Privacy Policy

LumaFlowruns entirely on your Mac. Your videos are processed locally — they never touch our servers, because we don't have servers. The apps don't track you, profile you, or sell your data. Payments and any optional iCloud sync are handled by Apple, not by us.

On our marketing website only, we use a third-party tool to measure how visitors engage with the demo videos on the page. No personal data, no advertising. Details below.

This policy is published by Cassandra Studios EOOD (“Cassandra Studios”, “we”, “us”), a company registered in Bulgaria.

Registered address: 73 Bulgaria blvd., Triaditsa Distr., Sofia, 1404, Bulgaria.
VAT ID: BG206817882.
Contact: hello@cassandrastudios.com.

The LumaFlow apps for macOS and iOS, and the marketing website at https://lumaflow.cassandrastudios.com.

LumaFlow converts HDR video files into SDR. All conversion work happens locally on your device. Source files and rendered outputs are never transmitted to Cassandra Studios.

Specifically, we do not collect, store, or transmit any of the following:

• The video files you import or export
• Usage analytics, crash reports, or telemetry
• Device identifiers, IP addresses, or fingerprints
• Your name, email, or any account information

The apps do not contact any servers operated by us. They contain no third-party analytics, advertising, or tracking SDKs.

Some features rely on Apple platform services. In those cases the data is processed by Apple under Apple's Privacy Policy, not ours.

In-app purchases (StoreKit)

When you buy a subscription or lifetime license, the transaction is handled by the Apple App Store. We receive an anonymous receipt confirming entitlement; we do not see your name, email, billing address, or payment method.

iCloud sync (optional)

LumaFlow uses iCloud to sync your free-tier quota and conversion library across your devices. This data lives in your own iCloud account. We have no access to it. You can disable iCloud for LumaFlowat any time in System Settings → Apple ID → iCloud.

The marketing site at https://lumaflow.cassandrastudios.com is a static page hosted by Vercel. Vercel may log server-level access information (IP address, user agent, request path) for the operational purposes of running the hosting service, under Vercel's Privacy Policy.

Video engagement analytics (Vidaly)

On the marketing site we use Vidaly to measure how visitors interact with the demo videos on the page (for example, whether the auto-playing hero video successfully starts and how long it remains visible, or whether visitors interact with the before/after comparison clips). This helps us decide which demos actually communicate the product, so we can improve the page.

What Vidaly receives, per video on the page:

• Video lifecycle events (play, pause, seek, end) and the segments of the video that were watched
• The page URL the video appeared on, your browser type, and an anonymous visitor identifier so repeated events from the same session can be grouped together
• Standard request metadata (IP address, user agent) that any web request necessarily exposes to the receiving server

Vidaly does not receive your name, email, the contents of the videos you watch, or anything you type. It does not serve advertising. The collector batches events and sends them via navigator.sendBeacon roughly every 12 seconds and when you leave the page. See Vidaly's privacy policy for their data handling, retention, and sub-processors. Vidaly may process data outside the European Economic Area; in that case the transfer is governed by the safeguards described in their policy.

Our legal basis for this processing is legitimate interest(GDPR Art. 6(1)(f)) in understanding which parts of our marketing site work, balanced against your interest in privacy. Because the data Vidaly processes is engagement-level and tied to an anonymous visitor identifier rather than to you personally, we consider this balance appropriate. If you'd prefer not to be measured, you can block the host collector.vidalyy.com in your browser or with a tracker blocker, or email us at hello@cassandrastudios.com and we will remove any identifier associated with your visit on request.

This analytics is only on the marketing website. It is not in the LumaFlow apps, which remain tracking-free.

LumaFlow is not directed at children under 13, and we do not knowingly collect data from them. The app is, however, safe for all ages — it processes only files you explicitly drop into it.

If you are in the European Economic Area, the UK, or Switzerland, you have the right to access, correct, delete, or export any personal data we hold about you, and the right to lodge a complaint with a supervisory authority. In Bulgaria, that is the Commission for Personal Data Protection.

In practice, because we do not collect personal data, there is normally nothing to access or delete on our side. For data held by Apple (App Store purchases, iCloud content), please use privacy.apple.com.

To exercise any of these rights with us, email hello@cassandrastudios.com.

We may update this policy as the apps evolve. Material changes will be announced on this page with a new effective date.

Questions? Email hello@cassandrastudios.com or write to Cassandra Studios EOOD, 73 Bulgaria blvd., Triaditsa Distr., Sofia 1404, Bulgaria.