Privacy Policy
Last updated: October 5, 2026
1. Data Controller
Personal data processed in the Lumiconte application is processed by CODEZIO, SAS with a share capital of €2, Montpellier Trade and Companies Register 130 419 187, 440 Rue de Thomassy, 34090 Montpellier, France.
For any question about your data: contact@codezio.fr
2. Parent Account
When you create your account, we only collect the information needed to authenticate you and secure your access:
- Your email address.
- A password, if you sign up with email (encrypted and invisible to us).
- If you use "Sign in with Google" or "Sign in with Apple": the account identifier and email address provided by that service (Apple lets you hide your address).
This data allows your profiles and subscriptions to be synchronized across your devices. Legal basis: performance of the contract (the Terms of Use).
3. Child Profiles
Lumiconte is designed to keep children anonymous. To create a child profile, we only ask for:
- A first name or nickname (chosen by the parent).
- An age (to suggest suitable content).
We do not collect any real identity data, any geolocation data or any advertising identifier on child profiles. Legal basis: performance of the contract.
4. Usage Data
To provide a continuous reading experience, the application records for each profile: the reading history (stories read, reading time, badges earned, current streaks), the reading settings (voice, language, theme, text display) and the feedback you send from the parent area.
Legal basis: performance of the contract, and our legitimate interest in improving the application for feedback.
5. Subscriptions and Purchases
Payments are processed exclusively by Apple (App Store) or Google (Google Play). We never have access to your bank details.
To verify and synchronize your purchases, our service provider RevenueCat receives the technical identifier of your account and the purchase information sent by the store (product purchased, date, subscription status). Legal basis: performance of the contract.
6. Newsletter Emails
We only send you Lumiconte news and offers by email if you have expressly agreed to it in the parent area. We keep the date and text of your agreement as proof of your consent.
You can withdraw your agreement at any time from the parent area. Legal basis: your consent.
7. Notifications
Reading reminders are scheduled directly on your device. No data is sent to deliver them, and you can turn them off at any time from the parent area or your device settings.
8. Recipients and Processors
We do not sell, exchange or rent any personal data. The application does not include any advertising network, which rules out any advertising tracking of your children.
Only the technical service providers needed to run the service process your data, on our behalf and according to our instructions:
- Google (Firebase): authentication, database, server functions.
- RevenueCat: subscription management.
- Apple and Google: payments and sign-in with their account, where applicable.
- Cloudflare (content delivery network, CDN): delivery of stories, illustrations and audio files, which receives the device's IP address for this purpose.
Profile data is stored in the European Union. Some providers may process data outside the European Union, in particular in the United States. These transfers are covered by the safeguards provided for by the GDPR (the "Data Privacy Framework" adequacy decision or the European Commission's standard contractual clauses).
9. Retention Period
Your data is kept for as long as your account is active. When you delete your account, all of your data (account, profiles, progress, settings, feedback and consent) is permanently erased. Technical backup copies may remain with our providers for a few weeks before being deleted automatically.
Billing data is kept by Apple or Google in accordance with their own legal obligations.
10. Your Rights (GDPR)
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.
You can permanently delete your account and all associated profiles at any time, directly from the parent area. To exercise your other rights, write to contact@codezio.fr.
If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the data protection authority of your country.
11. Data Security
We apply strict security measures (encryption of data in transit, restrictive Firestore access rules) to protect your data against any unauthorized access, modification or disclosure.
Personal data contact: contact@codezio.fr