This Privacy Policy explains how Kodeora ("we", "us") collects, uses, and protects information when you use the Lumen macOS application ("Lumen", the "app"). By using the app you agree to the practices described here.
Plain-English summary
- Your chats stay on your Mac. We don't have servers that store your conversations.
- When you send a message, it goes directly from your Mac to the Anthropic API.
- If you bring your own Anthropic API key, it's stored in your local macOS Keychain.
- If you subscribe, Apple and (optionally) RevenueCat handle the payment. We never see your card.
- We don't collect analytics, location, contacts, or any device identifiers.
1. What information we handle
1.1 Information stored locally on your Mac
The following is stored on your Mac only, inside the app's sandbox container. It never leaves your device unless you choose to send it to Anthropic as part of a chat message:
- Chat history (messages, attachments, model used, timestamps)
- Projects, personas, and bookmarks you create
- Browser tabs and bookmarks created inside the in-app browser
- Files you attach to a chat (copied into the sandbox container at
~/Library/Containers/com.kodeora.lumen/Data/Library/Application Support/Lumen/Attachments) - Your Anthropic API key, if you provide one — stored in the macOS Keychain, not in plain text
- Preferences (appearance, default model, etc.) in
UserDefaults
1.2 Information sent to Anthropic
When you send a message, Lumen makes an HTTPS request to api.anthropic.com containing:
- The text of the message
- Attachments you added to the turn (encoded as image or document content blocks)
- Prior turns in the current conversation (so Claude has context)
- Your selected model, system prompt, and tool configuration
- Either your own API key (BYOK) or, for subscribers, our managed key
Anthropic's handling of this data is governed by Anthropic's own privacy policy (anthropic.com/legal/privacy) and their commercial usage terms. Lumen does not control or modify how Anthropic processes the request after it leaves your Mac.
1.3 Information collected by Apple and our payment processor
Subscriptions are handled by Apple's StoreKit and, optionally, RevenueCat. These services receive and process subscription transactions according to their own privacy policies. Lumen receives only an anonymized entitlement status (e.g. "subscriber: yes / no") — no card numbers, no Apple ID, no email.
1.4 What we do not collect
Lumen does not collect or transmit any of the following:
- Contact info or address book
- Location
- Photos or files other than what you explicitly attach to a chat
- Browsing history (outside the in-app browser, which stays local)
- Device or advertising identifiers
- Crash reports or telemetry to any third-party analytics service
2. How we use information
Locally stored data is used to render the app's interface (chat history, sidebar, projects, etc.) and is not transmitted anywhere except as described in §1.2. Subscription status is used to gate access to paid features and chosen Claude models. We do not profile users, sell data, or share it with advertisers.
3. Third-party services
- Anthropic API — receives your chat content when you press send. Subject to Anthropic's own privacy policy and terms.
- Apple App Store / StoreKit — handles subscription billing and entitlement delivery.
- RevenueCat — used to coordinate subscription status across devices and the managed-key path. Subject to RevenueCat's privacy policy.
- Vercel — hosts this website and the optional managed-key proxy endpoint used by subscribers. Subject to Vercel's privacy policy.
- DuckDuckGo — used by the in-app browser's address bar as a search fallback when
you type a non-URL query. Searches are sent to
duckduckgo.comonly when you initiate them.
4. Security
We store API keys in the macOS Keychain using the recommended Security framework APIs. The app is sandboxed and requests only the entitlements it needs (network client for Anthropic, user-selected file read for attachments). All network traffic is TLS-encrypted.
No system is perfectly secure. If you have reason to believe your account or data has been compromised, please contact support@kodeora.com.
5. Children's privacy
Lumen is not directed to children under 13 and we do not knowingly collect information from children. The app's App Store age rating is 4+ as the app itself has no objectionable content; the underlying Claude models follow Anthropic's own usage policies.
6. Your rights
Because we don't hold a copy of your data on our servers, requests to access, correct, or delete information are handled entirely on your device:
- Access — your chats live in the app and in the Application Support directory.
- Delete — Settings → Privacy → "Clear all chats" / "Clear bookmarks" wipes the local store. Removing your API key uses the "Clear" button in Settings → API Key.
- Export — each chat has an "Export as Markdown" action in its header menu.
For data held by Anthropic, Apple, or RevenueCat, please use those companies' own data access and deletion flows.
7. International users
Anthropic's API and our hosting providers operate primarily from the United States. By using the app and sending messages to Anthropic, you understand that your message content will be transmitted to the United States for processing.
8. Changes to this policy
If we materially change this policy we'll update the "Last updated" date at the top of this page and — for significant changes — surface a notice inside the app. Continued use of Lumen after a change constitutes acceptance of the updated policy.
9. Contact
Questions about this policy or how Lumen handles your data: support@kodeora.com.