Privacy Policy

1. Overview

Lumos ("we," "our," or "the app," distributed under the App Store name "LumosFlash") is a camera and photo-editing application for iOS. Your photos are your business, not ours. This policy explains what data we collect, why, and how we protect it.

The short version: photos and videos never leave your device unless you explicitly upload a LUT to LUT Cloud. We don't run ads, don't sell data to anyone, don't use cross-app advertising trackers, and don't link analytics events to your real identity.

2. What We Do Not Collect

• Your photos and videos — every capture and edit happens on-device, and exports save only to your own Photo Library
• Your location, contacts, calendar, messages, browsing history, or microphone audio outside of video recording
• The Apple advertising identifier (IDFA) — we do not link to AdSupport.framework, do not present an App Tracking Transparency prompt, and do not participate in third-party ad networks
• Your real email address, even when you sign in with Apple, unless you choose to share it
• Any data from other apps on your device

3. What We Do Collect

Anonymous Firebase Account ID. On first launch we create an anonymous account in Firebase Authentication so the app has a stable identifier to attach community features to (downloads, future per-account state). This identifier is a random string — it contains no personal information and cannot be linked back to you by anyone other than us.

Apple Sign-In (optional). If you choose to sign in to upload LUTs or moderate community content, Apple sends us a stable user identifier and the display name you select. Your real email address is hidden unless you choose to share it. Signing in upgrades the anonymous account in place — the same identifier continues to be used.

Crash and error diagnostics. Firebase Crashlytics receives anonymous crash reports including stack traces, device model, OS version, and the build of the app that crashed. These reports are tied to a Crashlytics installation ID, not to your Lumos account, and never include photo data, edit history, or identifiers.

Product usage events. Firebase Analytics records aggregate usage events — for example, "an onboarding screen was shown" or "the paywall was viewed." Events are listed in source code as AnalyticsEvent in the app. We do not log photo content, LUT cube bytes, edit values, your Apple identifier, or your email address. Firebase Analytics is configured with IDFA association disabled. You can turn analytics off in Settings → Privacy → Analytics inside the app.

Purchase and subscription records. When you buy a Lumos Pro subscription or lifetime license, the App Store handles the actual transaction. Apple sends us (through RevenueCat, our subscription infrastructure provider) a receipt confirming what you bought, when it renews, and which country you bought it from. We never see your credit card, Apple ID password, or billing address.

LUT Cloud uploads. If you upload a custom LUT, the .cube file (compressed), a JPEG preview image, your chosen LUT title and description, and your account identifier are stored in Firebase Cloud Storage and Firestore. Other Lumos users can then browse and download your LUT. Reports filed against community LUTs are also stored in Firestore.

Local app preferences. Settings such as the active recipe, grid overlay, aspect ratio, default flash mode, and your free-trial / Pro entitlement cache are stored on-device using iOS UserDefaults. They are never transmitted off the device.

4. Camera, Microphone & Photo Library

Lumos requires camera access to function as a camera app. Microphone access is requested only when you start recording a video so the recording has audio. Photo Library access is requested when you save a capture, browse your library for editing, or import a LUT. We never access your camera or microphone in the background. Capture happens only while the app is visible and active.

Photos and videos you capture are written directly to your iOS Photo Library and the app's own sandboxed drafts folder. Nothing is uploaded.

5. Purchases & Subscriptions

Lumos Pro is sold as auto-renewable monthly and annual subscriptions and a one-time lifetime license through Apple's In-App Purchase system. The legal and billing relationship for the transaction is between you and Apple — Apple is the merchant of record.

We use RevenueCat as our subscription infrastructure provider. RevenueCat receives, from Apple's StoreKit, a copy of your purchase receipt so the app can determine whether your Pro entitlement is currently active. Per RevenueCat's privacy policy, this includes: a random app-user identifier (we pass your Firebase user ID), the country code on your Apple account, the product you purchased, transaction and expiration dates, and limited device metadata (model, OS version, app version) used for fraud prevention. See RevenueCat's Privacy Policy for their full disclosures.

6. Third-Party Services

We rely on the following processors, all under written data-processing terms:

• Firebase Authentication — anonymous and Apple Sign-In account management. Firebase Privacy
• Firebase Cloud Firestore & Cloud Storage — stores LUT Cloud content, reports, and configuration documents.
• Firebase Analytics — aggregate product usage events (IDFA association disabled).
• Firebase Crashlytics — anonymous crash reports.
• RevenueCat — subscription receipt validation and entitlement state. RevenueCat Privacy
• Apple App Store / StoreKit — payment processing for In-App Purchases.

We do not use Google Analytics for Web, Facebook SDK, advertising SDKs, attribution SDKs, or any cross-app tracking SDK. We do not sell, rent, or trade personal data to any third party.

7. Data Retention

• Crash reports: retained 90 days, then deleted.
• Analytics events: retained per Firebase Analytics' default of 14 months, then aggregated and deleted.
• Account & uploaded LUTs: retained until you delete your account or individual uploads. Deleting a LUT removes the cube file, preview JPEG, thumbnail, all associated report records, and the Firestore document.
• Subscription receipts (RevenueCat): retained for the life of the entitlement plus the period required by tax and audit law (typically up to seven years).
• On-device preferences: persist until you delete the app.

8. Children's Privacy

Lumos is rated 4+ on the App Store but is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us and we will promptly delete it.

9. Your Rights

Regardless of where you live, you have the right to:

• Delete your account and all associated LUT uploads at any time from Settings → Account → Delete Account
• Turn analytics off in Settings → Privacy → Analytics
• Revoke camera, microphone, or photo library permissions in iOS Settings
• Cancel a Pro subscription in iOS Settings → Apple ID → Subscriptions (Apple controls the billing)
• Request a copy of any data we hold about you by emailing us
• Opt out of Crashlytics by disabling "Share with App Developers" in iOS Settings → Privacy & Security → Analytics & Improvements

If you are a resident of the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, or CCPA — including the right to access, correct, port, and delete your data, and the right to lodge a complaint with your local data protection authority. Email us to exercise any of these rights.

10. Security

All Firebase traffic is sent over TLS. LUT Cloud uploads are validated against server-side rules that bind the uploader identity, content type, and file size. RevenueCat and StoreKit communicate over Apple-secured channels. We follow industry-standard practices, but no system is perfectly secure — if you discover a vulnerability, please contact us so we can fix it.

11. Changes to This Policy

We may update this policy as the app evolves. Changes appear here with an updated effective date. Material changes — such as a new category of data collection — will be surfaced in-app before taking effect. Continued use of the app after a change constitutes acceptance.

12. Contact Us

Questions about this policy, your data, or a deletion request: