Privacy policy

Last updated: October 8, 2026

The short version

The Lume app runs on your computer and does not collect your data. It has no account, no analytics and no telemetry. Your conversations, files and approvals stay on your machine. This page explains the few places where data does reach us or a service we use.

Who is responsible

The Lume project maintainers (github.com/Lume-agents) are responsible for the data described here. You can reach us at contact@lumeagents.dev.

The Lume app

• Lume watches the agent sessions on your computer (such as Codex, Claude Code and Antigravity) and shows them to you. What those sessions contain is processed only on your machine.
• Lume does not send prompts, responses, files or permissions to us. When you give a prompt to an agent, it is your agent’s provider that receives it, under that provider’s own terms.
• The app checks GitHub for new versions. GitHub receives the request and your IP address, under GitHub’s privacy statement. Repository features use your own GitHub CLI and account.
• Settings, layouts and history are stored in files on your computer. Uninstalling Lume and deleting its folders removes them.

This website

• The site is served by Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address, browser and request time to deliver the pages and protect against abuse.
• The pages load the latest release information directly from GitHub in your browser, so GitHub also sees your IP address.
• We use no advertising and no tracking cookies. To understand how many people visit, we use Cloudflare Web Analytics, which sets no cookies and does not identify you: it counts page views and reports the page, referrer, country, browser and device type. Your browser also keeps a small value in its local storage only for the dinosaur game’s high score, and it never leaves your device.

Waitlist

If you join the Lume Remote waitlist, we store your e-mail address, the page language, the country detected by Cloudflare and the date. We use them only to tell you when Lume Remote opens, based on your consent. We keep them until the launch announcement plus 30 days, or until you ask us to delete them. They are stored in Cloudflare’s infrastructure. To remove your e-mail, write to contact@lumeagents.dev.

Lume Remote (when it launches)

Lume Remote is not available yet. This is how it is designed to work, and we will update this page before it opens.

• Your history stays on your computer. The Relay only routes messages that are encrypted end to end between your paired devices, and cannot read them.
• We will store your account e-mail, your subscription status, the public keys and names of your paired devices and, for notifications, your device push tokens. Push notifications never include the text of your conversations.
• A hosted Relay can unavoidably observe connection metadata: device identifiers, IP addresses, connection times and the size of encrypted messages. We keep logs for a short time and without content.
• Payments are handled by Paddle, which acts as the merchant of record. Paddle receives your payment details and applies its own privacy policy; we never see your card number.

Where data is processed

Cloudflare, GitHub and Paddle operate globally, so data may be processed outside Brazil, including in the United States. These providers apply their own safeguards for international transfers.

Your rights

Under the Brazilian LGPD (and the GDPR, if it applies to you) you can ask us to confirm that we process your data, access it, correct it, delete it, receive a copy, object to the processing and withdraw your consent at any time. Write to contact@lumeagents.dev and we will answer within a reasonable time. You can also complain to the Brazilian data protection authority (ANPD).

Children

Lume is a tool for software developers and is not directed to children.

Security

We limit what we collect, use encrypted connections and keep your content out of our servers. No system is perfectly secure, so we also encourage you to keep your devices and agent accounts protected.

Changes

We will update this page when something changes, and show the date at the top. If a change affects how we use data you already gave us, we will ask for your consent again when the law requires it.