, how each one came out and a short note to the fairy they build from preset choices (children don't type these notes).
• Anything you add for them: virtual deposits, notes and letters, chores and allowance settings, and (if you choose to use them) dentist notes and a next check-up date.
• Notifications on your child's device (optional, when available). If LumiJar offers notifications on a device your child uses and you turn them on, we collect a notification token from that device. We use it only to deliver notices you send your child, such as a new mission or a fairy visit, never for advertising or tracking. Apple delivers them. We delete the token when you turn these notifications off, unlink the device, or delete your account.

What we never collect from your child

A birthdate or exact age, email address, phone number, passwords, contact information, precise location, photos, audio or video, biometric identifiers, or government IDs.

If your child sets a 4-digit PIN to open their side of the app, it is a convenience screen lock, not a password. Your family's data is protected by our server's access controls, the link to your child's own device, and your password.

All money in LumiJar is virtual. We never hold, move, or touch real money.

What we do with it

We use your child's information only to run LumiJar for your family, and for nothing else.

No ads. We never sell personal information. It is stored securely, encrypted, with database-level controls that isolate every family from every other family.

Who we share it with

No third parties. We do not disclose your child's information to third parties.

The vendors that host and run the app for us, for example our database, email and notification providers, may process it only to operate LumiJar on our behalf, and for nothing else. They are contractually prohibited from using it for their own purposes. The full list is in our Privacy Policy.

How long we keep it

We keep your child's information while your account is active (the keepsake is the point) and then delete it.

• You can delete your child's profile, or all of your family's data, at any time from your dashboard. This removes it from our servers.
• If an account goes unused for 24 months, we delete the children's data so that it is not kept indefinitely. Before we do, we email you first, with a one-tap way to keep the account and a link to export your family's data.
• After you delete your account. We keep only two things: a minimal record that parental consent was given or withdrawn, with the date and policy version, containing no names or contact details; and de-identified information, such as tooth fairy amounts by month, that cannot be linked to you or your child. We will not attempt to re-identify it, and we use it only to publish aggregate statistics.
• You can export a full copy of your family's data whenever you like.

How you consent

1. We show you this notice on screen before any child information is collected.
2. You give consent by checking an unchecked consent box. We record that consent for each individual child, with a timestamp. Adding another child later requires its own separate consent.
3. Shortly afterward, we email you a confirmation that repeats this notice, explains how to review and delete the information, and includes a one-click link to stop the collection and delete the children's data, in case you are not the person who set up the account.

You may refuse consent, in which case no child profile is created.

How to withdraw consent or delete the information

At any time, and without giving a reason, you can:

• Review and correct everything on your child's profile, from your dashboard.
• Delete your child's profile, or all of your family's data; this removes it from our servers.
• Disconnect your child's devices, including a one-tap "disconnect all devices" action.
• Withdraw consent to any further collection. Withdrawing consent means deleting the child's profile, which removes that child's data.
• Use the one-click link in the confirmation email to stop collection and delete the children's data without logging in.

To delete your account, including your login record (your email address and password), use Settings → Start fresh or delete my account → Delete my account, or email privacy@lumijar.com and we will remove it.

We will verify that a request comes from the account holder before acting on it.

Contact

Lumiti, LLC
22287 Mulholland Hwy #149, Calabasas, CA 91302
Privacy: privacy@lumijar.com
General support: support@lumijar.com