Privacy Policy
Last updated: June 2026
The short version
What we collect
Nothing. The scan engine runs entirely on your device, and local scans make no network requests at all.
When you buy LumaDisk, the storefront handles the transaction: Microsoft for Microsoft Store purchases, and Paddle, our merchant of record, for direct macOS purchases. Each collects purchase data according to their own privacy policy, and retains it under that policy after your order is complete. We receive only what is needed to fulfil your order, such as the email address your licence is sent to, and never your full payment details. To see or delete the record a storefront holds, contact that storefront directly, since we do not control it.
Cloud drive connections
When you connect a cloud drive (OneDrive, Dropbox, with Google Drive coming soon), LumaDisk signs in with that provider using OAuth and reads your files so it can map them in the sunburst.
The sign-in uses PKCE and runs entirely on your device, so your credentials and access tokens never leave your machine, and your cloud data is never routed through or stored on a LumaDisk server. The connection is strictly between your computer and your provider. You can disconnect a drive at any time to remove the stored token, and you can revoke LumaDisk's access from your provider's account settings.