Privacy Policy for Luma, Luma for Mac and Luma Transfer

Last updated: October 22, 2026

This privacy policy covers three apps:

• Luma for iPhone and iPad (App Store)
• Luma for Mac (download from this website, 30-day trial, then a one-time purchase)
• Luma Transfer for Mac (free download from this website)

Visiting this website itself is covered by the website's general privacy policy.

This is a translation for your convenience. The German version is legally binding.

At a glance

Luma is a music player for your own music collection. Your music, your library, playlists, listening statistics, search history and settings stay on your device. There is no account, no tracking, no analytics tools, no advertising and no server of my own. As the developer, I receive no data about your music or your listening habits.

Network connections only happen in these cases:

1. Controller

Merlin Kreuzkam
Hammweg 82
46562 Voerde
Germany
Email: hello@suenavus.com

There is no data protection officer, because there is no legal obligation to appoint one. If you have questions about privacy, just write to me at the address above.

2. What stays on your device

All three apps process your music exclusively on your device. This includes in particular:

• your music files and covers and the metadata in them (title, artist, album, genre, year and so on)
• your library, playlists, collections, liked songs and tag edits
• listening statistics (e.g. "Most Played", "Recently Played"), the queue and the playback position
• search history, equalizer and all other settings

This data is not transferred to me or to third parties. I have no access to it.

You import music yourself, for example through the Files app, from folders on your Mac or with Luma Transfer. If the files are stored with a cloud provider (such as iCloud Drive, Dropbox or Google Drive), the operating system or that provider's app downloads them. The privacy policy of the respective provider applies to this. Luma itself does not contact these services.

Backup (iOS): Luma, including your music, is part of the regular iOS device backup (iCloud Backup or a backup via the Mac) if you use it. The backup is performed by Apple, not by me. You can exclude Luma from it in the iOS settings under "[Your Name] › iCloud › iCloud Backup".

3. Luma for iPhone and iPad

3.1 No network access by the app

The iOS app does not connect to the internet on its own. It contains no third-party analytics, tracking, advertising or crash reporting libraries.

3.2 Purchase and ratings through the App Store

Luma is distributed through Apple's App Store. Apple handles the purchase, payment and download (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). I do not receive buyers' names, email addresses or payment details from Apple, only aggregated sales and usage figures. I only receive crash reports and app analytics if you have agreed in the iOS settings to share them with app developers, and even then only in anonymized form via Apple. Apple's privacy policy applies: www.apple.com/legal/privacy/

After a few listening sessions, Luma may show Apple's standard dialog for rating the app on the App Store. iOS decides whether and how often it appears. A rating goes to Apple, not to me.

3.3 Receiving music from the Mac (local network)

When you open the "Receive from Mac" view in Luma, iOS asks once for permission to use the local network. While this view is open, your iPhone or iPad makes itself visible on the local network via Bonjour under its device name (e.g. "Alex's iPhone") so that your Mac can find it. Other devices on the same network can see this name during that time. This ends when you close the view.

A transfer only starts once you explicitly accept it on the iPhone. What is transferred is described in section 5.

3.4 Links

The "Help" entry in the settings opens the help pages on this website in your browser. The website's privacy policy applies there.

4. Luma for Mac

Luma for Mac processes your music just as locally as the iOS app (section 2). In addition, it has the following features.

4.1 Trial and license (Polar)

You can try Luma for Mac free for 30 days. The app stores the start of the trial locally in your Mac's keychain and in the app settings. It is not transferred anywhere.

Purchase: "Buy Luma…" opens Polar's checkout page in your browser. Polar Software, Inc. (3500 South DuPont Highway, Dover, DE 19901, USA) sells the license as the merchant of record and handles payment, invoicing and sales tax; Polar processes payments via Stripe. The data you enter there (e.g. name, email address, billing address, payment details) and how Polar processes it are governed by Polar's privacy policy: polar.sh/legal/privacy. Before the checkout page opens, Luma only asks Polar for the address of the checkout page so it can be shown in your language; no personal data other than your IP address is transferred.

As the provider of Luma, I see your name, your email address, the purchase and your license key, together with the Macs it is activated on, in Polar's dashboard. I use this data only to process the purchase, for support and for refunds.

Activation: When you enter your license key, Luma sends to Polar:

• the license key,
• your Mac's name as shown in System Settings under "General › About" (it may contain your first name, e.g. "Alex's MacBook"; you can change it there at any time),
• the version number of Luma,
• a public identifier of my Polar account.

The Mac's name lets you see in the Polar customer portal which Macs use your license and release individual ones again. Polar responds with an activation ID and the license data, including the buyer's email address. Luma stores the key, the activation ID, the email address and the time of the last confirmation locally in your Mac's keychain.

Check at every launch: Once a license has been entered, Luma asks Polar once at every launch whether it is still valid (e.g. not refunded or removed in the customer portal). Only the license key, the activation ID and my Polar account identifier are transferred. Without an internet connection, Luma keeps working normally.

Recognizing another Mac: So that a license is activated automatically on the new Mac after a move with Migration Assistant, Luma creates an irreversible hash (SHA-256) from the Mac's hardware identifier and stores it only locally together with the license. Neither the hardware identifier nor the hash is transferred.

