Privacy Policy

The LumaDisk app sends us nothing about your files. No file names, no contents, no folder listings, no scan results, and no usage statistics from inside the app. The only network activity it starts is a cloud drive you choose to connect, and that talks directly to your provider, never through our servers.

Two things around the app do collect data, and neither can see your disk. This website uses Google Analytics, and the Windows version is distributed through the Microsoft Store, which collects its own install, usage and reliability data for every app it distributes. Both are described below.

From the app itself, nothing. The scan engine runs entirely on your device, and local scans make no network requests at all. Everything below is collected by a third party, not by us.

When you buy LumaDisk, the storefront handles the transaction: Microsoft for Microsoft Store purchases, and Paddle, our merchant of record, for direct macOS purchases. Each collects purchase data according to their own privacy policy, and retains it under that policy after your order is complete. We receive only what is needed to fulfil your order, such as the email address your license is sent to, and never your full payment details. To see or delete the record a storefront holds, contact that storefront directly, since we do not control it.

Installing from the Microsoft Store means Windows and the Store collect install, usage and reliability data about the app, as they do for every app distributed there. That collection is Microsoft's, governed by the Microsoft privacy statement, and it happens at the platform level rather than from code we wrote.

What reaches us from it is aggregate: install and acquisition counts, crash and hang reports, ratings and reviews. It never includes your file names, your folder structure or anything LumaDisk scanned. The macOS build you can download today is distributed directly and has no equivalent reporting; a separate App Store edition is described below.

When you connect a cloud drive (OneDrive, Dropbox, with Google Drive coming soon), LumaDisk signs in with that provider using OAuth and reads your files so it can map them in the sunburst.

The sign-in uses PKCE and runs entirely on your device, so your credentials and access tokens never leave your machine, and your cloud data is never routed through or stored on a LumaDisk server. The connection is strictly between your computer and your provider. You can disconnect a drive at any time to remove the stored token, and you can revoke LumaDisk's access from your provider's account settings.

A sandboxed edition has been submitted to the Mac App Store and is awaiting review. It is not available yet — the macOS build you can download today is the direct one described above — but it differs in ways that belong on this page.

It is built without the cloud feature and contains no network code at all: no cloud accounts, no sign-in, no tokens, no update checker, no license server. It holds three entitlements — the app sandbox, read and write access to files you pick, and app-scoped bookmarks. There is no network entitlement, so it cannot open a connection even if something asked it to.

It can read only the folders you choose through the system open panel, remembered across launches as security-scoped bookmarks, and nothing else on the disk. Settings and the scan cache live inside the app's own sandbox container. Licensing is handled by the Apple receipt that comes with your purchase, so there is no trial and no in-app purchase.

Apple reports its own App Store figures to developers, as Microsoft does on Windows. Download counts cover every install. Usage figures — sessions, crashes, how many devices still have the app — reach a developer only from people who have, in Apple's words, “agreed to share their diagnostics and usage information with app developers”. None of it includes your file names, your folder structure or anything LumaDisk scanned.