Privacy Policy (Lumolands)
Effective date: Oct 27, 2026
Last updated: June 12, 2026
Lumo Land Inc. (referred to as "Lumolands," "we," "us," or the "Company") values the personal information and privacy of you and your child. This Lumolands Privacy Policy (this "Policy") explains how we collect, use, store, share, protect, and delete personal data, and how you may exercise related rights, when we provide children's AI printing devices StickerPOP under the Lumolands brand, related mobile applications, websites, accounts, subscriptions, customer support, and related services (collectively, the "Services").
This Policy is primarily addressed to parents or other legal guardians of children (individuals under 13 years of age, or under the age of a child defined under applicable law). You should read and understand this Policy before allowing a child to use the Services. If you do not agree to this Policy, please do not create an account or continue using the relevant Services for a child. Children should use the Services under the guidance of a parent or guardian. If you do not agree to this Policy, please stop using our Services. When you use our Services, you are deemed to accept and acknowledge that we will process your relevant information in accordance with this Policy.
Overview
- How We Use Your Personal Data
- How We Share, Disclose and Delegate the Processing of Personal Data
- Third-Party Platforms and Services
- Data Storage and Cross-Border Access
- How We Protect Personal Data
- Your Choices and Rights
- Children's Personal Data
- Cookies and Similar Technologies
- U.S.-Specific Provisions
- Governing Law and Dispute Resolution
- Updates to This Policy and Contact Us
1. How We Use Your Personal Data
1.1 The following describes in detail the categories of personal data we collect from you, the purposes of processing, and the retention periods for each category of personal data.
| Personal Data and Collection Method | Purpose of Processing and Legal Basis | Retention Period |
|---|---|---|
| Account and guardian information, including email address, account identifier, login authentication information, and any nickname or contact information that you voluntarily provide. | Used to create and maintain parent/guardian accounts, verify identity, maintain account security, and respond to your service requests. Legal basis (only in relevant jurisdictions): performance of a contract or taking steps at your request before entering into a contract; legitimate interests in maintaining account and service security; and compliance with legal obligations where applicable law requires retention or disclosure. | Retained for as long as your account remains active and for the shortest reasonable period necessary to handle disputes and comply with legal obligations; after account deletion, deleted or anonymized in accordance with applicable law and confirmed internal rules. |
| Order, subscription and payment-related information, including order number, purchased items, subscription status, transaction time, payment status, refund records, and app store receipt information; payment card information is usually processed by payment platforms. | Used to complete purchases, manage subscriptions, reconcile accounts, process refunds, handle taxes, prevent fraud, and provide customer support. Legal basis (only in relevant jurisdictions): performance of a contract; compliance with tax, accounting, consumer protection, and other legal obligations; and legitimate interests in preventing fraud and protecting transaction security. | Retained for the period necessary for transaction, tax, accounting, and dispute-handling purposes. |
| Children's voice and transcription text, including original voice recordings and recognized text generated when a child continuously presses the recording button on the device to initiate voice-based creation. | Used to understand creation instructions, generate corresponding content, complete print tasks, ensure service safety, and conduct necessary troubleshooting. Children's data is not used to train or fine-tune generative models. Legal basis (only in relevant jurisdictions): providing the voice creation, generation, and printing services you request; consent of the parent/guardian; and legitimate interests in maintaining service and content safety. | Retained only for the shortest reasonable period necessary to complete the Services, ensure safety, handle failed retries, or comply with legal obligations. |
| Generated images and print history information, including generated images, print task records, timestamps, and identifiers associated with an account or device. | Used for images generated based on a child's creation, print history managed and controlled by parents, after-sales support, and abuse prevention. Legal basis (only in relevant jurisdictions): providing services for children's creation; consent of the parent/guardian; legitimate interests in preventing abuse, protecting service security, and handling disputes; and compliance with legal obligations where applicable. | Retained for the period necessary to implement the foregoing functions and satisfy legal obligations, and until the parent or guardian deletes the relevant data in the App. |
| Device, connection, network configuration and printing data, including device serial number, device or application identifier, firmware version, device status, print task status, fault codes, network connection status, SSID, BSSID, Bluetooth scan results, Wi-Fi password, network configuration status and information necessary to complete network configuration, usage logs, and similar information. | Used for device binding, network connection, firmware updates, print task scheduling, device discovery and connection, product safety, fault diagnosis, and improving service stability. Legal basis (only in relevant jurisdictions): performance of device binding, connection, network configuration, update, and printing services; legitimate interests in protecting network and product security, diagnosing faults, and improving stability; and compliance with product safety or other legal obligations where applicable. | Retained during completion of the relevant network configuration and other functions, during the period in which the device or account remains associated, and for the shortest reasonable period necessary for fault diagnosis, security, and after-sales support. |
