This Privacy Policy describes how Lumen (the "Application"), a software application developed and distributed by Kudige Panduranga Shenoy (the "Developer"), handles information when you (the "User") use it. By using the Application, you acknowledge the practices described in this Policy. The Developer is committed to a privacy-by-design approach in which the Application operates locally on your device and the Developer receives no User data.
The Application does not require an account and does not transmit any information to the Developer. The Developer operates no servers, databases, or backend infrastructure in connection with the Application, and performs no analytics, tracking, profiling, advertising, or telemetry. The Developer does not collect, receive, store, sell, or share any User data of any kind.
In its default configuration, the Application processes documents entirely on your device using a locally installed artificial-intelligence model. Text extraction, optical character recognition, and document analysis are performed locally, and no document content is transmitted from your device. The local model files are obtained once, on your instruction, from a third-party model distribution service; that transfer contains no document content and is subject to the distributor's own terms and privacy policy.
The Application allows you to optionally enable one or more third-party artificial-intelligence providers by supplying your own application programming interface ("API") credentials for each provider. The available providers, and their respective privacy policies, are:
Where you enable a provider and initiate an analysis, document data is transmitted directly from your device to that provider, authenticated using your own credentials. Such data is processed by the relevant provider as an independent data controller, in accordance with that provider's privacy policy and the agreement between you and that provider. The Developer is not a party to that transmission, does not receive the data, and exercises no control over the provider's processing of it.
In the ordinary course, the Application transmits extracted text only, as images are read by optical character recognition and PDF text is extracted on your device prior to transmission. In the following circumstances, additional data is transmitted:
(a) Large documents. A PDF exceeding the applicable inline size limit is uploaded to the provider's file-handling interface (applicable to Anthropic and OpenAI).
(b) Quality escalation. Where an initial text-only analysis yields a low-confidence result, the Application may re-submit the document in its native form — PDF data, the original image file, and/or rendered page images — to obtain an improved result (applicable to Anthropic and OpenAI only, and regardless of whether photo naming is enabled).
(c) Photo and image naming. Where you enable the optional photo-naming feature (disabled by default), image files containing little or no readable text are transmitted in full to your selected provider so that it may generate a short visual description for use in the filename. This applies to any enabled cloud provider (Anthropic, OpenAI, Google, or xAI). Images that contain readable text continue to be processed by optical character recognition on your device and are ordinarily transmitted as extracted text only; where the quality escalation described in (b) applies (Anthropic and OpenAI only), the original image file may also be transmitted.
Except as described in (a)–(c) above, Google (Gemini) and xAI (Grok) receive extracted text only.
Prior to the first transmission to any given provider, the Application presents a one-time disclosure identifying the provider and the categories of information to be transmitted, and requests your express consent. Consent is obtained on a per-provider basis and is automatically revoked if the corresponding credentials are altered or removed.
Photo naming (itself disabled by default) includes a location setting that defaults to Resolved. Under Resolved, the Application sends the GPS coordinates embedded in a photo to Apple's geocoding service to determine the city and country for the filename. These coordinates are transmitted to Apple only — not to the Developer and not to any AI provider — and are processed under Apple's privacy policy. Regardless of the default, no coordinates are sent until you have given your separate, explicit consent (you are asked once, before the first lookup). Photos with no embedded GPS coordinates, and the Off and Raw location settings, send nothing.
API credentials that you supply are stored in the macOS Keychain on your device. Such credentials are used solely to authenticate requests to the provider for which they were supplied. They are not transmitted to the Developer and do not leave your device except as authentication to the applicable provider.
The Application stores the following within its sandboxed application container on your device. None of this information is transmitted to the Developer:
(a) name mappings and excluded-name entries used to compose filenames consistently;
(b) rename-history records that enable renaming operations to be reversed;
(c) locally installed model files; and
(d) optional diagnostic logs, as described in Section 7.
The Application provides an optional diagnostic-logging feature, which is disabled by default. When enabled by you, the Application records document text and AI-provider responses locally for the purpose of diagnosing operational issues. These logs remain on your device, are not transmitted to the Developer or any third party, and may be disabled and deleted by you at any time.
The Application is sandboxed and may access only those files and folders that you expressly select or provide to it. It scans only those selected locations and does not browse storage outside them. Renaming a file in place requires your authorisation for the folder containing that file.
The Application is not directed to children and does not knowingly collect personal information from any individual.
The Developer may update this Policy from time to time. Any revised version will be published at this location and within the Application, identified by a revised effective date. Your continued use of the Application following publication constitutes acknowledgement of the revised Policy.
Enquiries regarding this Policy may be directed to:
Kudige Panduranga Shenoy
Email: kudige@icloud.com