Lukio Terms and Privacy

Last changed: October 11, 2026

This page gives the rules for using Lukio and says what Lukio does with information. When you accept the Terms and Privacy Notice in Lukio, you accept these terms.

Terms of use

Who provides Lukio

Lukio LLC (in formation) provides Lukio. Lukio is an app you install on your computer. Organizations use it to run their health programs and report on them.

Who can use Lukio

Lukio is for the people your organization asks Lukio LLC's support team to set up. Each person uses their own account. Lukio LLC's support team gives each account a role, like coach or data specialist. It turns an account off when your organization asks.

People in your organization's classes can use the My Lukio app on their own phones, when staff invite them. The My Lukio terms and privacy, the last part of this page, are for them.

What you agree to

Use Lukio only for your organization's work.
Open only the records you need for your work.
Do not share your password, your recovery codes or your authenticator app.
Lock your computer when you leave it.
Keep participant information only in Lukio, on your program's papers and in files Lukio makes. You send these files yourself. Send each one only where it belongs, like the CDC file to the CDC.
Do not send participant information by text, chat or email.
Do you think someone used an account or a record the wrong way? Tell Lukio LLC's support team and the person in charge of your program right away.

How to reach support

In Lukio, click Contact Sean at the top of the screen. Type your message and click Send.
When Lukio shows an error, click Tell Sean. Your message starts with what went wrong.
When you send a message, Lukio LLC's support team gets an email and a phone alert. They give your name, email and phone number, your organization and your role. They also name the page you were on and any error. They do not include your message, so participant information stays in Lukio.
If you cannot use Lukio, email support@penji.cloud. Keep participant information out of email.

Privacy

Participant information

Participant information is what your organization enters about the people in its programs, and what participants send from the participant app. It includes registrations, class rosters, attendance, weights, check-ins and the forms you upload.

How Lukio protects participant information

Sign-in. You sign in with your password and a 6-digit code from an authenticator app. After that, you open Lukio with your password.
Lock. Lukio locks after 15 minutes without use. Without internet, it locks after 4 hours without use. You enter your password to continue.
Roles. Lukio sends each person only the records their role allows. A coach sees the classes they teach, with each person's attendance and weights. A coach also sees the people they register. A data specialist or a program coordinator sees their organization's records.
Participants. The participant app sends each participant only their own information.
Hubs. If your organization reports to a hub, staff at the hub see its reports. Some hub staff also see its records.
Lukio LLC's support team. The support team can see every organization's records. It uses that access to set up accounts, help people and fix problems.
A list of changes. Lukio keeps a list of the changes people save to participant records. Each entry shows who saved it, when, and which part changed. Lukio also records each CDC file and each printed session sheet. When a coordinator makes a file of a participant's record, Lukio records that too.
Google Cloud. Lukio stores its database and files on Google Cloud in Oregon, in the United States. Google Cloud encrypts them, which means it stores them in a secret code. They also stay encrypted while they travel over the internet. Lukio makes a backup copy of its database every day.

Your computer

Your computer keeps a copy of the records Lukio shows you. This lets you work without internet. The copy stays after you sign out. Anyone who uses your computer login could see it. Use your own computer login, and lock your computer with a password.

Without internet, Lukio opens with your password for up to 60 days. It opens even if Lukio LLC's support team has turned your account off.

What Lukio keeps and why

About you, to run your account and keep it safe:

your name and email, and your phone number if Lukio has it
your ZIP code, time zone and coach ID, if Lukio has them
your profile photo, if you add one
your organization, your role and the classes you work with
the times you sign in, and when you last used Lukio
your computer's internet address and type, each time Lukio's server does something for you
whether you set up an authenticator app, and when you last changed your password
a scrambled copy of each recovery code, to check a code when you use it
scrambled copies of your past passwords, so you do not use one again
your settings, such as language and text size
when you accepted these terms, and which version
your messages to support, with the page you were on and any error

To change your email, click Settings, then Email. To change your name or close your account, ask Lukio LLC's support team.

About participants, to run your organization's programs and reports:

what your organization enters about them
the forms and lists you upload, and what Lukio read from them
the CDC files Lukio makes
the list of changes

Who owns the records

Your organization owns the records you enter. Lukio uses them only:

to run Lukio for your organization, keep it safe, help you and fix problems
to make your programs' reports and files, like the CDC file
to manage Lukio as a business and meet its legal duties, as HIPAA allows
when the law requires it

Lukio never uses them for research, marketing or publishing, or to train AI.

