Privacy

This page covers the items that interact with our system: a Lumit account, Lumit Pro, previews, and the iPhone app.

If you never sign in and never open a preview, no information about you is ever stored, and you can use Lumit as normal. Lumit is largely maintained by Mack Reed, who is responsible for what is stored (the data controller), and can be reached at hello@lumitlab.com.

What we store

Your email and name. Your name (or nickname) is shared with others when commenting or working in shared projects.
How & where you sign in. The option you used for sign-in, and the names of the devices used.
Your subscription. Whether you have Pro, and when it renews. Never your card. If you buy in the iPhone app, Apple takes the payment and we keep the subscription’s ID, when it ends, and whether it was refunded.
Your phones. The phones signed in to your account, their names, and a token each for sending notifications and Live Activities to it.
What your computers are exporting. While Lumit is open and signed in with Pro, each computer’s name and its export queue: composition names, file names and progress. Never where the files are.
The settings you sync. Appearance, shortcuts, panel layout, preferences, and what you have saved.
Previews. The video you send, its comments, and the names people enter. Also the previews you save to your account, in Shared with you.
Backups. Your saved project files, and the name of the device each was saved from.
Projects kept online. Encrypted before they leave your computer. We can’t read them.
Your IP address. Only to slow down abuse, such as someone guessing passwords. It is kept for about a day.

If you open someone’s preview

You don’t need an account. We store the name you enter, your comments, drawings and pictures, any approval you give, and when you opened it, so that whoever sent the preview can see them. You can delete your own comments from the browser you wrote them in, or ask whoever sent the preview, or us.

Why we store it

To run the account and the features you asked for, which is our contract with you.
To keep the servers safe from abuse, which is a legitimate interest of ours.

Nothing is sold, used for adverts, or used to track you. This website has no analytics. An account is for people aged 13 or over, and we never ask for or store your age. The only emails we send are about your account, and about comments on your previews unless you turn those off.

What we never access

Your projects, your footage, or anything you export, unless you back it up or send it for review.
What passes through the relay. It is encrypted before it leaves your computer, and the relay is never given that key.
Your card. We use Paddle, or Apple in the iPhone app, for payments, we never see your details.

Our providers

Cloudflare run the servers.
Paddle for sales. We give them your email when you buy, and they hold your info under their own privacy policy.
Apple take payments in the iPhone app and deliver its notifications, under their own privacy policy. If you sign in with Apple, they tell us your email, which may be a private relay address that forwards to yours, and your name.
Discord or Google, only if you sign in with them. They tell us your email, your name, and your picture.

Where it is kept

The database and the files are kept in Western Europe. Cloudflare are a US company and answer each request from whichever of their sites is nearest you, so some of it may be handled outside the UK and the EU. That is covered by their data processing terms.

Keeping and deleting

We store an account until you delete it. Settings ▸ Account ▸ Delete account in Lumit removes all your data: the account, your phones and their tokens, what your computers were exporting, synced settings, previews and those saved to the account, backups, and projects kept online, and cancels a subscription bought from Paddle. One bought in the iPhone app is cancelled in your iPhone’s settings. Paddle and Apple keep their own record of a payment.

A sign-in that isn’t used for 60 days expires on its own.
An account whose email was never confirmed is removed after 2 days.
A preview is removed when it expires or when you delete it.
If Pro ends, a project kept online is cleared after 90 days unopened.
Cloudflare’s own logs of requests, which include IP addresses, are kept for 7 days.
What you delete stays in the database’s backups for up to 30 days.

Your rights

You can ask for a copy of what we hold, or for it to be corrected, deleted, or no longer used, at hello@lumitlab.com. We will answer within a month.

If you aren’t happy with the answer, you can complain to your data protection authority. In the UK that is the ICO.

Changes

If this page changes in any meaningful way, we will say so in the release notes.