1. Who We Are
Luma Player is an independent media player application. The app lets users play video playlists and manage their content through a personal web dashboard at lumaplayer.app. We do not provide, host, or distribute any media content ourselves.
For any privacy-related questions or concerns, you can contact us at: privacy@lumaplayer.app
2. Data We Do NOT Collect
Luma Player does not collect, store, or transmit any of the following to our own servers:
- Your name, email address, or any personally identifying information
- Payment information or financial data of any kind
- Your watch history, viewing habits, or content preferences
- Your precise geographic location (GPS)
- Contacts, photos, or files from your device
- Behavioral data, usage analytics, or crash reports tied to your identity
We have deliberately designed Luma Player to operate without requiring any personal data from you.
3. Data Stored Locally on Your Device
The following information is stored on your device using Android's SharedPreferences system. Some items are also synced to our cloud backend (Supabase) strictly to enable the web dashboard feature — see Section 4 for details:
- Device ID & Device Key: Randomly generated pseudonymous identifiers created by the app at first launch. Used to authenticate your web dashboard session. These identifiers contain no personal information and are not linked to your real identity in any way. They are synced to Supabase so the web dashboard can recognise your device.
- Playlists: Media source URLs and connection details you manually enter into the app. Synced to Supabase so you can manage them from the web dashboard.
- App Preferences: Language settings, buffer configuration, parental controls, and other in-app options you configure. Stored locally only — never transmitted.
- Playback Positions: Resume points for video content, allowing you to continue watching from where you left off. Stored locally only — never transmitted.
- Favorites: Channels, movies, and series you have marked as favorites within the app. Stored locally only — never transmitted.
You can clear all locally stored data at any time via Device Settings → Apps → Luma Player → Clear Data. Dashboard data can be removed by deleting your playlists through the web dashboard.
4. Web Dashboard (lumaplayer.app/dashboard)
The Luma Player web dashboard allows you to manage your playlists remotely. Authentication uses your Device ID and Device Key — pseudonymous identifiers that contain no personal information.
The following data is stored in Supabase (our cloud database provider) to enable the dashboard:
- Device ID — anonymous identifier for your device
- Device Key — 6-digit PIN used to authenticate dashboard access
- Playlist data — media source URLs you add, either from the app or the dashboard
- Last-seen timestamp — when the device last connected, used to display device status
None of the above contains personally identifying information. Your Device ID and Device Key are never shared with or sold to any third party. Supabase acts as a data processor under our instructions only.
5. App Permissions
Luma Player requests only the permissions necessary for core functionality. Below is the complete list declared in the app:
- Internet: Required to fetch and stream playlists from external URLs you provide.
- Access Network State: Checks your internet connectivity before attempting to load playlists or streams.
- Access Wi-Fi State: Determines whether you are on Wi-Fi to support adaptive streaming decisions.
- Wake Lock: Keeps the screen active during video playback so content is not interrupted.
- Foreground Service: Allows playback to continue reliably while the app is in the foreground on Android TV and lock-screen scenarios.
- Read External Storage (Android 12 and below only): Used solely to allow you to import local playlist files from your device storage. This permission is not requested on Android 13 and above.
- Write External Storage (Android 9 and below only): Used solely to save exported playlist data on older Android versions. This permission is not requested on Android 10 and above.
Luma Player does not request and has no access to your camera, microphone, precise location, or contacts. Storage permissions are scoped to the minimum Android version range where they are technically required and are used exclusively for local file import/export — not for browsing, reading, or transmitting any personal files.
6. Third-Party Services
Luma Player contains no analytics SDKs, no advertising networks, and no tracking libraries of any kind. Specifically:
- No Google Analytics or Firebase integration
- No Facebook SDK or Meta Pixel
- No crash reporting services tied to personal data
- No in-app advertising or ad tracking
The following third-party services are used for specific, limited purposes:
| Service | Purpose | Data sent | Privacy policy |
|---|---|---|---|
| Supabase | Web dashboard backend — stores your Device ID, Device Key, and playlist URLs so you can manage playlists remotely. Data is synced both when you add playlists from the app and when you use the web dashboard. | Anonymous Device ID, Device Key (6-digit PIN), playlist URLs you add, last-seen timestamp | supabase.com/privacy |
| ip-api.com | Weather widget (optional) — derives your approximate city from your IP address | Your IP address (standard HTTP request) | ip-api.com/docs/legal |
| Open-Meteo | Weather widget (optional) — fetches current weather for the city detected above | Approximate latitude/longitude (city-level, not precise) | open-meteo.com/en/terms |
The weather widget does not request your device's GPS location. City-level geolocation is derived server-side from your IP address by ip-api.com — Luma Player never reads or transmits your device's precise location. If you prefer not to share this, there is no account or registration that ties these requests to your identity.
Playlists you add to the app are loaded directly from the servers of the provider you choose. Luma Player has no relationship with and no control over those external servers or their privacy practices. Any interactions with those servers are governed by the respective provider's own terms and privacy policy.
7. Security
Because Luma Player transmits no personal data to any server, the risk associated with data breaches at our end is minimal by design. Data stored locally on your device is protected by the native security mechanisms of your Android operating system, including app-level sandboxing.
We strongly recommend keeping your Device ID and Device Key private and not sharing them with anyone you do not trust.
8. Children
Luma Player is not directed at children under the age of 13. We do not knowingly collect any information from minors. If you are a parent or guardian and believe a child has used the app, you can uninstall the application and clear all associated data from your device settings at any time.
9. Your Rights
Because Luma Player does not collect personally identifiable information, most data protection rights under regulations such as the GDPR are exercised directly on your device rather than through us. You can:
- Delete all app data instantly via Device Settings → Apps → Luma Player → Clear Data
- Remove individual playlists or favorites from within the app at any time
- Clear your dashboard data by removing playlists through the web dashboard
If you have any specific privacy concerns or requests, contact us at privacy@lumaplayer.app and we will respond promptly.
10. Changes
We may update this Privacy Policy occasionally to reflect changes in the app or applicable regulations. Any updates will be reflected by a revised "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Application following any changes constitutes acceptance of the updated policy.
11. Contact
For any questions, concerns, or requests related to this Privacy Policy, please contact us at: