Privacy Policy

Last Updated: January 13, 2026

1. INTRODUCTION

LUMARANA ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, educational platform, and related services (collectively, the "Services"). Given the sensitive nature of cannabis education and the background of our founder in healthcare (EMS), we apply HIPAA-influenced privacy standards to protect your information, even though we are not a covered entity under HIPAA.

LUMARANA currently serves users in the United States only.

2. INFORMATION WE COLLECT

2.1 Information You Provide

We collect information you provide directly, including:

  • Account Information: Name, email address, username, password, age verification
  • Payment Information: Credit card details, billing address (processed securely through our payment processor)
  • Profile Information: Course progress, saved meditation patches, terpene notes, learning preferences
  • Communications: Messages you send us, support requests, feedback
  • Age Verification: Date of birth or age attestation for access to age-restricted content

2.2 Information Collected Automatically

When you use our Services, we automatically collect:

  • Usage Data: Pages viewed, features used, time spent, course lessons accessed
  • Device Information: IP address, browser type, operating system, device identifiers
  • Meditation Patches: Settings, parameters, and preferences saved in your Mandala profiles
  • Course Progress: Lessons completed, quiz results, time spent on materials
  • Cookies and Similar Technologies: Small data files stored on your device to enhance functionality

2.3 Information from Third Parties

We may receive information from third-party services you connect to your account (such as payment processors). We do not control how these third parties collect or use your information. Please review their privacy policies.

3. HOW WE USE YOUR INFORMATION

We use your information to:

  • Provide and improve our Services (course delivery, meditation tools, user experience)
  • Process payments and manage subscriptions
  • Send transactional communications (purchase confirmations, password resets, service updates)
  • Provide customer support and respond to inquiries
  • Send marketing communications (with your consent; you may opt out at any time)
  • Verify age for access to age-restricted content
  • Track course progress and personalize learning experiences
  • Analyze usage patterns to improve our educational content
  • Comply with legal obligations and enforce our Terms of Service
  • Protect against fraud, abuse, and security threats

4. OUR PRIVACY PRINCIPLES

Informed by our founder's healthcare background, we apply medical-grade privacy standards:

4.1 Minimum Necessary

We collect only the information necessary to provide our Services. We do not require you to share more than is needed.

4.2 Pseudonymous Participation

You may participate in our community using a pseudonym or username. We understand the sensitivity of cannabis education and respect your desire for privacy.

4.3 Discreet Billing

Subscription charges appear discreetly on your billing statements as processed through our payment provider. We understand privacy matters.

4.4 Confidential Communications

All support communications and inquiries are treated confidentially. We do not share your questions, concerns, or personal discussions with third parties.

4.5 No Data Selling

We will never sell, rent, or transfer your personal information to third parties for their marketing purposes. Your data is yours.

5. HOW WE SHARE YOUR INFORMATION

We share your information only in limited circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services, such as:

  • Payment processors (to handle transactions securely)
  • Email service providers (to send communications)
  • Hosting providers (to store data and deliver content)
  • Analytics providers (to understand usage patterns)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to:

  • Comply with legal obligations
  • Protect the rights, property, or safety of LUMARANA, our users, or others
  • Investigate fraud or security issues
  • Enforce our Terms of Service

5.3 Business Transfers

If LUMARANA is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Services before your information is transferred and becomes subject to a different privacy policy.

5.4 Community Sharing (With Your Consent)

If you choose to share meditation patches or other content publicly through our community features, that content will be visible to other users. You control what you share.

5.5 Parental Access

For users under 14 years of age, parents or legal guardians who created the account have full access to all information associated with that account.

6. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password storage (hashing and salting)
  • Regular security assessments and updates
  • Access controls limiting who can view your data
  • Secure third-party service providers with appropriate safeguards

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. DATA RETENTION

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Active Accounts: Information retained while account is active
  • Course Access: Course progress and materials retained for lifetime access
  • Closed Accounts: Most personal information deleted or de-identified within 90 days of account closure
  • Legal Requirements: Some information retained longer for legal compliance, dispute resolution, or enforcement of agreements

When you close your account, we will delete or de-identify your personal information within a reasonable timeframe, except for information we must retain for legal, regulatory, or legitimate business purposes.

8. YOUR RIGHTS AND CHOICES

You have the following rights regarding your personal information:

8.1 Access and Portability

You can access and update most of your account information through your account settings. You may request a copy of your personal information by contacting us at hello@lumarana.com.

8.2 Correction

You can correct or update your information through your account settings. If you need assistance, contact us at hello@lumarana.com.

8.3 Deletion (Right to Be Forgotten)

You may request deletion of your personal information by contacting us at hello@lumarana.com. We will delete your information except where we must retain it for legal compliance, dispute resolution, or enforcement of our agreements. Note that some content you have posted publicly (such as shared meditation patches) may remain visible even after account deletion.

8.4 Opt-Out of Marketing

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or by updating your communication preferences in your account settings. You will still receive transactional emails related to your account and purchases.

8.5 Cookie Controls

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Services.

8.6 Do Not Track

Some browsers support a "Do Not Track" feature. Our Services do not currently respond to Do Not Track signals.

9. CHILDREN'S PRIVACY AND AGE-APPROPRIATE CONTENT

LUMARANA provides age-appropriate services for different user groups:

9.1 Users Under 14

Users under 14 years of age must have a parent or legal guardian create and manage their account. We comply with the Children's Online Privacy Protection Act (COPPA). Parents or guardians provide consent for data collection and have full access to and control over their child's account and information.

9.2 Users Ages 14-17

Users ages 14-17 may create their own accounts. We collect and use their information as described in this Privacy Policy, with access limited to age-appropriate content.

9.3 Users 18 and Over

Users 18 and over have full access to all LUMARANA Services, including cannabis-specific educational content.

If we discover that we have inadvertently collected information from a child under 14 without proper parental consent, we will delete that information immediately.

10. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the personal data we collect, use, disclose, and sell
  • Right to Delete: You can request deletion of your personal information
  • Right to Opt-Out: You can opt out of the sale of your personal information (note: LUMARANA does not sell personal information)
  • Right to Non-Discrimination: You have the right to not receive discriminatory treatment for exercising your CCPA rights

To exercise these rights, contact us at hello@lumarana.com. We will verify your identity before processing your request.

11. INTERNATIONAL USERS

LUMARANA is based in the United States and currently serves U.S. users only. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to the transfer of your information to the United States and acknowledge that U.S. privacy laws may differ from those in your country.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our Services at least 30 days before the changes take effect. Your continued use of our Services after the changes become effective constitutes acceptance of the updated Privacy Policy.

The "Last Updated" date at the top of this policy indicates when it was most recently revised.

13. CONTACT US

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

LUMARANA LLC
Email: hello@lumarana.com
Website: lumarana.com

We will respond to your inquiry within a reasonable timeframe.