Privacy Policy

Organic Animation Studios Private Limited, also operating under the names “Organic Game Studios,” “Organic Studios,” and “Lumi Tales” (“Lumi Tales,” “we,” “us,” or “our”), respects the privacy of children, parents, guardians, and other users.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use the Lumi Tales mobile application; the Lumi Tales website at https://lumitales.co.in; our stories, animated videos, music, games, learning activities, and printables; parent accounts and child profiles; subscriptions, trials, downloads, customer support, and related services; and any other service that links to this Privacy Policy. Together, these are referred to as the “Services.”

Lumi Tales is designed for children and families. A parent or legal guardian must create and manage the primary account and supervise a child’s use of the Services.

1. Who We Are

The Services are operated by:

Organic Animation Studios Private Limited
[Registered office address as mentioned on website]
Mumbai, Maharashtra, India
Official Gmail: lumitalesindia@gmail.com
Support email: support@lumitales.co.in

Under applicable data protection laws, Organic Animation Studios Private Limited is responsible for the processing of personal information through the Services.

2. Information We Collect

We collect only the information reasonably required to operate, secure, improve, and provide the Services.

2.1 Parent or Guardian Account Information

When a parent or guardian creates an account, begins a trial, purchases a subscription, contacts us, or uses account features, we may collect:

name;
email address;
password or authentication credentials in protected form;
country or general region;
account preferences;
subscription status;
transaction and purchase records;
communications sent to customer support; and
records of parental consent, where required.

We do not store plain-text passwords.

2.2 Child Profile Information

A parent or guardian may create child profiles within the parent account. Depending on the features enabled, a child profile may include:

nickname or first name;
avatar;
age or age range;
language preference;
content level;
accessibility or playback preferences;
stories, activities, movies, or music recently accessed;
bookmarks, favourites, progress, achievements, and activity results; and
other preferences selected by the parent or child.

Parents should use a nickname rather than a child’s full legal name. We do not intentionally request a child’s surname, home address, telephone number, personal email address, school name, government identification number, precise location, photograph, voice recording, or other information that is not required to provide the Services.

2.3 Usage and Technical Information

When the Services are used, we or our authorised service providers may automatically receive limited technical information, such as:

device type and operating system;
app version;
browser type;
general device language;
IP address;
session timestamps;
crash logs and diagnostics;
content-loading and download status;
interactions with screens and features;
security and authentication events; and
identifiers needed to maintain sessions, prevent fraud, remember preferences, or measure basic service performance.

We do not use children’s activity across unrelated apps or websites to build advertising profiles.

2.4 Purchase and Subscription Information

Payments may be processed by app stores or third-party payment providers, such as Google Play, Apple, Stripe, or another provider identified at checkout. We may receive limited transaction information, including:

purchase or subscription confirmation;
transaction identifier;
purchased plan;
renewal or cancellation status;
country or currency; and
payment failure or refund status.

We do not normally receive or store complete payment-card numbers, card security codes, or online banking credentials. The payment provider’s own privacy policy applies to information collected directly through its payment system.

2.5 Customer Support Information

When you contact us, we may collect:

your name and email address;
the content of your request;
screenshots or files you voluntarily provide;
relevant account, device, or transaction information; and
our correspondence with you.

Please do not send sensitive information about a child unless it is necessary to resolve the issue.

2.6 Cookies and Similar Technologies

Our website may use cookies, local storage, or similar technologies that are necessary to:

maintain secure sessions;
remember preferences;
prevent abuse;
enable downloads;
maintain shopping-cart or subscription functions;
understand basic website performance; and
diagnose technical problems.

We do not use behavioural advertising cookies in areas directed to children. Where legally required, non-essential cookies will not be activated until the appropriate consent has been obtained.

3. How We Use Information

We may use personal information to:

create and administer parent accounts;
create and manage child profiles;
deliver stories, videos, music, activities, and printable resources;
remember progress, preferences, bookmarks, and downloaded content;
provide trials, subscriptions, purchases, and account entitlements;
authenticate users and maintain account security;
provide parental controls and parent-gate functionality;
process support requests;
send important service, security, purchase, or policy communications;
identify crashes, errors, and performance issues;
prevent fraud, abuse, unauthorised access, and security incidents;
understand which features work effectively;
comply with legal obligations;
enforce our Terms of Use; and
protect the rights, safety, and integrity of children, families, users, and our Services.

We do not use a child’s personal information for targeted advertising. We do not condition a child’s participation on providing more personal information than is reasonably necessary for the relevant feature.

4. Children’s Privacy

Protecting children’s information is a core part of our service design.

4.1 Parent-Managed Accounts

The primary Lumi Tales account is intended to be created and managed by an adult parent or legal guardian. Children should access Lumi Tales only through a parent-managed account, an authorised child profile, a supervised guest mode, or another method approved by the parent or guardian.