Removing: "Remove from this Mac" deactivates the activation at Polar (key and activation ID) and deletes the license data from the keychain.

For each of these requests, Polar also receives your IP address for technical reasons. Polar is based in the USA; according to Polar, transfers to the USA are based on the European Commission's Standard Contractual Clauses.

The legal basis is Art. 6(1)(b) GDPR (performance of the purchase contract and provision of the license). Storing the license data on your Mac is strictly necessary for the activation you requested (Section 25(2) No. 2 TDDDG).

4.2 Updates (Sparkle and GitHub)

See section 6; it applies to Luma for Mac and Luma Transfer alike.

4.3 Discord status (optional, off by default)

If you turn on "Show status in Discord" in the settings, Luma passes the currently playing title and artist and the track's start and end time to the Discord app on your Mac. With "Hide title", only "Listening to Luma" is shown, without title and artist. The handover runs locally through the Discord app's interface; Luma itself sends nothing to the internet and does not upload any covers (the Luma logo is always shown).

Discord then shows this information in your profile and in member lists, visible to other Discord users, and processes it on its servers. Discord is responsible for this; Discord's privacy policy applies: discord.com/privacy. Others also see a link to this website on the status card.

The legal basis is your consent by turning the option on (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning the option off; the status then disappears immediately, as it does when you pause or quit Luma.

4.4 Media keys (optional)

With the option "Always send media keys to Luma", Luma intercepts your keyboard's play/pause, next and previous keys so they control Luma even while another app is playing something. macOS requires the "Accessibility" permission for this. Luma only evaluates these media keys; normal keyboard input is not read, stored or transferred.

4.5 Music folders and "Now Playing"

Luma reads the music folders you choose and shows the current track in macOS system features (Control Center, menu bar, lock screen). This happens locally on your Mac.

4.6 Links

"Open help page" opens this website, "Open customer portal" opens the Polar customer portal in your browser.

5. Luma Transfer: sending music from the Mac to the iPhone

Luma Transfer (and the same feature in Luma for Mac) sends music files directly to Luma on your iPhone or iPad, either over your local Wi-Fi or over a USB cable. There is no server and no cloud involved; the data goes only from your Mac to your device.

• Finding devices: The Mac searches the local network via Bonjour for iPhones and iPads on which Luma has the "Receive from Mac" view open, and sees their device names. Over USB, the Mac uses the connected iPhone's device identifier to recognize it in the list; this identifier does not leave the Mac. The first time, macOS asks for permission to use the local network.
• Confirmation: The Mac first sends its computer name and a randomly generated identifier of the app installation (it contains no device or personal data). A request appears on the iPhone, and only once you accept it does the transfer continue.
• What is transferred: the list of files (file name, size, title, artist and album, plus a checksum calculated from the tags so that existing tracks are skipped), then the music files themselves. The iPhone responds with its device name, the tracks it already has and the result for each file. If there is not enough storage, it declines the transfer with a notice.

The transferred files are imported into Luma on your iPhone and stay there locally (section 2). Apart from that, Luma Transfer only stores the random identifier mentioned above and has no internet connection other than the update check (section 6).

6. Updates for Luma for Mac and Luma Transfer (Sparkle, GitHub)

Both Mac apps use the open-source update framework Sparkle. On the second launch, the app asks whether it should check for updates automatically. In Luma for Mac you can change this at any time in the settings. In both apps you can also check yourself via "Check for Updates…" in the app menu.

When checking for updates, the app loads a list of available versions from GitHub Pages (miotares.github.io). If an update is available and you install it (or have automatic downloads turned on), it is downloaded from GitHub (github.com). Only the technically necessary information is transferred: your IP address, the time and an identifier with the app's name and version. Luma does not send a system profile (hardware, macOS version or similar). Every update is cryptographically signed and verified before installation.

The provider is GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, a Microsoft company. GitHub may store access in server logs. Transfers to the USA are based on the EU-US Data Privacy Framework or the Standard Contractual Clauses. Details: docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

I myself receive no information from GitHub about who downloaded an update, at most download counts.

The legal basis is my legitimate interest in providing you with bug fixes and security updates (Art. 6(1)(f) GDPR), and for the automatic check additionally your consent in the update dialog.

7. Storage period

• Data on your devices stays there until you delete it in the app or remove the app. The license and the start of the trial are stored in the keychain and remain there even after deleting Luma for Mac, so that a reinstallation finds them again. You can delete them in the "Keychain Access" app under "miotares.Luma.license".
• Purchase and license data at Polar is stored as long as the license exists and beyond that as far as statutory retention obligations (in particular tax-related, up to ten years) require.
• For server logs at GitHub, Polar, Apple and Discord, the retention periods of the respective providers apply.

8. Your rights

Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3)).

Since almost all data is stored only on your devices, you can view and delete it there yourself. For data at Polar, contact me or Polar directly.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority of your place of residence or the authority responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de

9. Children

The apps are not specifically aimed at children and do not knowingly collect data from children.

10. Changes

If the apps change, for example through new features with network access, I will update this privacy policy. The version published on this page applies.