Privacy Policy

The short version

LumaSpace uses anonymous sign-in. We don't know your name, email, or Apple ID. We don't sell your data, we don't track you across apps, and we don't use third-party analytics SDKs. Purchases go through the App Store, so we never see your payment info.

What we collect

LumaSpace uses Supabase (EU-North data centre) for authentication and data storage. When you use the app, we store:

• Anonymous user ID -- a random UUID created by Supabase Auth. Not linked to your name, email, or Apple ID.
• Device info -- device model (e.g. "MacBookPro18,2"), macOS version, and app version. Used to ensure compatibility and diagnose bugs.
• Region & language -- your system locale region, language, and timezone. Used for localisation and aggregate statistics. This is not GPS location.
• Subscription status -- whether you have a Pro subscription and when it expires.
• Favourites -- which wallpapers you've favourited, so they sync if needed.
• Download & view counts -- which wallpapers you've downloaded or viewed (one record per wallpaper per user). Used to power popularity rankings.

Everything above is tied to a random ID. We don't know who you are unless you tell us yourself (like when you email support).

What stays on your Mac

The following data never leaves your device:

• Active wallpaper state and per-screen settings
• Widget configuration and layout
• Audio volume, display mode, and all preferences
• Desktop pet progress and stats
• Cached wallpaper video files
• Your imported wallpapers -- stored in your own private iCloud (CloudKit), never on our servers

What we never collect

• Your name, email, or Apple ID (unless you voluntarily provide it via support).
• Files, filenames, or file contents from your Mac.
• Screenshots, screen recordings, or keystrokes.
• The list of apps installed on your computer.
• GPS or precise location data. The Weather widget uses Apple's WeatherKit, which handles location privately on-device.
• IDFA, advertising identifier, or device fingerprint.
• Browsing history or data from other apps.
• Calendar event content. The Calendar widget reads events locally via EventKit and never sends them to our servers.

No Firebase, no Mixpanel, no Segment, no Amplitude. Zero third-party analytics or crash reporting.

Third-party services

Service	Purpose	Data shared
Supabase (EU-North)	Authentication & database	Anonymous profile, favourites, stats
Cloudflare R2	CDN / file storage	Our wallpaper catalogue only
Apple iCloud (CloudKit)	Your imported wallpapers	Stored in your own private iCloud, not ours
Apple WeatherKit	Weather widget data	Approximate location (handled by Apple on-device)
CoinGecko API	Crypto ticker widget	No user data -- public price queries only
Apple iTunes Search & Spotify oEmbed	Now Playing widget artwork	Track title & artist only
Apple App Store	Distribution & payments	StoreKit transactions (handled by Apple)

Some widgets fetch live data from third-party sources, for example crypto prices (CoinGecko), weather (Apple WeatherKit), any news or RSS feeds you choose, and album artwork for the Now Playing widget — looked up via Apple’s iTunes Search API and, for Spotify tracks, Spotify’s public oEmbed endpoint, sending only the track title and artist. When a widget fetches, your device connects directly to that service, which can see your IP address as with any web request. We never send your personal data to these services.

Data retention & deletion

Your data is kept as long as your account exists. You can delete your account and all associated data at any time from Settings > Account > Delete Account inside LumaSpace. Deletion is completed within 30 days and removes all data we hold on our servers: profile, favourites, and view/download records. Your imported wallpapers are stored in your own private iCloud, so you remove them anytime from the app or from iCloud -- they're never on our servers.

Payments

All purchases are handled exclusively through the Mac App Store by Apple, under their own privacy terms. We don't process payments directly and never see your payment details. LumaSpace Pro is available as a monthly or yearly auto-renewable subscription.

Your rights

Under the GDPR, UK GDPR, and CCPA you have the right to:

• Request a copy of any personal data we hold about you.
• Ask us to correct it if something's wrong.
• Ask us to delete it. We'll honor this within 30 days.
• Request your data in a portable format.
• Object to processing of your data.
• Lodge a complaint with your local data protection authority.

Email privacy@maclovekit.com and we'll take care of it.

Children

LumaSpace is not directed at children under 13 and we don't knowingly collect data from them. If you believe a child has provided us with personal information, contact us and we'll delete it promptly.

Changes to this policy

If we change anything material, we'll update this page with a clear changelog. We'll never reduce your rights retroactively.

Contact

Questions about this privacy policy? Email privacy@maclovekit.com.

MacLoveKit Studio -- Europe