Privacy Policy
Full transparency about how we care for your family's data.
This English version is provided for convenience. In case of any discrepancy, the Portuguese version prevails.
1. Data Controller
Ilumi Kids is maintained by an individual in Brazil. Full details of the data controller are available upon formal request via the e-mail below, in accordance with Article 41 of the LGPD (Brazil's General Data Protection Law).
Official privacy channel (DPO): privacidade@ilumikids.com.br
We handle requests for access, correction, anonymization and deletion of data (LGPD Art. 18) within 15 business days.
2. Protection of Children and Adolescents (LGPD Art. 14)
Ilumi Kids is intended for children aged 3 to 14. Under Brazil's General Data Protection Law (Law No. 13,709/2018), we consider:
- Child: a person under 12 — processing their data requires specific and prominent consent from a parent or legal guardian.
- Adolescent: a person aged 12 to 18 — may consent with the assistance of a guardian.
Children's personal data is processed solely in the best interest of the child, as required by LGPD Art. 14.
3. Personal Data Collected
We collect only the minimum necessary for the platform to work:
| Data | Purpose | Legal Basis |
|---|---|---|
| Parent's e-mail | Authentication and account recovery | Consent (Art. 7, I) |
| Display name (nickname) | Personalizing the experience | Consent (Art. 7, I) |
| Progress and achievements | Saving progress, educational gamification | Performance of contract (Art. 7, V) |
| Preferences (language, theme) | Personalized experience | Legitimate interest (Art. 7, IX) |
| Name, e-mail and message from the contact form | Replying to your message | Consent (Art. 7, I) |
| Prayer request (may contain sensitive data) | Praying for you and replying; never disclosed | Specific, highlighted consent (Art. 11, I) |
Guest Mode: When used without an account, data stays only on the device (localStorage) and is never sent to servers.
4. What We Do NOT Do
- ✓Zero tracking — we do not use Google Analytics, Facebook Pixel or tracking cookies. We count visits anonymously and in aggregate: no cookie, no profile, no identifying who you are
- ✓Zero data sales — we never sell, share or monetize personal data
- ✓Zero external links — children are never sent outside the safe environment
5. Storage and Security
Data is stored in two ways:
- localStorage (device): Progress and preferences stay in the browser. You can delete them at any time in your browser settings.
- Supabase (cloud): When registered with an e-mail, data is stored on servers with encryption in transit (TLS 1.3) and at rest (AES-256). Servers hosted on AWS.
We use Row-Level Security (RLS) to ensure each user can access only their own data.
6. Your Rights (LGPD Art. 18)
As the data subject (or legal guardian), you have the right to:
- ①Access all personal data we hold about you/your child
- ②Correct incomplete, inaccurate or outdated data
- ③Delete all personal data (right to be forgotten)
- ④Portability — receive your data in a readable format
- ⑤Withdraw consent at any time
To exercise any right, e-mail privacidade@ilumikids.com.br. We reply within 15 business days.
7. Retention and Deletion
We keep data while the account is active. When you request account deletion, all personal data is removed from our servers within 30 days.
Accounts inactive for more than 24 months may be deleted automatically, with 30 days' prior notice to the registered e-mail.
🍪 8. Cookies and Local Storage
We use localStorage (the browser's local storage) to:
- Save game progress and theme preferences
- Keep the user session active
- Store usage consent
We do not use tracking or third-party cookies. Local storage is essential for the platform to work and can be cleared in your browser settings.
▶️ 9. YouTube (YouTube API Services)
We publish Ilumi Kids videos to our own YouTube channels (@ilumikids, @ilumikidsenglish and @ilumikidsespanol) using the YouTube API Services. This integration is internal: only the Ilumi Kids team uses it, to upload our own videos.
The website does not use the YouTube API Services to access visitor or user data: we do not read, store or share any data from your YouTube or Google account.
When you watch our videos on YouTube, you are subject to the YouTube Terms of Service and the Google Privacy Policy.
The only information stored is the authorization to access our own channels, kept on a team computer. It can be revoked at any time on the Google Account permissions page; once revoked, we delete the stored authorization within 7 days. Data deletion requests can be sent to the email below.
10. Contact and Complaints
Questions, suggestions or complaints about this policy can be sent to our Data Protection Officer:
📧 privacidade@ilumikids.com.br
If your request is not handled satisfactorily, you may contact Brazil's National Data Protection Authority (ANPD) at www.gov.br/anpd.
This policy is governed by Brazil's General Data Protection Law (LGPD - Law No. 13,709/2018), the Child and Adolescent Statute (ECA - Law No. 8,069/1990) and the Brazilian Internet Civil Framework (Law No. 12,965/2014). Jurisdiction: the district of the data subject's domicile.