Early access

Lumabit Privacy Policy

Effective Date: 1 June 2025

Lumabit is operated by Springfisher, a South African Close Corporation (Reg. No. 2009/178541/23). You can access this policy at any time via https://lumabit.org/privacy.

1. What we collect

We collect minimal personal data:

  • Email address (only if you register or sign in)
  • IP address (used for security and platform improvement)
  • Product analytics events (e.g., pages viewed, button clicks, feature usage) associated with a temporary, non-persistent session identifier

Login with other third-party accounts is optional. Feedback can be submitted anonymously or with optional information. We do not collect special categories of personal data and we do not build advertising profiles.

2. Why we collect data

  • To enable sign-in and access
  • To track lesson activity and usage
  • To improve the platform (e.g., understand which features are helpful and diagnose issues)
  • To save your progress and preferences (facilitated via cookies/local storage)

We do not sell your data.

3. Payments

All payments are securely handled by the PayStack payment provider. We do not store or access your payment information.

4. Children’s privacy

Lumabit is accessible to youth under 13 in educational contexts. We intentionally limit data collection and do not require unnecessary personal information. Product analytics are configured to capture only usage signals needed to improve the learning experience and are not used for advertising or behavioral profiling.

5. Where your data is stored

Your account and app data are securely stored in the data centres of our service provider in the United Kingdom.

Product analytics data collected via PostHog are processed and stored in the European Union (EU data centre).

6. Legal basis for processing

We process data on the following legal grounds:

  • Contractual necessity – to deliver your lesson experience
  • Consent – if you register or submit optional data
  • Legitimate interest – to improve services, measure usage in a privacy-respecting way (cookieless analytics), and ensure platform stability

7. Third-party services

  • We use Paystack for secure payments.
  • You may optionally sign in to our site with a Google Login.
  • We use PostHog (EU cloud) for product analytics to help us understand usage and improve the platform. PostHog is configured in cookieless mode: no cookies or local storage are used, and analytics events are tied only to temporary session identifiers.

We do not use advertising networks. Analytics data cannot be used to follow you across other websites.

8. Cookies and local storage

We use cookies and local browser storage only to:

  • Store your lesson progress
  • Remember your preferences

PostHog analytics are run in cookieless mode and do not place any identifiers in your browser. You may still manage or delete lesson-related cookies via your browser settings.

9. Your rights

  • Access your lesson data
  • Request a copy of your data (email us)
  • Delete your data via your account

Contact us at [email protected] to make a request.

10. Policy changes

We publish all policy updates at:

11. Contact us

For more details on how the terms and conditions of our service, please read our Terms and conditions.