What Lumerell Is
Lumerell is a teaching and curriculum-planning application for teachers and adult school staff, operated by Open Meadow LLC, a Massachusetts limited liability company. It is not a student-account service: Lumerell has no student accounts and no student fields. Teachers sign in with Google or with an emailed link. Lumerell is only open to schools and districts working with Open Meadow.
Student Information
Lumerell asks teachers not to include student names or details that could identify a student, including student names tied to grades, health information, individualized education plans, or other confidential records. When a note looks like it might identify a student, Lumerell flags it and asks the teacher to check before saving.
Lumi is a helper teachers can talk to from any page. When a teacher talks to Lumi, Lumerell applies automated checks designed to remove student-identifying information from what they say or type before sending it to its AI providers. These checks may miss identifying information, so teachers are still asked to keep student names out of their plans and out of what they say to Lumi.
We do not knowingly collect personal information directly from children. If you believe a child’s information has been entered, contact hello@openmeadow.io so we can look into it and remove it.
What We Store and Where
- Account information: a teacher’s email address and, with Google sign-in, the name, Google account identifier, and profile picture Google supplies. A school name and teaching preferences are optional.
- Teaching work: courses, units, curriculum calendars, lessons, worksheets, substitute packets and their attached files, reflections, professional goals, and review results.
- Access list: the email addresses and school email domains allowed to create an account.
- Technical records: standard connection records kept by our hosting and database providers, and a record of each drafting request (which feature ran, which provider, how long it took, whether it succeeded). That record never contains the text of the request or the result.
Our database is in the United States (AWS us-east-1, through Supabase), and the application is hosted in the United States (Washington, D.C. region, through Vercel). Voice requests sent through OpenRouter are restricted to its United States region.
Usage analytics are not turned on. We do not sell or rent information, or use it for advertising.
Service Providers
These are the providers named in our Privacy Policy, and what each one receives.
| Provider | What it does, and what it receives |
|---|---|
| Supabase | Stores accounts, teaching work, attached files and worksheet illustrations; runs sign-in; sends sign-in and invitation emails. United States (AWS us-east-1). |
| Vercel | Hosts the application in the United States (Washington, D.C. region) and keeps its standard request and error logs for 30 days. |
| Sign-in, the Drive and Calendar connections a teacher authorizes, and YouTube search. For YouTube, only a few search words are sent, from our server, never a teacher’s name, account, or plans. | |
| Anthropic | Generates written drafts and reviews. Receives the teacher’s instruction and the relevant teaching content, and, when a teacher runs a review against the district’s checklist, that checklist. |
| OpenAI | Draws worksheet illustrations from a short picture description, and turns voice recordings into text. It never receives a Google file or calendar. |
| OpenRouter | Gives some spoken replies a natural-sounding voice. Receives only sentences Lumerell writes itself, never a teacher’s voice recording, anything they said or typed, or their Google files, calendar, name, or account information. |
| DeepInfra | Converts Lumi’s written replies into speech. Receives the text of each sentence Lumi is about to say, which can include details from a teacher’s plans, such as a lesson title or a date, or the teacher’s name if Lumi says it. It does not receive the teacher’s account profile or Google sign-in information. |
| PostHog | Usage analytics. Not turned on, so it receives nothing. |
Our agreements with the AI providers are their business API terms, under which they do not use what we send them to train their models.
How We Use AI
AI runs when a teacher asks for something, never in the background, and requests include only the lessons and details that task needs. Review suggestions change nothing until the teacher approves them. Lumerell never grades students and is not part of educator evaluation. More in How Lumerell Uses AI.
Retention and Deletion
- A teacher’s account and work are kept for as long as the account exists.
- Download My Data: in Settings, a teacher can download one ZIP file of everything they have made in Lumerell. It is made on request from the teacher’s own account only and is not kept by us. A school or district leader cannot download a teacher’s data.
- Delete My Account: in Settings, it takes effect straight away. Attached files and illustrations are removed from storage, then the account and its work from our database. Our database provider takes one backup a day and keeps seven, so deleted database records can remain in a backup for up to seven days.
- Voice recordings are not kept at all. Lumerell doesn’t save a history of conversations with Lumi.
- Anthropic keeps the text it is sent and the text it returns for 30 days. OpenAI keeps picture descriptions for up to 30 days for abuse monitoring, and does not keep the audio it turns into text. OpenRouter deletes the text and audio promptly after the voice is made, and DeepInfra’s terms say it deletes the text after processing; each has limited exceptions, such as legal or security reasons.
- Access-list entries and district library resources are kept while the school or district works with us. When a district leaves, we delete its library resources and uploaded files.
Access Controls
- Access gate: only addresses on the access list can create an account. If an address is not on the list, no account is created.
- Private by default: every database read and write is enforced by the database itself. A teacher’s work is private unless they share it, or unless their district uses the leader view below. Nothing is shared automatically.
- Roles: school and district leaders see a list of the teachers they lead (name, email address, school, role, and the date they joined), not what those teachers have made. Only if the district chose it, a district leader turned it on, and the teacher has not kept their work private can school leaders read, never change, a teacher’s curriculum. Leaders never see professional goals, reflections, sub plans, or review results.
- Totals, not names: where a district has district-wide totals, leaders see counts only, never a teacher’s name next to a number, and numbers that would describe fewer than 5 teachers are hidden.
- Change record: when leaders invite teachers, cancel an invitation, or change a teacher’s school or role, we keep a record of the change (who, what, and when, never a teacher’s content) for as long as the district uses Lumerell. Changes leaders make to district guidance, tools, and library resources are recorded in the district’s change record too.
- Encryption and credentials: information travels over encrypted connections, and our database provider encrypts stored data. Provider credentials are kept in server-side configuration and never reach the browser. Google access tokens live only in the teacher’s browser for about an hour and are never sent to or stored on our servers.
No service can promise that every security incident will be prevented.
Compliance Status
Where we stand today, including what is not done yet.
| Item | Status |
|---|---|
| OpenRouter data processing agreement | In force through OpenRouter’s Terms of Service. Signed by Open Meadow on October 16, 2026, and by OpenRouter. |
| DeepInfra data processing agreement | In force: DeepInfra’s Terms of Service incorporate it by reference. |
| Anthropic and OpenAI | Their business API terms, under which they do not train on what we send. |
| Massachusetts student data privacy agreement (through TEC) | Not signed yet. TEC has told us one is not required for a tool that receives no student personal information. We are willing to sign one for a district that asks. |
| SOC 2 | Not done. We do not have a SOC 2 report. |
| Independent security audit | Not done. We have no audit report. |
| Named security framework (such as NIST CSF) | Not adopted yet. |
| 1EdTech, iKeepSafe, or Common Sense Privacy certification | None. |
| Accessibility | Designed to meet WCAG 2.1 AA. We have not yet had an independent accessibility audit. |
Privacy questions or requests: Open Meadow LLC — hello@openmeadow.io. See also our Privacy Policy, How Lumerell Uses AI, and Terms of Service.