Lume

Privacy Policy

Effective November 9, 2026

Lume is a camera app for iPhone, made by PKXD Pty Ltd in Australia ("we", "us"). This policy explains what Lume collects, why, and the choices you have.

The short version

• Your photos, videos, sound and location stay on your devices. We never receive them.
• Lume has no account. It never asks for your name, email address or phone number.
• Lume sends anonymous usage counts so we can see which features people use. You can turn this off.
• When a capture fails, or Lume crashes, freezes or runs slowly, Lume sends an anonymous error report so we can fix the problem. When you send feedback, your message goes the same way.
• Lume doesn't track you, show ads, or sell or share your data.

No account

You don't sign in to use Lume. We don't have a list of our users, and nothing Lume sends us is tied to your name, your Apple Account or your contact details.

Your photos, videos and sound

Lume uses the cameras and microphones only to take the photos and videos you ask for. It saves them to your Photos library, or to an external drive if you choose one. Everything Lume does with the picture and sound happens on your iPhone, including Live Text, QR code detection, focus and exposure aids, and long exposures. Lume never uploads your photos, videos or audio.

Photos access. Lume asks for full access to your Photos library so its gallery can show your photos and videos and let you share, favorite or delete them. You can choose limited access or "Add Photos Only" instead: Lume still saves everything you shoot, and its gallery shows less. Lume reads your library only on your iPhone.

What Lume writes into your files. Like most cameras, Lume records how each photo and video was made: the camera settings, "Lume" and its version, the mode, and the name of the custom setting or monitoring LUT you were using. Videos also note the iPhone model and the lens. If you allow location, the file also says where it was taken. This information travels with the file when you share it, as it does with Apple's Camera app.

QR codes and links. Lume finds QR codes on your iPhone. A link opens only when you tap it.

Location

If you allow it, Lume adds where a photo or video was taken to the file, as the Camera app does. Lume asks for your location only while you're using it, never in the background, and never shares it: your location is never sent to us or to our service providers.

When the gallery shows a photo's details, a small map of where it was taken comes from Apple Maps, which loads that place's map from Apple.

To stop location tagging, go to Settings > Privacy & Security > Location Services > Lume on your iPhone.

The Lock Screen camera

You can open Lume from the Lock Screen and shoot without unlocking. There, iOS runs Lume in a protected space with stricter rules: it can't use the internet, can't use location services and can't look at your Photos library (its gallery shows only what you shot there). It saves your photos and videos to Photos as you shoot.

Anything the Lock Screen camera needs to send waits until your iPhone is unlocked and Lume next runs, either because you open it or because iOS gives it a moment in the background: error reports and feedback, and the anonymous capture counts described below (only if usage sharing is on). When you next open Lume, if you allowed location and Lume has a location measured within 5 minutes of a shot, Lume adds it to that photo or video. With "Add Photos Only" access, Lume can't add a location to shots that are already in your library.

Usage analytics

To learn which features people use and where Lume is slow or failing, Lume sends anonymous usage events to TelemetryDeck, an analytics service made for privacy (TelemetryDeck GmbH, Germany, with servers in the EU).

What an event says. Each event is a fixed name with a few fixed values, never text you typed. Numbers are sent as ranges, such as "1 to 5 minutes". Lume sends events for:

• Opening Lume: that a session started, and how Lume was opened (its icon, the Lock Screen, Camera Control, the Action button, a shortcut, a widget or a link), plus how long the camera took to show a picture, as a range.
• Getting started: how far you went through the tour and walkthroughs, which info cards you opened, and whether you allowed each permission (for example "limited" or "denied").
• Using the camera: which modes and functions you use, changes to the functions row, and custom settings being saved, applied, renamed or deleted (never their names). Once a day, the main settings of each mode (such as file format, resolution and whether zebras or the level are on) and how many custom settings you have.
• Taking photos and videos: for each photo, burst, video, Dual take or long exposure, its settings (mode, front or back camera, lens type, format, resolution, codec, frame rate, color, stabilization, Open Gate, exposure mode, flash, Live Photo, ProRAW Max, Dual's Camera B output, and whether it went to Photos or a drive) and, as ranges, a video's length, a burst's frame count or a long exposure's shutter time.
• Reliability: that a save failed or a take was interrupted (by type), that iOS reset the camera, that Lume paused or dimmed to cool down, that storage ran low, and how a background save retry went.
• The gallery: that it was opened, that details were viewed, and how many items were deleted, as a range.
• Apple Watch: that Lume Remote opened, and which button was used (photo, record, timer or mode).
• Feedback: that feedback was sent (not the message).
• Subscription: that the subscription page was shown and from where, and that a free trial started, a trial became paid, or Founders Edition was bought. Never a price, an order number or your Apple Account.

What TelemetryDeck adds. TelemetryDeck's software adds some general facts to every event: Lume's version; your iPhone model and iOS version; your language, region and time zone settings; screen size and orientation; light or dark appearance and a few accessibility display settings (such as text size, Bold Text and Reduce Motion); whether Lume came from the App Store or TestFlight; and simple usage counts (the date you first used Lume, how many sessions and days you've used it, and how long sessions last).

The anonymous identifier. So TelemetryDeck can tell how many different people use a feature, it makes a one-way code from an identifier iOS gives Lume on your iPhone, and TelemetryDeck scrambles it again on its servers. The code can't be turned back into the identifier, isn't your Apple advertising identifier, and can't recognize you in other apps. Deleting Lume and installing it again gives you a new one.

Never sent: text you type, custom setting names, file names, photos, videos, audio, location, contacts, your name or your Apple Account. TelemetryDeck says it doesn't store IP addresses.

