Privacy Policy
Last updated: October 26, 2026
Lume is a media player. It ships with no channels, streams, or content — you bring your own Xtream Codes credentials, Stalker portal, M3U playlist, or media server from a provider you are entitled to use. We designed Lume to keep your data on your devices and under your control.
What we store on your device
Your playlists and server logins, the catalog Lume indexes from them, favorites, watch history, watch progress, downloads, and app settings are stored locally on your device. Sign-in tokens for Trakt, Simkl, MDBList, and OpenSubtitles are kept in the device Keychain. We do not operate accounts and we do not have a server that receives this data.
iCloud sync
When you are signed in to iCloud, Lume syncs your playlists (including their server addresses and logins), profiles, watch progress, favorites, watchlist, content and parental-control settings, guide sources, recording-server pairings, and followed sports teams and leagues through your own private iCloud account using Apple's CloudKit. This data is managed by Apple and is not accessible to us. The video catalog itself is not uploaded — each device fetches it from your provider.
Third-party metadata services
To enrich your library with artwork, cast, trailers, ratings, and intro-skip markers, Lume looks up its titles with TMDB, MDBList, and IntroDB; trailers and their thumbnails load from YouTube. Subtitle search sends the title you are watching to OpenSubtitles, plus your OpenSubtitles login if you add one. If you connect Trakt, Simkl, or MDBList, what you watch is sent to that service to record your history; you can disconnect at any time. None of these requests include your playlists or provider logins. Each service has its own privacy policy.
Sports data
If you use the Sports Hub, your device fetches fixtures, scores, and standings from ESPN. These requests name the leagues and games being loaded, not you.
Streaming providers and media servers
When you sync or play content, your device connects directly to the IPTV provider or media server (Plex, Jellyfin, Emby, Silo, or WebDAV) you added. Signing in with a Plex account goes through Plex's own sign-in service. Lume does not proxy or inspect that traffic. Your relationship with that provider is governed by their terms and privacy policy.
Recording servers and Cast devices
If you pair a LumeRecorder or Dispatcharr server, or cast to a Chromecast, your device connects to it directly; Lume does not proxy that traffic. To record, LumeRecorder receives the channel's stream address, which can include your provider login, and Dispatcharr receives only the channel's Dispatcharr ID; both also get the program's details. To cast, the Chromecast receives the stream address, title, and artwork, and plays the stream directly from your provider. On iPhone and iPad, Lume includes Google's Cast SDK to find and control Chromecast devices. Google states that it collects a device identifier, diagnostic data, and usage data, which are not linked to your identity or used for tracking; Google's privacy policy applies.
Analytics & tracking
Apart from the Google Cast SDK described above, Lume includes no advertising or analytics SDKs and does not track you across apps or websites. Performance and crash reports from Apple's MetricKit stay on your device and are only shared if you export a diagnostic report yourself.
Contact
Questions about privacy? Email support@getlume.org.