LumenPrivacy Policy
Lumen is an app for watching and requesting media on servers that you or your household run, such as Jellyfin, Overseerr, Jellyseerr, Radarr and Sonarr. This policy explains what data the Lumen app and this website handle, why, and the choices you have.
- Lumen has no accounts, no ads and no tracking. We don't sell or share your data.
- Your library, watch history, server addresses and passwords stay on your devices and your own servers.
- We receive anonymous crash reports, which you can turn off, and the purchase records needed to unlock Lumen Pro.
1. Who we are
Lumen is developed and published by João Pereira ("we", "us"). For any question about this policy or your data, write to lumen@jpereira.me.
2. Data that stays on your devices and servers
To work, Lumen stores the following on your device. It is never sent to us:
- Your server addresses, user names, passwords and access tokens. Credentials are kept in your device's secure storage (Keychain on Apple devices, Keystore on Android).
- Your library, search index, watch history, resume points, favourites and requests.
- Downloaded movies and episodes, and your settings and profiles.
When you use Lumen, it talks directly to your own servers. That exchange is between you and whoever runs those servers; we are not part of it and can't see it.
3. Data sent to the services that run Lumen
| Service | What it receives | Why |
|---|---|---|
| Sentry (crash reporting) | Crash reports and performance diagnostics: app version, device model, operating system, screen size, theme, the error and the steps that led to it, and a random ID derived from your installation. Server addresses, IP addresses, names, titles, emails and tokens are removed on the device before anything is sent, and Sentry is set not to store IP addresses. | To find and fix bugs and slow screens. Optional: turn it off in Settings › Privacy › Send crash reports. |
| Apple App Store or Google Play | Your purchase of Lumen Pro, handled under your account with Apple or Google. | To take payment and manage your subscription. |
| RevenueCat (purchase management) | The store receipt for your purchase and a random app user ID created on your device. No name or email. | To check that your subscription or Lifetime purchase is active. |
| Lumen's TMDB proxy (on Cloudflare) | Search terms and TMDB title IDs, only when you browse or search titles outside your library without Overseerr or Jellyseerr. No identifiers are sent. Cloudflare processes your IP address to deliver the request and to apply a per-minute rate limit; we don't log it. | To show posters and details for titles you might request. |
Data sent to these services is encrypted in transit. They process it on our behalf and under their own security commitments; some of them process data in the United States.
4. Device permissions
- Local network: to find your servers and your TV on your home network, and to pair a phone with a TV.
- Camera: only to scan the pairing code shown on your TV. Images are not stored or sent anywhere.
- Notifications (Android): to show download progress.
Lumen doesn't ask for your location, contacts, photos or microphone.
5. This website
lumen.jpereira.me uses no cookies, analytics or third-party scripts, and loads its fonts from this site. Cloudflare, which hosts it, processes standard request data such as your IP address to serve the pages and protect them from abuse.
6. What we don't do
- We don't show ads or use advertising IDs.
- We don't track you across apps or websites, and we don't use analytics that profile you.
- We don't sell, rent or share your data with anyone for their own purposes.
7. How long we keep it
- Crash reports and diagnostics: deleted automatically after at most 90 days.
- Purchase records at RevenueCat: for as long as you have Lumen Pro, and afterwards for as long as tax and accounting rules require.
- TMDB proxy: nothing is stored; rate-limit counters expire after one minute.
8. Deleting your data
Lumen has no accounts, so we can't look you up by name or email. Here is how to remove each kind of data:
- Everything on your device (server details, passwords, downloads, history, settings): delete the Lumen app, or remove a profile in Settings.
- Crash reports: turn off Settings › Privacy › Send crash reports. Reports already sent are deleted automatically within 90 days.
- Your purchase record at RevenueCat: email lumen@jpereira.me with the subject "Delete my Lumen data" and your store order number (Google Play orders start with "GPA."; Apple's order ID is in your receipt email). We delete the matching customer record within 30 days and confirm by email. A later "Restore purchases" creates a new record.
We keep only what the law requires us to keep, such as transaction records for tax purposes. Apple and Google keep their own records of your purchases under their privacy policies.
9. Your rights
Depending on where you live, including under Brazil's LGPD and the EU and UK GDPR, you may have the right to access, correct, delete or port your data, to object to or restrict its processing, and to withdraw consent. Write to lumen@jpereira.me and we'll answer within 15 days. You can also complain to your data protection authority, such as the ANPD in Brazil.
We process crash reports based on our legitimate interest in keeping the app working, which you can object to by turning them off, and purchase records to perform our contract with you.
10. Children
Lumen is not directed to children under 13, and we don't knowingly collect data from them.
11. Changes to this policy
If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app's release notes.