4.2 Parental Consent

Where applicable law requires verifiable parental consent before collecting personal information from a child, we will request consent from the parent or guardian before enabling the relevant feature. Methods of obtaining consent may vary depending on the type of information collected, how it will be used, the child’s location, the parent’s account or purchase relationship with us, and applicable legal requirements. We may ask for information reasonably necessary to confirm that the person providing consent is an adult or the child’s parent or guardian.

4.3 Limited Child Data

We aim to minimise the information collected about children. Child profiles are intended to function without requiring direct contact information from the child. Unless clearly disclosed to the parent and supported by appropriate consent, Lumi Tales does not allow children to publicly display personal information, send direct messages to other users, participate in public chats, share their precise location, upload public photographs, videos, or voice recordings, receive targeted advertising, or make purchases without an adult-facing control or app-store authorisation.

4.4 Parent Rights

A parent or guardian may contact us to review personal information associated with their child, correct inaccurate child information, delete a child profile, request deletion of the child’s personal information, withdraw previously provided consent, stop further collection or use of the child’s information, or request additional information about our child-data practices. Following withdrawal of consent or a valid deletion request, some features may no longer be available because they require the relevant information to function. We may take reasonable steps to verify the requester’s identity and relationship to the account before providing access or making changes.

4.5 Information Submitted Without Permission

If we learn that personal information was collected directly from a child without the required parental permission, we will take reasonable steps to delete it or obtain appropriate parental authorisation. Parents may report such concerns using the contact details in Section 16.

5. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR apply, we process personal information under one or more of the following legal bases:

Contract. Processing may be necessary to create and manage an account, provide purchased or requested Services, maintain subscriptions, deliver downloads, or provide customer support.
Consent. We may rely on consent for certain cookies or analytics, optional communications, optional profile features, processing that requires parental permission, or other activities for which consent is legally required. Consent may be withdrawn at any time, although this does not affect processing that was lawful before withdrawal.
Legitimate Interests. We may process limited information when necessary for legitimate interests such as securing the Services, preventing fraud and abuse, diagnosing errors, improving performance, administering our business, and protecting our legal rights. When relying on legitimate interests, we consider the potential impact on users and give particular weight to the rights and best interests of children.
Legal Obligation. We may process information to comply with applicable laws, valid legal requests, tax requirements, accounting obligations, consumer-protection rules, and regulatory duties.
Protection of Vital Interests. In exceptional circumstances, information may be processed when necessary to protect a person’s life, health, or safety.

7. Advertising

Lumi Tales does not use children’s personal information for targeted or interest-based advertising. If advertising is introduced in the future, this Privacy Policy will be updated before the change takes effect, parents will receive any notice required by law, child-directed areas will not use behavioural advertising based on tracking across unrelated services, and any required parental consent will be obtained. The absence of targeted advertising does not necessarily prevent the display of contextual messages about Lumi Tales content or subscriptions within the parent-facing portions of our Services.

8. Analytics and Product Improvement

We may use limited analytics to understand whether pages or features load correctly, which app versions are active, how frequently features are used in aggregate, whether crashes or technical errors occur, whether content downloads or streams successfully, and how the Services can be made safer and easier to use. Where reasonably possible, analytics information is aggregated, pseudonymised, truncated, or otherwise limited. We do not permit analytics providers to use child-related information collected through Lumi Tales to create advertising profiles or track children across unrelated services.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to maintain an active account, provide child profiles and saved progress, fulfil purchases and subscriptions, resolve customer-support issues, maintain security records, comply with tax, accounting, and legal obligations, and establish or defend legal claims.

Retention periods may vary depending on the type of information. For example, account information may be retained while the account remains active; child-profile and progress information may be retained until the profile or account is deleted; transaction records may be retained for the period required by financial and tax laws; security logs may be retained for a limited period appropriate to investigating abuse or incidents; and backup copies may remain temporarily until they are securely overwritten or expire under our backup schedule. When information is no longer required, we will delete, anonymise, or securely isolate it, subject to applicable legal requirements.

10. Data Security

We use reasonable administrative, organisational, and technical safeguards designed to protect personal information, including measures such as encrypted transmission using HTTPS, controlled access to production systems, access permissions based on business need, protected authentication credentials, security logging and monitoring, backups and recovery procedures, software updates and vulnerability management, restrictions on service-provider access, and internal procedures for responding to security incidents.

No online service or storage system can guarantee absolute security. Parents should use a strong, unique password and should not share account credentials with unauthorised persons. If a personal-data breach occurs, we will investigate it and provide notifications where required by applicable law.

