Lumo is a gallery cleaner and photo search app for Android. It was built so that your photos stay on your phone. This policy explains what the app accesses, what stays on the device, and the few moments it talks to the internet.
In short
Your photos, videos, search queries and everything Lumo learns about them stay on your phone. Lumo has no account, no servers of its own that receive your data, no analytics, no advertising and no tracking.
What the app accesses on your phone
Photos and videos, with your permission: to find duplicates, bursts, blurry and dark shots, screenshots and large videos, to search by words and by text in pictures, and to compress files you choose.
Photo location (EXIF) is read only so that compressed copies keep their date and location as in the original.
Biometrics or your screen lock, only to open the private vault. Lumo never sees your fingerprint: Android checks it and only tells the app whether it matched.
Notifications, if you allow them: at most one cleanup reminder a week.
What stays on the device
The search index (what the on-device AI recognised in each photo and the text it read in them), statistics and settings are stored in the app’s private storage. They are deleted when you uninstall Lumo.
Files you move to the private vault are encrypted with AES-256 using a key kept in the Android Keystore. Vault files are excluded from backups, so if you uninstall the app, their contents cannot be recovered. Take files out of the vault first.
Photos you delete go to the Android system trash, where you can restore them until the system empties it. Lumo never deletes anything without your confirmation.
When the app uses the internet
Downloading the AI models. The first time you turn on search, Lumo downloads the recognition models (about 100 MB) from Hugging Face (huggingface.co). These are ordinary file downloads: the server sees your IP address, as with any download, but no photos, queries or personal data are sent.
Translating search queries. Search works in English, so a query in another language is translated on the phone with Google ML Kit. The first time, ML Kit downloads a translation model for your language from Google. The words you search for are translated on the device and are not sent to Google. Like other ML Kit features, it may contact Google servers to get updates and send Google technical metrics about how the feature performs and is used (such as device and app information and error codes); your photos and search words are not part of them.
Purchases. Lumo Pro is bought through Google Play. Payment is handled entirely by Google under the Google Privacy Policy; Lumo only receives confirmation that the purchase is active and never sees your card details.
Everything else, including scanning, search and compression, works offline.
What we do not do
We do not collect, sell or share personal data. We do not use analytics, crash reporting or advertising SDKs. We cannot see your photos, because they never reach us.
Children
Lumo is not directed at children under 13 and does not knowingly collect any data from anyone, including children.
Changes to this policy
If the app starts handling data differently, we will update this page and the date above before the change reaches the app.
Contact
Questions about privacy or this policy: contact@developer.living