Your choice. Usage sharing is on when you install Lume. To turn it off, go to Lume > Settings > Privacy and turn off "Share anonymous usage data". It stops at once, including the counts the Lock Screen camera keeps for later.

How long. Because these events can't be connected to you, TelemetryDeck keeps them to show long-term trends, and we can't find or delete one person's events.

Error reports and feedback

When something goes wrong, Lume shows a message, and in many cases sends an anonymous error report to Sentry (Functional Software, Inc., data stored in the EU) so we can find and fix the problem.

When a report is sent.

• Automatically, when a capture fails: a photo wasn't captured, a recording couldn't start or was interrupted, a photo or video couldn't be saved or checked, the camera couldn't start or restart, a video was recorded without sound when it should have had it, or Lume hit an error it didn't recognize. Also automatically when Lume quits unexpectedly, freezes or runs slowly (see Crash reports below).
• Only when you tap Send error log, for problems caused by your iPhone's state or settings, such as missing permissions, a full storage, a drive problem or the iPhone being too hot.
• When you use Send feedback in Lume's Settings.

What a report contains.

• What went wrong: the kind of problem, the error code from iOS, how far the photo or video had got, and how many milliseconds each step took before it failed.
• Lume: its version and build, and whether the problem happened in the app or on the Lock Screen.
• Your iPhone: its model and iOS version.
• The camera: the mode, front or back camera, lens, the photo and video settings in use (such as format, resolution, codec, frame rate, color and ProRAW options), whether the recording was going to Photos or a drive, and how many photos were still being captured or saved.
• Exposure: the shutter speed, ISO, aperture and exposure adjustment at the time, the anti-flicker setting, and what each camera reported it could do for anti-flicker.
• Your iPhone's condition: how hot it is, how hard the camera is working and why, whether Low Power Mode is on, the battery level rounded down to the nearest 10 percent, whether it's charging, and how much memory was free.
• How Lume ran: hardware button presses iOS didn't pass to Lume (numbers and fixed labels only). With feedback, also how long Lume took to launch, this time and your last few launches, including Lock Screen launches.

Feedback. Send feedback includes your message (up to 4,000 characters) with the same report. It's anonymous, so we can only reply if you include a way to reach you, such as an email address, in the message. If you do, we use it only to reply to you. Please leave out anything you don't want us to read.

Never in a report: photos, videos, audio, location, file or drive names, items in your Photos library, QR code contents, contacts, your name or your Apple Account. Lume tells Sentry not to record your IP address for these reports.

If you're offline. A report waits on your iPhone and is sent when Lume is next online. Reports that can't be sent within 7 days are deleted from your iPhone unsent.

Your choice. Feedback is only ever sent when you tap Send. Automatic error reports can't be turned off, because they contain nothing that identifies you and are how we find capture failures that people don't report.

How long. Sentry keeps reports and feedback for 90 days, then deletes them.

Crash reports and TestFlight

If Lume quits unexpectedly, freezes or runs slowly, iOS gives Lume a technical report when it next runs, and Lume sends it to Sentry as an automatic error report. It says what kind of problem it was and where in Lume's code it happened (code addresses and the names of the code libraries involved), with error codes, how long things took, Lume's version and build, your iPhone's model and iOS version, and whether Low Power Mode was on. It contains nothing you shot or typed and nothing that identifies you. Separately, if you've turned on Share With App Developers in Settings > Privacy & Security > Analytics & Improvements, Apple may share crash reports and usage data from your iPhone with us, under Apple's privacy policy. If you test a beta through TestFlight, Apple shares the feedback, screenshots and crash reports you choose to send, with the email address of your TestFlight account, under Apple's TestFlight terms.

Apple Watch

Lume Remote, the Apple Watch app, talks directly to Lume on your iPhone. While the remote is open on your watch and Lume is open on your iPhone, your iPhone sends the watch a small, low-resolution copy of the viewfinder and the camera's status, and the watch sends back the buttons you press. None of this is stored or sent anywhere else, apart from the anonymous counts described in Usage analytics.

Subscriptions and purchases

Apple handles every purchase. We never see your payment details, your name or your Apple Account. Lume checks with Apple, on your iPhone, whether you have an active subscription or Founders Edition. If you ask Lume to remind you before your free trial ends, it schedules a notification on your iPhone 2 days before the trial ends; nothing is sent to us.

What stays on your iPhone

Lume's settings, custom settings, imported LUTs, its record of what you shot, and its local diagnostic logs are stored only on your iPhone. Deleting Lume deletes them. The photos and videos you saved stay in Photos or on your drive.

Who we share data with

We don't sell, rent or share your data. Lume sends data only to the two services above, which process it for us: TelemetryDeck (usage analytics) and Sentry (error reports and feedback). We may disclose information if the law requires it.

Children

Lume is rated 4+ on the App Store and isn't directed at children. Lume doesn't ask anyone for personal information, and we don't knowingly collect personal information from children under 13 (or the minimum age in your country).

Your rights

Depending on where you live, you may have the right to ask what personal information we hold about you, to correct it, or to delete it. Because what Lume sends isn't connected to you, we usually can't find one person's data. You can always turn off usage sharing in Lume's Settings, or delete Lume. For any question or request, email us at the address below. If you're unhappy with our answer, you can complain to your local privacy regulator (in Australia, the Office of the Australian Information Commissioner).

Security

Lume sends data only over encrypted connections (HTTPS). Its error report sender uses no cookies, keeps no logins and refuses to be redirected to another address.

Changes to this policy

If this policy changes, we'll update the date at the top. For a change in what Lume collects, we'll also say so in the app's update notes.

Contact

PKXD Pty Ltd, Australia
Email: [email protected]