Privacy Policy

Introduction

Edulume School ("Edulume," "we," "us," or "our") respects your privacy and is committed to protecting the personal information of learners, educators, administrators, parents, institutional representatives, and all other users of our platform. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information when you access or use our website, mobile applications, gamified learning tools, and related services (collectively, the "Platform").

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, you should discontinue use of the Platform. This Privacy Policy forms part of our Terms of Service and should be read together with those Terms and any applicable agreements entered into with educational institutions or enterprise clients.

Information We Collect

We collect information that you provide directly to us, information we collect automatically through your use of the Platform, and information we may receive from educational institutions, employers, learning administrators, payment processors, and other authorized third parties.

2.1 Information You Provide

• Name, username, school or organization name, and account credentials
• Email address, phone number, billing address, and other contact details
• Profile information, avatar selections, learning interests, and account preferences
• Course submissions, uploaded files, messages, feedback, and support requests
• Payment and transaction-related details submitted through checkout or billing interfaces

2.2 Information Collected Automatically

• IP address, browser type, operating system, device identifiers, and language settings
• Log data, access times, referring URLs, pages viewed, clicks, and session duration
• Progress metrics, leaderboard activity, badge achievements, streak history, and interaction events
• Cookie identifiers and similar technologies used to maintain sessions and improve performance

2.3 Information from Third Parties

We may receive information from institutions, single sign-on providers, integrated learning management systems, analytics providers, and payment processors when such integrations are enabled. We rely on these third parties to share information lawfully and only to the extent necessary to provide and improve the Platform.

How We Use Information

We use collected information to operate, maintain, support, and improve the Platform and our services. This includes using information to:

1. Create and manage user accounts and authenticate access
2. Deliver learning content, gamified progress systems, and personalized educational experiences
3. Track participation, assignment completion, rewards, achievements, and analytics
4. Process transactions, subscriptions, invoices, and payment-related communications
5. Respond to inquiries, provide customer support, and send service notices
6. Detect, investigate, and prevent fraud, abuse, cheating, security incidents, and unauthorized access
7. Comply with legal obligations, contractual requirements, and lawful requests from authorities
8. Analyze usage patterns and improve accessibility, reliability, and feature performance

We may also use limited data to communicate information about product updates, feature releases, administrative notices, or other service-related matters. Where required by law, we will obtain your consent before sending promotional communications.

Cookies and Tracking Technologies

We use cookies, local storage, pixels, and similar technologies to remember user preferences, maintain secure sessions, understand user behavior, and improve the overall operation of the Platform. These technologies help us recognize returning users, measure traffic and engagement, and troubleshoot technical issues.

You may be able to modify your browser settings to block or delete cookies. However, disabling cookies or similar technologies may limit certain Platform features, including login persistence, personalization, progress tracking, and access to some interactive functions.

How We Share Information

We do not sell your personal information. We may disclose information in the following circumstances:

• To service providers and vendors who perform hosting, analytics, payment processing, customer support, communications, or security services on our behalf
• To educational institutions, enterprise customers, teachers, administrators, or authorized organizational representatives who manage user access or oversee learning progress
• To comply with applicable law, legal process, lawful governmental requests, or to protect rights, safety, and property
• In connection with a merger, acquisition, corporate restructuring, financing, or sale of all or part of our business assets
• With your consent or at your direction when you choose to enable integrations or share content publicly

Any third party receiving personal information on our behalf is expected to process such information in a manner consistent with applicable privacy and security obligations.

Student and Children's Privacy

Edulume may be used by students and minors through institutional programs or supervised accounts. Where applicable, we seek to support compliance with student and child privacy requirements, including COPPA and other applicable laws. Educational institutions, administrators, and parents or guardians may play a role in authorizing access, providing consent, or managing student information depending on how the Platform is deployed.

We collect, use, and retain student information only as reasonably necessary to provide educational services, monitor learning activity, support account administration, and maintain security. We do not knowingly allow children to create personal accounts in a manner prohibited by applicable law. If you believe we have collected personal information from a child inappropriately, please contact us so we can review and take appropriate action.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including maintaining accounts, delivering educational services, complying with contracts, resolving disputes, enforcing our agreements, and meeting legal, tax, accounting, or regulatory obligations.

Retention periods may vary depending on the type of information, the nature of the user relationship, institutional requirements, and legal obligations. When information is no longer needed, we will delete, anonymize, or securely dispose of it in accordance with our retention practices and applicable law.

Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, or misuse. These measures may include access controls, encryption in transit where appropriate, secure hosting environments, monitoring tools, and internal access restrictions.

Despite our efforts, no method of data transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for promptly notifying us if you suspect unauthorized use of your account.

Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, such as the right to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where consent is the basis for processing. You may also have the right to update certain account details directly through your profile or account settings.

We may need to verify your identity before responding to certain requests. Some requests may be limited where we are required or permitted to retain information for legal, security, contractual, or administrative reasons. Institutional users may need to direct certain privacy requests through their school, employer, or account administrator if that organization controls the account relationship.

International Data Transfers

If you access the Platform from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States or other jurisdictions where our service providers operate. Data protection laws in such jurisdictions may differ from those in your location.

Where required, we take reasonable measures intended to support lawful cross-border transfers and appropriate handling of personal information in accordance with applicable privacy requirements.

Third-Party Services

The Platform may include links, integrations, or embedded services provided by third parties, such as payment processors, video conferencing tools, analytics providers, learning management systems, or authentication services. This Privacy Policy does not apply to the practices of third-party services that we do not own or control.

We encourage you to review the privacy notices of any third-party services you use in connection with the Platform. Your interactions with those services are governed by their own terms and policies.

Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, technology, or Platform features. When we make material changes, we may provide notice through the Platform, by email, or by updating the "Last updated" date above.

Your continued use of the Platform after any revised Privacy Policy becomes effective constitutes your acknowledgment of the updated policy, to the extent permitted by law.