Privacy Policy

This policy explains what information Lumen collects, why, and what you can do about it. It covers the Lumen desktop app, the website at lumen.raashed.com and the Lumen Premium subscription. The short version: your recordings never leave your device, we keep only what we need to run your account and subscription, and we don’t sell anything.

Your recordings

Screen recordings, camera footage, audio and exports are created and stored on your device. Lumen doesn’t upload them to us or anyone else. The cursor and click positions the app tracks to create automatic zooms are processed locally and aren’t sent anywhere.

What we collect

• Account details. When you sign in with Google or GitHub, we receive your name, email address, profile picture and that provider’s account ID, plus the access tokens it issues for the sign-in.
• Sessions. To keep you signed in, we store a session record with its expiry, the IP address and the browser or app user agent it was created from.
• Subscription status. We store whether your account has Premium, plus the customer and subscription IDs from our payment provider. Payment details such as card numbers go directly to Dodo Payments; we never see or store them.
• App checks. The desktop app contacts lumen.raashed.com to sign you in, confirm your Premium access, and check for updates; update checks include your platform (for example, Linux or Windows) so we can offer the right download.
• Emails you send us. If you contact us, we keep the conversation so we can help you.

We don’t use analytics, advertising or tracking cookies. The website sets only the cookies needed for sign-in.

How we use it

• to create and secure your account and keep you signed in;
• to unlock Premium in the app and manage your subscription;
• to deliver updates and keep Lumen working;
• to answer support requests and send important notices about your account or billing.

We rely on the need to provide the service you asked for, and on our legitimate interest in keeping Lumen secure. We don’t sell or rent your personal information.

Who we share it with

We use a few service providers, each only for the job described:

• Dodo Payments: our Merchant of Record, which processes payments, taxes and invoices under its own privacy policy;
• Google and GitHub: for sign-in, when you choose them;
• Vercel: hosts the website and its APIs;
• Supabase: hosts the database that stores accounts and sessions;
• GitHub: hosts app releases, which the installer and updater download.

These providers may process data outside your country. We may also disclose information if the law requires it.

How long we keep it

We keep account and subscription data while your account exists. Sessions expire and are removed automatically. When you delete your account, we delete your personal data within 30 days, except billing records that Dodo Payments or the law requires to be kept.

Your choices and rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing work@raashed.com. We’ll reply within 30 days. You can also revoke Lumen’s access from your Google or GitHub account settings at any time. If you’re unhappy with our answer, you may complain to your local data protection authority.

Security

Data is sent over HTTPS and stored with providers that encrypt it at rest. No system is perfectly secure, but we limit what we collect so there’s less to protect.

Children

Lumen isn’t intended for children under 16, and we don’t knowingly collect their information.

Changes

If we change this policy, we’ll update the effective date above, and we’ll email account holders about material changes.

Contact

Privacy questions or requests: work@raashed.com.