If your organization signed an agreement with Lukio LLC, that agreement comes first.

Your organization, any hub it reports to, and Lukio LLC's support team can see records. Lukio stores records on Google Cloud, under a HIPAA agreement. HIPAA is the US health privacy law.

Google Cloud's Gemini AI reads the forms and lists you upload. It reads them inside the United States. Check what it read before you save it. Lukio saves nothing it read until you save it.

Lukio never sells records. It gives them to no one else, unless the law requires it.

Google Calendar

If you connect Google Calendar in My Lukio, Lukio asks Google for one permission: to make a calendar named "Lukio" in your Google account and to add, change and remove the events in it. Lukio puts your class sessions there. Each event carries the class name, the session number out of the total, your coach's first name and last initial, your coach's note for the session when there is one, the day and time, the place and its address or the meeting link with its meeting ID, passcode and call-in number, and a link that opens the session in My Lukio. Lukio updates the events when your coach moves or cancels a session. Lukio cannot see, change or delete any other calendar or event in your Google account. Lukio keeps the access Google gives it in Google Cloud Secret Manager and uses it only for this. It never sells or shares it. "Remove from my calendar", or deleting your account, deletes the Lukio calendar and that access.

Lukio's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

How a participant can see, fix or remove their information

Participants sign in to My Lukio on their phones. In My Lukio, a participant can delete their own account. A participant can also ask the organization that runs their program to see, fix or remove their information.

To see it, a program coordinator makes a file of the participant's registration record.
To fix it, staff with the right role fix the record in Lukio. The change goes on the list of changes.
To remove it, the organization asks Lukio LLC's support team.

Changes to these terms

When these terms change, the "Last changed" date at the top of this page changes. The next time you open Lukio with internet, it shows the new notice. You accept it before you continue.

My Lukio terms and privacy

These terms start on October 11, 2026.

Who these terms are between

These terms are for a person in a class who uses the My Lukio app on their own phone. Here, "you" means that person.

"Your organization" means the organization that runs your class. Its name is in the summary above these terms.

Lukio LLC (in formation) makes and runs Lukio, the software behind My Lukio.

These terms are between you, your organization and Lukio LLC. When you tap I agree, you accept them.

You must be 18 or older to use My Lukio. A family member or a friend may help you read these terms and use the app. The account stays yours.

Your organization decides, and Lukio LLC works for it

Your organization decides what information your class collects and how it is used. Lukio LLC runs My Lukio for your organization. It follows your organization's instructions, under a written agreement.

If your organization is covered by HIPAA, the US health privacy law, your information is protected health information. Lukio LLC is your organization's business associate. That means HIPAA lets Lukio LLC use your information only to do this work for your organization. Your organization's own Notice of Privacy Practices tells you your rights under HIPAA. These terms stand beside that notice. If they differ, your organization's notice comes first.

If your organization is not covered by HIPAA, Lukio LLC uses your information only for your organization, as these terms say. The Federal Trade Commission's Health Breach Notification Rule also protects your information.

What My Lukio collects

From you:

your email, to send you a sign-in code
your check-ins: your weight, your activity minutes and the date
photos of your scale or your meals, if you add them
your registration answers: your name, contact details, date of birth, sex, race and ethnicity, and your answers to the health questions
your food log and your messages to your coach
your messages to Lukio support
which version of these terms you accepted, and when

From your organization:

your class, your coach and your class schedule
your attendance, and the weights your coach records at class
the registration your organization keeps for you

From your phone:

a security key for each phone you sign in on, which proves the app on that phone is yours
your phone's internet address and type, each time the server does something for you

My Lukio does not use your location, your contacts or your other apps. It has no ads and no tracking.

How your information is used

Your organization and Lukio LLC use your information only:

to run your class, so your coach can help you
to show you your own progress
to keep your organization's program records
to make your organization's class reports
to keep My Lukio safe, help you and fix problems
when the law requires it

No one sells your information. No one uses it for ads or marketing, or to train AI. No one uses it for research unless you give separate permission first.

Who sees your information

Your coach sees your check-ins, photos, food log and messages, with your attendance and weights.
Staff at your organization see your records when their work needs them. Each person sees only what their role allows.
Your organization's program partner. Some organizations work with a partner organization for training and technical support. Some of the partner's staff can see your records, only to help your organization, under its agreement with your organization.
Lukio LLC. Lukio LLC's support team can see records, only to set up accounts, help people and fix problems.
Google Cloud stores your information in the United States, under a HIPAA business associate agreement.
Gemini AI, from Google Cloud, reads the paper forms staff upload, inside the United States. It never reads your photos.