| Technical, log and security data, including IP address, browser or operating system information, application version, crash or error logs, access time, push tokens, and security incident records. | Used for service operation, security protection, error correction, performance analysis, and sending you service-related notices; if you choose to receive marketing messages, used to send relevant marketing messages. Legal basis (only in relevant jurisdictions): operating and protecting the Services, correcting errors, and maintaining necessary service communications: performance of a contract or legitimate interests in maintaining service security; your valid consent where required by applicable law; and compliance with legal obligations. | Retained for the period necessary to achieve operational, security, analytics, or legal-obligation purposes. The collection, default settings, and retention rules for analytics, advertising identifiers, and similar SDKs should be consistent with the applicable consent mechanism and actual configuration. |
| Customer support and other communication data, including inquiries, complaints, emails, attachments, reviews, and after-sales service communications that you send to us. | Used to respond to requests, handle complaints and refunds, protect users and service security, maintain service records, and improve customer support quality. Legal basis (only in relevant jurisdictions): performance of customer support, after-sales, or other service contracts; legitimate interests in protecting service security, handling disputes or claims, and establishing, exercising, or defending legal claims; and compliance with legal obligations where applicable. | Retained for the period necessary to handle the matter, resolve disputes, and comply with legal obligations. |
| Website cookies and similar technology data, including necessary cookies, session identifiers, preferences, and access and usage information collected by analytics tools after any required consent has been obtained. | Used to maintain basic website functions, remember choices, and measure website performance. Legal basis (only in relevant jurisdictions): maintaining necessary cookies, login status, and website security: performance of a contract or legitimate interests in protecting service security; and your valid consent where required by applicable law. | Session cookies usually expire after you close your browser; the duration and management of other cookies are limited to the shortest period necessary. |
1.2 To provide you with better and more personalized services or for purposes such as detecting fraudulent information, our affiliates and partners may share your information with us in accordance with legal requirements, agreements with you, or your consent.
1.3 We may process personal data in aggregated or anonymized form to evaluate and improve our Services, understand general usage patterns, and share information with business partners. For example, to improve user experience, we may analyze and aggregate general user behavior and usage data. This information does not identify individual users. We may disclose input information in aggregated and anonymized form, where such input information is not associated with your user ID, to develop business relationships with business partners.
1.4 In certain jurisdictions, certain types of personal data, such as information about your race, religion, political or philosophical views, sexual orientation, or health status, may be considered sensitive information and subject to stricter regulation than other types of personal data. We do not require you to provide sensitive personal data in order to use the Services. If you provide any sensitive personal data, you consent to our processing such information within the privacy controls you select.
2. How We Share, Disclose and Delegate the Processing of Personal Data
2.1 We may share your personal data with our affiliates so that we can provide the Services to you.
2.2 We engage service providers to provide various services that support and improve our Services. In addition to our affiliates, we use certain third-party service providers, such as Stripe for payment card processing and verification services, AWS cloud infrastructure for data storage and service provision, OpenRouter for our content safety model, and Microsoft speech recognition to convert children's voice input into text for the image generation model.
2.3 When you use third-party services, we may receive your information from those third-party services and/or share your information with those third-party services. Third-party services may collect information, including personal data and log data, and may set cookies on your device. This Privacy Policy applies only to information we collect and does not apply to information collected by third parties. For example, when you log in through a Google account, Google may provide us with certain personal data such as your account name.
2.4 If a third party or relevant group company undergoes a merger, acquisition, reorganization, or sale, or where required by law or for other reasons, we will transfer your information to such entity in order to continue providing the Services to you.
2.5 In certain circumstances, we must disclose your personal information to governmental, public sector, regulatory, judicial, law enforcement agencies or authorities in accordance with law, including to comply with legal obligations or requests such as court orders, subpoenas, or other legal processes; to enforce our terms; or to address security- or fraud-related matters.
2.6 In seeking professional advice, we may share your personal data with, or disclose your personal data to, our advisers, including auditors and lawyers.
2.7 We may publicly share aggregated, de-identified information, such as aggregated trends regarding general use of our Services, and share such information with our affiliates, subsidiaries, and partners.
3. Third-Party Platforms and Services
3.1 Our Services may link to, rely on, or integrate websites, applications, interfaces, services, and platforms operated by other companies, including third-party services. We are not responsible for the privacy practices of third-party websites, applications, interfaces, services, or platforms linked to, relied upon, and/or integrated with our Services, or for the privacy practices of third-party advertising companies.
3.2 Once you leave our Services through a link or access a third-party service, you should review the applicable privacy policy to determine how the relevant company processes personal data it may collect about you.
4. Data Storage and Cross-Border Access
We store personal data collected from you in the United States. We may remotely access such data from mainland China for technical support purposes. To provide the third-party services described above, personal data may also be accessed or processed by service providers that are legally obligated to protect personal data and that are located in other countries or regions. The data protection laws of those countries or regions may differ from those in your location.
