Lumisle privacy policy
The short version
Lumisle shows your notifications, music and phone alerts on an island around your camera. To do that it needs to read them. It does this on your phone.
- Lumisle has no internet permission, so it can't send your data online.
- We have no servers, accounts, ads or analytics in the app, and we don't receive your data.
- Lumisle saves the words of a message only while it is waiting for you. They stay encrypted on your phone, so a message survives an update or a restart, and they are deleted once you have dealt with it.
What Lumisle reads, and why
| What | Why | Where it goes |
|---|---|---|
| Your notifications, from every app you haven't turned off in Lumisle: the app, title, sender's name and picture, message text, messages in a conversation, the notification's buttons | To show them on the island and light the camera ring | Held in the phone's memory while they're showing. With Only Lumisle on, the words of a waiting message are also saved, encrypted. See "What is saved on your phone" |
| One-time codes that appear in a notification | To offer a Copy button | Held in memory. Copied to your clipboard only if you tap Copy |
| What's playing: title, artist, artwork and playback controls | To show music controls | Held in memory |
| Which app is on screen, through Android's accessibility service: the app's name and the screen's name | To stay quiet during video and games, and to clear a chat app's messages after you've spent a moment in that app | Held in memory. Lumisle may adjust what it has learned about an app when you open it |
| The list of apps on your phone | So you can choose a size, colour or shortcut for each app | Not saved, except the choices you make |
| Phone status: battery, charging, volume, brightness, Do Not Disturb, next alarm, rotation lock, headphones, USB, mobile signal, flashlight, and whether the camera or microphone is in use | To show these on the island if the alert is on. Lumisle sees that the camera or microphone is in use, not what they capture | Held in memory |
Screen shape and camera position, including Samsung's system file /system/etc/floating_feature.xml and system screen settings | To fit the island around your camera | Not saved |
| Widgets you choose | To show them when you use the gesture you set | Drawn by the widget's own app |
Lumisle uses the accessibility service to draw above the status bar, to learn which app is on screen, and to carry out actions you set up, such as opening the notification shade, going back or taking a screenshot. It's set up so that it doesn't get access to window content, what you type, or the ability to tap for you.
What is saved on your phone
Lumisle saves a small amount of data in its private storage, which other apps can't read:
- Your settings, including your choices for each app (size, colour, whether it's turned off or lights the ring), gestures and shortcuts.
- What it has learned: how many times you've ignored each app, how often you answer someone, and who you've marked important. People are stored as a number made from the app and name, not as the name. This number isn't encryption, and someone with your phone's data and a list of names might be able to match it.
- What's waiting: when Only Lumisle keeps a message for you, Lumisle saves Android's identifier for that notification, the app it came from, the time, and the message's title and words. The title and words are encrypted with a key that stays on your phone. The identifier is made by Android from details the sending app chooses, so it could contain an ID such as a conversation's. Lumisle removes all of it once the message is dealt with.
The copy in your notification shade. With Only Lumisle on, Lumisle removes the app's normal pop-up and posts its own copy of the message to your shade. That copy, including its text, is held by Android like any notification, and Android treats it as coming from Lumisle. Other apps you've given notification access can see it. If you've turned on Android's notification history, Android may keep it there. It goes away when you open or dismiss it. Android removes it if Lumisle is updated or force stopped, and Lumisle puts it back from the encrypted copy when it restarts. Uninstalling Lumisle removes it for good.
Apart from the words of waiting messages, Lumisle doesn't encrypt what it saves. Your settings rely on Android's app sandbox and device encryption.
What leaves Lumisle
Nothing goes online from Lumisle. It has no internet permission.
Things pass to other parts of your phone only when you ask:
- Replies you type go to the app the message came from, which then handles them under its own privacy policy.
- Buttons such as Mark as read go to the app that offered them.
- Directions, Call and Add to calendar open the app you use for those, filled in with words from the message. You still confirm in that app.
- Copy puts a code on your clipboard.
We don't sell your data or share it with anyone, because we never have it.
Google Play
If you get Lumisle from Google Play, Google handles the download, any purchase and any statistics it provides to developers, under Google's privacy policy. If you buy the unlock, you pay Google through the Play Store. Lumisle only learns whether the unlock has been bought, and never sees your payment details.
Your choices
- Turn off access: Android Settings, under Notification access and Accessibility. The island stops working without them.
- Turn an app off in Lumisle: Lumisle, Apps. Its notifications then behave as normal.
- Hide messages when locked: Lumisle, More, Privacy. This is on by default.
- Clear what's been learned: Lumisle, Forget what Lumisle has learned.
- Delete everything: uninstall Lumisle, or clear its storage in Android Settings. Anything Lumisle was keeping in your shade is removed too, so read it first.
Since we don't hold your data, we can't look it up, correct it or delete it for you. Everything is on your phone and under your control.
Security
Lumisle has no internet permission and no third-party analytics or advertising code. It keeps message text in its own storage only while a message is waiting, and only encrypted. No app or system can be perfectly secure, so please keep a screen lock on your phone.
Children
Lumisle isn't directed at children under 13.
Changes
If this policy changes, we'll update this page and its effective date. If a change affects what Lumisle reads or where it goes, we'll tell you in the app first. Adding internet access would be such a change.
Contact
Questions: therynfit@gmail.com. Edgeify (EDGEIFY LLC), United States.