Privacy Policy for Child Protection

At Luqman, your child's privacy is our highest priority. We believe that a safe learning environment starts with absolute data security and complete transparency. This policy outlines exactly how we protect, handle, and secure your family's information.

1. Information Collection

We adhere to a strict principle of data minimization. We only collect the information absolutely necessary for the platform to function optimally for your child's educational growth.

• Account Information: Parent's email address and securely hashed password for account creation and administration.
• Child Profiles: Nicknames or first names only (no full names required) and age/grade level strictly to tailor the educational difficulty level of the AI.
• Interaction Transcripts: Conversations between your child and Luqman, temporarily stored to generate the Weekly Parental Digest.

2. Zero Data Training Guarantee

We firmly guarantee that Luqman does not and will never use your child's transcripts, questions, or interactions to train our core AI models. Your child's conversations are their own. They are processed securely to provide instant responses and parent summaries, but are completely walled off from our foundational training pipelines.

3. Parental Controls and Data Ownership

You own your family's data. Period. Through the Parent Dashboard, you possess complete authority over:

• Data Review: The ability to view weekly intellectual summaries and filtered overviews of your child's interactions.
• Deletion: You can permanently delete a child's profile and conversation history from the parent dashboard at any time, and request full account erasure by emailing privacy@luqmn.com.

4. Data Security and Encryption

All data in transit between your device and our servers is encrypted using TLS. Stored data (such as parent account details and interaction histories) is encrypted at rest at the infrastructure level. Our infrastructure is hosted on secure, isolated cloud environments with strict access controls.

5. No Selling, No Ads

We never sell or rent your child's data or interaction logs, and we never share them with advertisers, data brokers, or marketers. Luqman is a completely ad-free platform. To operate the service, we rely on a small set of trusted service providers (listed below) who process data only on our behalf to deliver the service — never for their own purposes.

6. Service Providers (Subprocessors)

To generate responses and run the platform, some data is processed by trusted providers, each limited to its role:

• OpenAI and Anthropic: generating AI responses, speech-to-text transcription, and safety checks.
• Supabase: database and parent sign-in.
• ElevenLabs: text-to-speech voice (when enabled).
• Resend: sending parent alerts and summaries by email.
• Sentry: technical error monitoring.

None of these providers are permitted to use your child's data for their own purposes or for advertising.

7. Website Analytics

We use Google Analytics to understand how visitors use our public website and the adult-facing parent dashboard — such as which pages are visited and general device and browser information — so we can improve them. Two limits apply:

• Your child's sandbox is excluded. Analytics scripts are never loaded in your child's chat experience — no page views, events, or any other data from your child's sessions are sent to Google.
• Measurement only, never advertising. We use Google Analytics solely for aggregate usage measurement. We do not enable Google's advertising or cross-device features, we do not build advertising profiles, and we never sell this data.

Google processes this analytics data on our behalf as a service provider. Analytics cookies are not required to use Luqman — you can opt out with Google's browser opt-out add-on or by blocking analytics cookies in your browser.

8. Children's Privacy Principles

Our operations are designed with children's privacy principles in mind, including those reflected in the Children's Online Privacy Protection Act (COPPA) and applicable MENA data-protection laws. We purposely do not request personally identifiable information (PII) beyond what is mandated for parental account oversight. All accounts must be instantiated and administered by a verified adult.

Contacting Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or your family's data, please reach out directly to our Data Protection Officer at privacy@luqmn.com.