5. How We Protect Personal Data
5.1 We will adopt administrative, technical, and physical measures appropriate to the nature and risks of the information processed to protect personal data against unauthorized access, collection, use, disclosure, copying, modification, loss, or improper disposal. Such measures may include access controls, least-privilege access, authentication, transmission and storage protections, log monitoring, and security incident response.
5.2 Please understand, however, that no internet transmission, electronic storage, or security measure can guarantee absolute security. If you suspect unauthorized use or a security incident, please contact us promptly.
6. Your Choices and Rights
6.1 Please note that, to protect your information, we will need to verify your identity before responding to any rights request.
6.2 Right of access: You have the right to request access to the personal data we hold about you and to understand how we use such information and with whom we share it.
6.3 Right to correction: You also have the right to correct inaccurate or incomplete information. You may access and correct your personal data through your account.
6.4 Right to deletion: You may log in to your account and delete your account or certain personal data. After account deletion is completed, we will retain relevant data only for the period necessary to comply with legal obligations, tax or accounting requirements, maintain transaction records, prevent fraud and ensure security, handle complaints or disputes, or establish, exercise, or defend legal claims. Aggregated or irreversibly anonymized data that no longer identifies you may continue to be retained. You may request that we delete personal data we hold about you in the following circumstances: you believe we no longer need to hold your personal data; we process your personal data based on your consent and you withdraw that consent, and we have no other valid and lawful reason to process the personal data; or you were a minor when we collected the personal data and we can verify that fact. While we consider your data deletion request, you may exercise your right to restrict our processing of your personal data. If we have sufficient legal grounds, we may retain personal data. For images generated from children's voice creation, parents or guardians may delete them in the App.
6.5 Restriction of processing: In certain circumstances, you have the right to request that we stop processing your personal data. However, if we have another valid legal basis to process your personal data, we may continue such processing.
6.6 Portability: You also have the right to request that we transmit your personal data to another party. If you would like us to transmit personal data to a third party, please ensure that you provide details of that third party. Please note that we can make such transmission only where technically feasible. Once that third party receives the personal data, we will no longer be responsible for its security or processing.
6.7 Right to object: If we process your personal information based on our legitimate interests, for example to ensure account security, you may object to our use of your personal information.
6.8 If you have subscribed to marketing messages from us, you may unsubscribe at any time using the method provided in the message or by contacting [contact email]. Even if you choose not to receive marketing messages, we may still send you non-marketing notices relating to your account, orders, subscriptions, device security, or changes to the Services.
6.9 You may exercise your rights by contacting [email protected]
7. Children's Personal Data
7.1 Lumolands devices and related services may be used by children (individuals under 13 years of age, or under the age defined as a child under relevant local law) under the guidance of a parent or guardian. Our App is intended for parents and guardians. Parents should complete account registration and login, Bluetooth connection, network configuration, and related functions. We collect relevant voice, transcription text, generated images, and similar data only when a child uses the device for voice-based creation. We understand that children's personal information requires a higher level of protection, and we strive in our design and operations to follow principles such as data minimization, purpose limitation, privacy by default, and the best interests of the child.
7.2 Where applicable law requires parent or guardian consent, except where an exception is permitted by law, we will notify the parent or guardian of how we process data and obtain consent before collecting, using, or disclosing children's personal information. Before obtaining parental consent, we will use necessary information only for the purpose of obtaining parental consent. If you are a child, please do not send us any personal data about yourself before obtaining parental consent, except for information necessary to obtain parental consent.
7.3 If you believe that a child has provided personal data to us without parental consent or beyond what is necessary, or if you need to exercise relevant rights, such as deleting images generated from the child's voice creation, you may contact us to exercise the relevant rights as described in Section 6.
7.4 We do not condition our Services on the provision of children's personal data beyond the scope that is reasonably necessary, and we do not retain children's personal data for longer than is reasonably necessary. We do not use personal data of known children to train or fine-tune models. Unless necessary to fulfill a request made by a child through the Services and permitted by applicable law, we also do not use personal data of known children for targeted advertising or to contact children.
8. Cookies and Similar Technologies
8.1 Our website may use cookies, pixel tags, local storage, and other similar technologies to maintain login status, remember preferences, protect security, and measure website and service performance. You may delete or block certain cookies through your browser settings, but doing so may affect some Service functions.
