Privacy

Updated October 19, 2026

Lumi records your screen and audio and keeps all of it on your Mac. This page lists every time Lumi uses the network, what it sends, and what our license service keeps.

What you capture stays on your Mac

Recordings, transcripts and the index live in one folder, by default ~/Library/Application Support/Lumi. You can move it in Settings. Lumi never uploads them, and nothing about what you captured leaves your Mac. It's yours. Delete the folder and it's gone.

When you connect an AI client over MCP, it gets the excerpts it asks for. What happens to them after that is up to that client and its provider.

What Lumi sends

Lumi makes three kinds of network request.

License checks go only to Lumi's license service at lumimac.app. This is everything they carry about you or your Mac:

• your license key
• the activation ID the service gave this Mac
• when you activate, a name for the Mac: "Mac", or one you type. Never your Mac's hostname.
• during a purchase you start in the app, a random single-use code that links it to this Mac

Each check also names the signing keys built into your version of Lumi, so the service signs its answer with one your copy can verify. They are the same on every Mac running that version.

No hardware IDs, no usage data, nothing about what you captured. Lumi sends them when you activate or deactivate, once a day while you're licensed, when you open Manage subscription, and while a purchase you started in the app confirms. The trial sends nothing. If your Mac is offline, Lumi keeps recording for up to 14 days after its last successful check.

The update check asks github.com once a day for the newest release tag. The request carries nothing but itself: no account, no machine identifier, no usage. Turn it off in Settings → About → Check for updates automatically. Check Now in the same tab still sends the one request when you press it.

Apple's speech model downloads once for the language you choose. Speech is then transcribed on your Mac.

Paying

Lumi is sold through Link: Stripe, trading as Link, is the merchant of record. Your browser sends your payment details straight to Stripe. They never touch the app or our server. Stripe handles them under its privacy policy.

This website

lumimac.app uses Cloudflare Web Analytics to count visits. It sets no cookies and doesn't track you across sites. We also keep daily counts of downloads and of clicks on Subscribe, with nothing about who clicked.

When you download Lumi, the site asks for your email address, so we can remind you to subscribe and tell you about major releases. It's optional: leave it blank and the download starts anyway.

What the license service keeps

• Stripe's IDs for your customer record and subscription, and the subscription's status, plan and billing dates
• a hash of each license key, never the key itself. The one exception is an encrypted copy of a new key, kept at most 3 days so the thanks page can show it to you once.
• each activation's ID and name, and when it was created and last checked in
• when a key moved to another Mac, to enforce the limit of 3 moves in 30 days
• a keyed hash (HMAC-SHA-256) of your email address, trimmed and lowercased, so key recovery sends at most one email per address every 15 minutes
• if you sign up when you download, your email address, when you signed up, and whether you confirmed

It doesn't store the email address you buy with. It handles it in passing: Stripe includes it with your purchase, the recover page sends it when you ask for a new key, and we email your key to it. Rate limits count requests per IP address, but its database and logs hold no IP addresses. The service never logs request bodies. Its logs record the route, the status and the error code.

Email

We send three emails through Postmark: your license key after you buy, a link when you ask to replace a lost key, and a link to confirm your sign-up when you give your email at download. Nothing goes to the list until you confirm.

Once you confirm, we email you a reminder to subscribe and news of major releases, also through Postmark. Each of those emails has an unsubscribe link. Click it and you get no more. If an email to you bounces or you mark it as spam, we remove you too. Open and link tracking are off on every email we send.

Postmark keeps sent messages, including your license key, for 45 days.

Deleting your data

Your captured data is on your Mac, so you delete it there. When your customer record is deleted at Stripe, the license service revokes your subscriptions, deletes your activations, moves and recovery records, and drops your customer ID. All it keeps is key hashes and the revoked subscription ID, so an old key can't be used again.

To have your sign-up removed, email support@lumimac.app. We delete your address from our list. Postmark keeps an entry that says not to email it, so nothing more is sent to you, and keeps messages it already sent for 45 days.

To have your customer record deleted, or for any privacy question, email support@lumimac.app.

This site

lumimac.app serves its own fonts and images, so loading a page sends no request to another site.