Privacy Policy
Last updated: June 2026
The short version
What we collect
Nothing. The scan engine runs entirely on your device, and local scans make no network requests at all.
When you purchase through the Microsoft Store, Microsoft collects purchase data according to their own privacy policy. We receive only what is needed to fulfil your order — we never receive your full payment details.
Cloud drive connections
When you connect a cloud drive (OneDrive, Dropbox — Google Drive arrives in v1.1), LumaDisk signs in with that provider using OAuth and reads your files so it can map them in the sunburst.
The sign-in uses PKCE and runs entirely on your device — your credentials and access tokens never leave your machine, and your cloud data is never routed through or stored on a LumaDisk server. The connection is strictly between your computer and your provider. You can disconnect a drive at any time to remove the stored token, and you can revoke LumaDisk's access from your provider's account settings.