Privacy Policy
Applies to all versions of Lumaflip for macOS, Windows and Linux. Last updated: October 11, 2026.
In short: Lumaflip does not collect, store or share any personal data. Your photos and everything Lumaflip learns about them stay on your computer.
No data collection
Lumaflip has no analytics, no telemetry, no crash reporting service, no advertising and no user accounts. The developers receive no information about you, your photos or how you use the app.
The only network connections
- Update check (macOS). Lumaflip asks
brokoskokoli.github.ioonce a day whether a new version exists and downloads it from GitHub if you agree. Like any web request, this reveals your IP address and the app version to GitHub. You can turn automatic checks off in Settings → General. - Maps (macOS). Maps in the info panel and the folder map load only after you click “Show map” in that window. The map is provided by Apple (MapKit), so the coordinates of the area shown are sent to Apple. Your consent lasts until you close the window and is never stored.
Nothing else connects to the internet. File names, metadata, ratings and image contents are never sent anywhere.
What stays on your computer
- To show an image, Lumaflip reads that image and lists the other images in its folder. On macOS it also reads the folder's Finder view settings to show images in the same order.
- Live Text (macOS) analyses the visible image with Apple's on-device text recognition, only when you turn it on.
- Ratings and labels are written where you choose: an XMP sidecar file next to the image, the image file itself, or Finder tags.
- Thumbnails and settings are kept in the app's local cache and preferences. Images opened from archives (CBZ, ZIP, RAR, 7z) are extracted to a temporary folder that is cleaned up automatically.
- Move to Trash moves files to the system Trash, with undo. Lumaflip never deletes a file permanently unless the system cannot use the Trash and you confirm it.
- Your own actions (custom shell commands or Shortcuts) run only after you confirm them once; they can do whatever their command does.
Contact
Questions about privacy? Please open an issue on GitHub.