Security at Lumidor
Your center's records include children's health information. This page explains, in plain language, how we look after it.
Encryption
Every connection between your browser and Lumidor is encrypted, and your center's data is encrypted at rest on the cloud infrastructure we run on. That applies to clinical records, session notes, consent records and uploaded files alike.
Who can see what
One center's records are never visible to another. That separation is enforced by the database itself on every table, not only by the application — so a mistake in one screen cannot expose another center's data.
Inside your center, what a person can do follows the role you give them:
- Administrators manage the center — staff, children, packages, and the privacy requests described on our DPDP page.
- Therapists work with the children on their caseload: sessions, goals, notes and home activities.
- Reception staff handle scheduling and parent access codes, without clinical records.
- Parents see their own child, and nothing else.
Backups
Your center's database is backed up daily and backups are retained on a rolling basis, so a mistake or a failure does not mean starting again from a spreadsheet.
Your data is yours
Request a complete export of your center's records at any time. If you ever leave Lumidor, we provide everything in standard formats at no charge. There is no exit fee and no hostage-taking of your clinical history.
Questions before you trust us with records?
Reasonable. Ask us anything — including the things this page does not claim.
Chat with us on WhatsApp or email hello@lumidor.app.