Privacy Policy - LumaClue
LumaClue works fully offline. It has no account, advertising, analytics, cloud sync, internet access, or developer server. Photos and case data stay on the device unless you deliberately export or share a file.
1) Information you choose to use
LumaClue accesses only photos that you select with Android's system photo picker. It does not scan or index your photo library and does not request broad photo-library access.
For a case, the app may process and store the following in its private app storage:
- the selected photo and an optional reference photo;
- embedded image metadata, which may include capture time, device and exposure details, rights fields, and GPS coordinates when those fields exist in the file;
- locally generated hashes, comparison measurements, screening signals, regions, overlays, and report data; and
- case names, user-written notes, timestamps, and local app settings.
2) How information is used
The selected files are copied into app-private storage and processed on the device. LumaClue uses their bytes and metadata to generate local screening observations, image hashes, signal overlays, and optional reference comparisons. These observations are informational screening aids and are not proof of authenticity, origin, authorship, or editing.
3) Collection, transmission, and sharing
LumaClue does not collect, upload, sell, rent, or transmit photos, metadata, notes, analysis results, identifiers, or usage data. It includes no advertising or analytics SDK. No developer-operated server receives app data.
Information leaves the app only when you deliberately export or share it. The destination app or service you choose then handles that copy under its own privacy terms.
4) Exports and temporary files
- Annotated PNG and PDF: written directly to the destination you select through Android's system document picker.
- JSON report: created temporarily in the app's private cache and offered through Android's share sheet. The temporary file is scheduled for deletion after approximately 10 minutes. Stale share files older than approximately one hour are also cleaned up.
LumaClue does not upload exported files. A receiving app may retain or transmit a file after you choose to share it.
5) Retention, deletion, and backup
Case photos, metadata, notes, and analysis records remain in private local storage until you delete the case, clear the app's data, or uninstall LumaClue. Case records and case images are excluded from Android backup.
Case deletion uses a rollback-safe local process: private image files are staged for deletion, the case record is removed, and the staged files are then erased. If record removal fails, the staged files are restored so the case is not left silently incomplete. Any abandoned deletion staging is cleaned on a later app start.
6) Permissions and device access
LumaClue requests no runtime permissions and does not declare Android internet or network-state access. Android's system photo picker grants access only to the items you select. Android's document picker and share sheet control destinations for files you choose to export or share.
7) Feedback and external apps
The feedback action opens a pre-addressed mailto: draft in an external email app. LumaClue does not send the message itself. Your email provider and chosen email app handle any message you decide to send. Optional website and store links open in external apps.
8) Security
LumaClue minimizes exposure by keeping case processing and storage on the device, using app-private files, and sharing temporary files through scoped Android content access. Device security and any destination you choose for an export also affect the security of your data.
9) Children's privacy
LumaClue is a general-purpose utility and is not directed specifically to children under 13. It has no accounts, social features, public profiles, or user-generated-content service.
10) Changes to this policy
If LumaClue's data practices change, this policy will be updated and the effective date above will be revised.
11) Contact
Developer: Saifullah Ahad
Privacy contact: www.saifullah.ai@gmail.com