Who operates Lumen

Lumen is independently developed and operated by Talha Ashraf. For privacy questions, support, or data-related requests, email talhaashraf81@gmail.com.

Data you provide

When you configure Lumen, you may enter a service URL, username, password, playlist URL, and an optional electronic programme guide (EPG) URL. Lumen sends these details directly to the service you choose so it can authenticate, load your library, and play or download media. Talha Ashraf does not operate those services and does not receive or store your provider credentials on a developer-controlled server.

Past closed-testing requests

Before the public release, visitors could request closed-test access through the launch website. Those submissions sent an email address and selected device type through FormSubmit to Talha Ashraf for invitation management. The form is no longer active. FormSubmit may retain past submissions for up to 30 days for delivery and archive access. Never send provider or streaming-service credentials through a website form.

Data stored on your device

Lumen stores profiles, provider details, favourites, watch progress, recent activity, preferences, catalog cache, and download state locally on your device. Sensitive account details use operating-system protected secure storage where supported. Downloaded media is stored locally and remains under your control.

Network requests and third-party services

Lumen connects only when needed to provide features you request. The following independent services may receive limited information:

• Your configured provider: receives the account, playlist, and stream details required to authenticate, load a catalog, and stream or download media.
• The Movie Database (TMDB): may receive media titles and related search terms to return artwork and metadata.
• OpenSubtitles: may receive media search details when you intentionally use online subtitle search and the integration is configured.
• GitHub:desktop editions may contact Lumen's public releases page to check for a newer desktop release. Google Play editions do not download or install application updates outside Google Play.

These services process data under their own terms and privacy policies. Lumen supports HTTP for user-authorized legacy providers, but HTTP does not encrypt credentials or viewing traffic in transit. HTTPS is strongly recommended whenever your provider supports it.

Advertising, analytics, and sale of data

Lumen contains no advertising SDK and no analytics SDK. Talha Ashraf does not sell personal data, build advertising profiles, or use your activity for targeted advertising.

Retention and deletion

Local data remains until you remove a profile, clear watch history, delete downloads, clear Lumen's app storage in your device settings, or uninstall Lumen. Because Lumen does not create a developer-hosted user account, there is no separate cloud account to delete from Lumen. Data sent to a provider or third-party service is controlled by that service; contact that service for its retention and deletion practices.

Children

Lumen is not designed for or directed to children. It does not knowingly collect personal information from children. Users are responsible for the suitability and legality of the media sources they configure.

Security

Lumen uses reasonable safeguards, including protected device storage for sensitive app state. No system can guarantee absolute security. Keep your device updated, protect its unlock credentials, prefer HTTPS, and connect only to services you trust.

Changes to this policy

Material changes will be published on this page with a revised effective date. Continued use of Lumen after a change means the updated policy applies.