PiccoLumi

App Privacy Notice

Effective 14 October 2026
Version: piccolumi-privacy-2026-10-14

Who is responsible for your information. PiccoLumi is run by the company "PICCOLUMI". In this notice, "PiccoLumi", "we", "us" and "our" mean "PICCOLUMI". For privacy questions and requests, write to support@piccolumi.com.

Who this notice is for

PiccoLumi is an app for parents and caregivers. An adult creates the account and enters information about a child. Children do not have accounts and do not use the app themselves. Only add a child's information if you have the right to.

What we store

Why we use it

We use this information to sign you in; share records within your family; store, sync and show what you log; run subscriptions; send the notifications you asked for; keep the service secure; answer support and privacy requests; delete accounts; and fix problems. If you share app usage, we use it to see which parts of the app help and which are hard to use. Counts of store link taps are only used to see whether people use the links. Lumi sends nothing outside the app until an adult has given permission, and never more than that adult's access allows.

Who can see your family's information

Only adults who have access to your family can see or change its information. The owner sends the invites and sets each person's access. Caregivers with limited access cannot see sensitive profile details, medical Tracker entries, the Medical Vault or Lumi. Invite only people you trust, and remove access as soon as it is no longer needed. Lumi Chat conversations are shared with the adults in the family who can use Lumi Chat. The adult who started a conversation, or the owner, can delete it for the whole family.

Lumi, and what is sent outside the app

Lumi is the helper inside PiccoLumi. When an adult asks Lumi Chat a question, our server sends it to a service we work with under contract, and that service writes the answer. With the question we send what Lumi needs from the parts of the app that adult can open. This can include the child's name and age, home time zone, allergy and medicine details, Tracker entries and notes, Aurora milestones, Activities, the family tasks that adult can see, Sounds, Supplies, Toys, family members' names and roles, settings, the plan, earlier chats, Lumi's notes, and details about the Medical Vault documents that adult can see. The age is sent in days together with the date, so the birth date can be worked out from it. The Medical Vault files themselves are never sent. If you attach a photo or dictate a message, that photo or recording goes with that one question only.

Lumi's sleep forecast is worked out on your phone by PiccoLumi's own code. No outside company processes it. When an adult opens LumiCast, the app tells our server that it showed a forecast for that day: the child's id, the day, the home time zone, and short codes that stand for the sleep entries used and the forecast shown. Our server works out the same forecast from the sleep entries it holds and keeps a record of it, so it can later compare the forecast with the sleep that was actually logged, and it updates the Lumi notes that Lumi Chat uses. These records do not include the child's name, notes or Medical Vault content. The app only sends this when the family's plan includes it, the adult has given current permission, and our server allows it.

One outside service writes Lumi Chat answers for us. We use it on a paid business plan whose terms do not allow it to use the data to improve its own products. Withdrawing your permission stops Lumi Chat and the LumiCast accuracy report, and deletes Lumi's saved notes under the app's deletion controls. If you are the family owner, withdrawing also stops the caregivers you allowed. Withdrawing does not delete saved Lumi Chat conversations, the days an adult marked as unusual, a log of each time Lumi was used (without the questions or answers), a record of who allowed Lumi Chat for whom, or a counter that marks when Lumi's notes were cleared.

Companies that work for us

A hosting company we have a contract with runs sign-in, the database, file storage and our server functions. Apple provides App Store purchases, Sign in with Apple, notifications and other iPhone services. A subscription service we have a contract with processes App Store purchases for us. It receives your account ID, your purchase history and a device ID, and uses them to run your plan and to give us reports about purchases. An analytics service we have a contract with receives app usage, if you share it, and keeps it in the European Union. Google provides sign-in if you choose it. Lumi Chat questions go to the outside service described above, only when the feature is on and permission has been given. We may share information when the law requires it, to protect people or the service, or as part of a sale or merger of the business with proper safeguards. PiccoLumi does not sell information about children or families, and does not use it for advertising.

Store links

Toy and supply screens can open a shop's website or a shop search. Once you leave the app, the shop's own privacy rules apply, and it usually receives your network and browser details. A supply search can include the supply name you typed, because the app puts that text into the shop's search on your phone. We do not include that name in our own count of link taps. Store links may earn PiccoLumi a commission. No shop pays to appear in the app.

How long we keep it

We keep account and family records while they are needed to run the service and until they are deleted, except where we must keep something for security, billing, disputes or the law. Account deletion can continue if it stops, and it deletes your database records, your private files and your sign-in. Lumi chats you started stay with your family after you delete your account, unless you delete them first in Lumi Chat, then History. Records of purchases and gifts are kept. A record of the deletion, including the account id, is kept so a failed deletion can be finished.

Lumi's daily summaries are deleted after eight weeks. Her other notes and weekly summaries stay until they are cleared or the family's account is deleted. Forecast accuracy records are deleted after 90 days. Counts of store link taps are deleted after 90 days. Records of failed invite attempts are deleted after a short time. App usage is kept for one year.

Everything you add in the app is saved to your account, so signing out or changing phones does not lose it. Before you sign out, the app tells you if a change has not reached your account yet. If you sign out anyway, that change is deleted from the phone. Older Lumi Chat conversations, from before your family's chats were shared, are kept only on the phone they were written on, and signing out deletes them. When you sign out or delete your account, the app clears your data from the phone.

Lumi Chat conversations are kept until they are deleted. We keep the newest 40 conversations for each child and the newest 100 messages in each conversation. When a conversation is deleted, a note of the deletion is kept for 30 days so every phone can remove its copy, and then the note is deleted too.

Security

Our server functions require you to be signed in, and the database only lets each adult reach their own family's data. Files are kept in private storage, notification tokens are encrypted, changes waiting on the phone are protected, caregivers only get the access the owner gave them, and we keep records that let us check and recover from problems. No service can promise perfect security. If you think your data has been exposed, write to support@piccolumi.com.

Your choices and rights

In the app you can see and change your family's records, change who has access, change notification settings, turn Lumi off and clear Lumi's notes, and delete your account (Profile, then Delete account).

If your phone's region or your App Store country is in the European Union, the EEA, the UK or Switzerland, app usage is shared only if you turn it on, during setup or later. Everywhere else it is on until you turn it off. Either way, you can turn it off or on at any time in Profile, then Privacy policy, then Help improve PiccoLumi. Turning it off stops it at once.

By email to support@piccolumi.com you can ask for a copy of your data, for a correction, for us to limit how we use it, or object to how we use it. We may ask you to confirm who you are first.

You can complain to the data-protection authority in your country.

Where your information is processed

We store your information in the European Union, in Frankfurt, Germany. Some of our providers, such as the service that writes Lumi Chat's answers, our subscription service and our email provider, may process it in the United States and other countries.

Children

PiccoLumi is not meant for children to enter information themselves. If you think a child entered information without an adult who has the right to, write to us and we will delete it.

Changes

A material change gets a new version and a new date on this page.