LL
No public evidenceLumos Labs and GDPR
CertReports found no public GDPR evidence for Lumos Labs as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 26 Oct 2016
- Expires or valid through
- 1 Jul 2027
- Scope
- Types of personal data processed Lumos Labs processes personal data relating to users of the Lumosity services, website visitors, and subscribers, invited family-plan members, research participants as applicable. The categories of personal data may include: 1. Identifiers and account information, such as name, email address, username, account ID, login/authentication credentials, IP address, device identifiers, and third-party account identifiers where a user chooses to authenticate through a third-party service. 2. Device, internet, and network activity information, such as browser type, operating system, device type, app version, carrier or network information, 3. Lumosity activity and performance data, such as games played, training activity, scores, progress, preferences, and other data generated through use of the services. 4. Commercial, subscription, and transaction information, such as plan, subscription status, purchase history, renewal/cancellation status, transaction identifiers, and limited billing metadata. Payment-card and payment-method processing may be handled by payment processors. 5. Approximate location information, such as country, region, or other general location inferred from IP address or user-provided location . 6. Demographic or profile information voluntarily provided by a user, such as date of birth, gender, education level, location, or similar survey/profile responses. 7. Social-login or third-party platform information, where a user elects to connect or authenticate through a third-party service, such as profile identifiers and other information made available by that service based on the user’s settings and permissions. 8. Cookie, analytics, advertising, and tracking information, such as cookie identifiers, pixel or similar technology data, ad interaction data, and information used to measure, personalize, or improve advertising and service performance. 9. Security, fraud-prevention, and bot-detection data, including data used to protect accounts, detect abuse, and verify that interactions are not automated. 10. Research-related information, as applicable, including survey responses, study participation data. Purposes of processing Lumos Labs processes personal data for the following business and operational purposes: 1. Account registration, authentication, security, and account management. 2. Providing, operating, maintaining, and personalizing the Lumosity services. 3. Tracking training activity, performance, progress, and service usage. 4. Processing purchases, subscriptions, renewals, refunds, and related billing operations. 5. Providing customer support, service messages, transactional notices, and account communications. 6. Sending marketing communications where permitted and honoring communication preferences. 7. Measuring, personalizing, and improving advertising and marketing performance. 8. Analytics, reporting, testing, debugging, service improvement, and product development. 9. Security, fraud prevention, abuse prevention, bot detection, and legal compliance. 10. Protecting Lumos Labs’ rights, users, services, and business operations. 11. Conducting cognitive science research and related studies, where applicable and subject to appropriate permissions and safeguards. Types of data subjects Personal data may be processed in relation to: 1. Individuals who register for using Lumosity services. 2. Visitors who access Lumosity websites or services without creating an account. 3. Purchasers of Lumosity premium subscription, including invited members in the family-plan subscription. 4. Individuals who contact customer support or otherwise communicate with Lumos Labs. 5. Research participants, where applicable.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Lumos Labs, Inc.: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 283dc29362 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Lumos Labs GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.