8.2 The first-party cookies we set and third-party cookies set by service providers may be divided into several categories. These categories are described below: a. Strictly necessary cookies. Strictly necessary cookies are necessary for you to browse our website and use its features, such as accessing secure areas of the website. Without these cookies, the services you request cannot be provided. Strictly necessary cookies are used to enable services that you expressly request. b. Performance cookies. Performance cookies collect information about how visitors use our website, such as which pages visitors visit most often and whether they receive error messages from webpages. These cookies do not collect information that identifies a visitor. All information collected by these cookies is aggregated and used only to improve how our website works. Performance cookies collect information about pages visited. c. Functionality cookies. Functionality cookies allow our website to remember choices you make, such as your username, language, or region, and provide enhanced and more personalized features. For example, our website can provide localized services by storing your current region in a cookie. These cookies may also be used to remember changes you make to text size, fonts, and other customizable webpage elements. Functionality cookies remember choices you make to improve your experience.
8.3 You have the right to withdraw your consent to non-essential cookies at any time through the cookie settings tool or browser settings. Withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. Strictly necessary cookies cannot be disabled through the cookie settings tool. Users may block or delete cookies through browser settings, and the specific method varies by browser. Users may delete existing cookies by clearing browser history or website data, but doing so may delete saved login details and website preferences.
9. U.S.-Specific Provisions
9.1 If you are a California resident, we have not sold California residents' personal information as the term "sale" is defined under the CCPA. In addition, we do not have actual knowledge that we sell or share personal information of residents under 16 years of age. California residents have the right to contact us to prevent disclosure of personal data to third parties for those third parties' direct marketing purposes. Your browser may provide a Do Not Track option that allows you to signal to website, web application, and service operators that you do not want them to track certain online activities across different websites. At present, our Services do not support Do Not Track requests.
9.2 If you are a resident of Nevada, pursuant to the definition of "sale" under Nevada law, we do not "sell" your personal data.
9.3 If you are a resident of another U.S. state that has enacted a comprehensive privacy law similar to the CCPA and applicable to us, when you use features such as Bluetooth connection and network configuration, we may collect geolocation data of U.S. residents, which may be considered precise geolocation data under applicable U.S. state privacy laws. We will not collect such data without your consent. We may also collect personal data of children who use our Services after obtaining parent/guardian consent.
9.4 For children under 13 years of age, we comply with the requirements of the Children's Online Privacy Protection Act (COPPA). Before collecting, using, or disclosing children's personal information, we will provide a direct notice to the parent or guardian and obtain verifiable consent. Parents or guardians have the right at any time to request that we stop collecting or using, or delete, children's personal information. Please refer to Section 6 of this Policy for the specific method of doing so.
9.5 You may exercise your rights by contacting [email protected]
10. Governing Law and Dispute Resolution
10.1 This Policy and any dispute or claim arising out of or relating to this Policy are governed by and construed in accordance with the federal laws of the United States and the laws of the State of Wyoming, without regard to conflict-of-laws rules. This Policy is drafted only in English, and any translation into another language is not binding on either party.
10.2 To the maximum extent permitted by applicable law, any dispute, controversy, or claim arising out of or relating to this Policy, whether in contract, tort, or otherwise, including its existence, validity, interpretation, performance, breach, or termination, will be submitted to and finally resolved by arbitration administered by the American Arbitration Association (the "AAA") under the AAA Consumer Arbitration Rules and Mediation Procedures in effect when arbitration is commenced. The seat of arbitration will be the United States. There will be one arbitrator. The arbitration will be conducted in English.
10.3 You and we both agree that, to the maximum extent permitted by applicable law, before either party commences any legal proceeding, the parties will first attempt to resolve the dispute informally. You must notify us of your intent to initiate informal dispute resolution by sending an email to [email protected] . An informal dispute resolution conference will be held within 60 days after that notice is sent, unless the parties agree to extend the time. Any statute of limitations will be tolled while the parties attempt to resolve the matter through this informal process. The informal dispute resolution conference must be individualized; unless the parties agree in writing, multiple individuals bringing claims together may not participate in the same informal dispute resolution conference. If a party is represented by counsel, that party's counsel may participate in the conference, but both parties must also participate fully. If the parties cannot resolve the matter within 60 days after the notice is sent, either party may commence arbitration.
10.4 Completion of this informal dispute resolution process is a condition precedent to commencing arbitration or any other legal proceeding. If arbitration or any other legal proceeding is initiated without full compliance with this informal dispute resolution process, the arbitration or other legal proceeding will be dismissed.
10.5 This Section does not exclude or limit any non-waivable rights granted to you by applicable law, including the right to complain to a competent regulator or, where permitted by applicable law, to bring claims in a local court or small claims proceeding.
11. Updates to This Policy and Contact Us
11.1 We may update this Policy due to changes in Service functions, data processing activities, legal requirements, or other reasonable needs. For material changes, we will provide a prominent notice before the changes take effect by website announcement or other appropriate means. Your continued access to or use of our Services constitutes your acceptance of the revised Privacy Policy.
11.2 If you have any questions, complaints, or requests regarding this Policy, personal data processing, or your rights, please contact us at [email protected].