11. International Data Transfers

We are based in India, and our service providers may process information in India or other countries. These countries may have data-protection laws that differ from the laws in your location. Where required, we use appropriate safeguards for international transfers, which may include contractual data-protection obligations, standard contractual clauses, transfer assessments, access and security controls, or another legally recognised transfer mechanism. We take additional care when international transfers involve children’s information.

12. Your Privacy Rights

Depending on your location, you or the parent managing the account may have rights to access personal information, obtain information about how it is processed, correct inaccurate or incomplete information, delete personal information, withdraw consent, restrict certain processing, object to certain processing, receive a portable copy of eligible information, nominate another person to exercise rights where permitted, submit a grievance or complaint, and complain to an applicable data-protection authority. These rights may be subject to legal exceptions.

To exercise a right, email privacy@lumitales.co.in with the parent account email address, a description of the request, the child-profile nickname where relevant, and any information reasonably necessary to verify the request. Do not send copies of government identification unless we specifically request them and explain why they are necessary. We will respond within the period required by applicable law.

13. Account and Profile Deletion

Parents may request deletion through the account settings available in the app or website, where provided, or an email to privacy@lumitales.co.in. A deletion request may result in the removal of the parent account, child profiles, saved progress, favourites and preferences, trial or subscription associations, and other information linked to the account.

Deleting a Lumi Tales account does not automatically cancel a subscription billed through an app store or external payment provider. The parent may also need to cancel the subscription through the provider that processed the purchase. Certain transaction, security, and legal records may be retained when required by law or necessary to establish or defend legal claims.

14. Third-Party Links and Services

The Services may contain links to external websites, app stores, social-media pages, video platforms, or payment services. We are not responsible for the privacy practices of third parties that operate independently from us. Parents should review the relevant third party’s privacy policy before providing information. External links intended for adults should, where reasonably appropriate, be placed behind a parent gate or in a parent-facing area.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect new features, changes in our data practices, changes to service providers, security improvements, or legal and regulatory requirements. The updated version will display a revised “Last Updated” date. If a change materially affects how children’s personal information is collected, used, or disclosed, we will provide parents with additional notice and obtain new consent where required by law.

16. Contact Us

Questions, privacy requests, complaints, or concerns may be sent to:

Organic Animation Studios Private Limited
Trading as Organic Game Studios / Organic Studios / Lumi Tales
[Full registered office address]
Mumbai, Maharashtra, India
Privacy email: privacy@lumitales.co.in
Support email: support@lumitales.co.in
Telephone: [business telephone number]

Grievance or Data Protection Contact:

[Name or title of responsible person]
Email: grievance@lumitales.co.in

Please include “Privacy Request” in the email subject line.

17. Region-Specific Information

17.1 India

Where India’s Digital Personal Data Protection Act, 2023 and its applicable rules govern processing, we will process digital personal data for lawful purposes and provide notices, consent choices, security safeguards, grievance procedures, and rights consistent with applicable requirements. For children’s personal data, we will take legally required steps concerning parental consent and will not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at children where prohibited by applicable law.

17.2 United States

For users in the United States, we aim to comply with applicable children’s privacy requirements, including the Children’s Online Privacy Protection Act and COPPA Rule where applicable. Parents may review, correct, or request deletion of their child’s information and may refuse further collection or use by contacting us. We do not knowingly sell or share children’s personal information for cross-context behavioural advertising.

17.3 European Economic Area

Where the General Data Protection Regulation applies, users may have rights including access, correction, erasure, restriction, objection, portability, and the right to complain to their local supervisory authority. When consent is required for processing a child’s information, we will apply the age and parental-authorisation requirements of the applicable European country.

17.4 United Kingdom

Where UK data-protection law applies, we design child-accessible Services with the best interests of children in mind. We seek to use high-privacy defaults, collect only necessary information, avoid unnecessary sharing, and keep location-related features disabled unless they are required, clearly communicated, and appropriately authorised.

17.5 California and Other US States

Residents of certain US states may have additional rights concerning access, correction, deletion, and certain disclosures of personal information. Lumi Tales does not knowingly sell personal information or use children’s personal information for targeted advertising. Requests may be submitted using the contact information above. We will not discriminate against a user for exercising an applicable privacy right.

18. Our Children’s Privacy Commitments

Lumi Tales is committed to the following principles:

Children’s best interests guide our privacy decisions.
Parent accounts control child profiles.
We collect only information reasonably necessary for the Services.
Privacy-protective settings are used by default.
We do not sell children’s personal information.
We do not use children’s information for targeted advertising.
Children are not provided with public chat or public-profile features.
Precise location is not collected unless a future feature genuinely requires it and proper notice and permission are provided.
Parents may review, correct, or request deletion of child information.
We assess third-party providers before allowing them to process information through child-directed areas.

If you have any questions about this Privacy Policy, please contact us at privacy@lumitales.co.in.