Each of them must protect your information as well as these terms do. No one else gets it unless the law requires it, like a court order.

Class reports

Your organization reports on your class to the program that pays for it. For a National Diabetes Prevention Program class, the report goes to the Centers for Disease Control and Prevention (CDC).

The report has no name and no contact details. It lists you by a number your organization gives you. It has your age, sex, race and ethnicity, education, height, state and ZIP code. It says how you came to the class, how the class is paid for, and how your risk was found. For each session, it has the date, your weight and your activity minutes.

The CDC uses the report to recognize the class. It shares no report that shows one person. A report already sent stays with the program that pays for the class.

Your phone

Without internet, My Lukio keeps your check-ins on your phone in an encrypted copy. It sends them when you are back online.
Your phone's lock opens My Lukio. Keep your phone locked, and do not share its passcode.
If you lose your phone or give it to someone, tell your coach. Your organization can sign that phone out of My Lukio. The phone erases its copy the next time the app opens.
When you take a photo, show only the scale or the plate. Keep people and your home out of the photo.
If you add your class times to your phone's calendar, that calendar gets a copy of them.

Your choices

Using My Lukio is your choice. You can take your class without it. Your coach records your weight and attendance at class.

You can stop at any time. To take back your permission, delete your account or tell your coach. My Lukio then collects nothing new from you.

Your rights

Ask your organization, through your coach or its office:

to see your records, or to get a copy
to fix something that is wrong
for a list of who your records were shared with
to remove your records

Your organization answers within 30 days. It can take 30 more days, one time, if it tells you why. Some records cannot be removed, because the law says your organization must keep them. Your organization tells you which ones.

You can also write to Lukio LLC at support@penji.cloud. Lukio LLC sends your request to your organization and helps it answer.

If your organization is covered by HIPAA and you think it did not protect your privacy, you can complain to your organization or to the US Department of Health and Human Services. No one may treat you worse for asking or for complaining.

Delete my account

In My Lukio, open your profile and tap Delete my account.
Or email support@penji.cloud from the email you sign in with, and write "Delete my account." Lukio LLC deletes it within 30 days and tells you when it is done.

Deleting your account ends your sign-in at once. It removes the entries and photos on your phone that you have not sent.

What you already sent stays with your organization: your check-ins and their photos, your food log, your messages to your coach, and your registration, attendance and weights. Your organization keeps them under its own rules and the law. To have them removed, ask your organization. Nothing is removed from a class report already sent.

Keeping records

Your organization keeps its program records as long as its rules and the law require. For a class paid for by a federal grant, that is at least 3 years after the grant's final report. It is longer while an audit or a legal claim is open.
Lukio LLC keeps your organization's records for it while your organization uses Lukio. When their agreement ends, Lukio LLC returns the records or deletes them.
Removed records leave Lukio LLC's backup copies within 6 months.
Server logs are kept up to 30 days. Security logs, which show who did what, are kept up to 400 days.

Keeping it safe

Your information is encrypted where it is stored and while it travels over the internet.
You sign in with a code sent to your email, or a code your coach shows you. Sign-in codes never come by text message.
Each person at your organization sees only what their role allows. Lukio keeps a list of every change to your records: who made it, and when.

If something goes wrong

If someone who should not have your information sees it or takes it, you will be told within 60 days after it is found. Lukio LLC tells your organization as soon as it can.

If your organization is covered by HIPAA, your organization tells you by letter, or by email if you agreed to email.
If it is not, Lukio LLC and your organization tell you by email and in My Lukio. They also tell the Federal Trade Commission, as its rule requires.

Keep your email up to date with your coach, so the notice reaches you.

Health advice

My Lukio does not give medical advice. For questions about your health, ask your doctor.

The law that applies

The laws of the US state where you take your class, and US federal law, apply to these terms. If one part of these terms cannot apply, the rest still does.

When these terms change

My Lukio shows the new terms the next time it opens with internet. You read them and tap I agree before you continue. My Lukio never collects a new kind of information, or uses it in a new way, until you agree.

Questions

About your class or your records: ask your coach or your organization.
About the app: in My Lukio, tap Need help?, or email support@penji.cloud.