Privacy Policy
This policy explains how the LumaFin app for Android TV, Google TV and Fire TV (package io.github.bagodees.lumafin) handles your information. LumaFin is a free, open-source client for Jellyfin media servers, developed by the LumaFin project (GitHub: bagodees). It is not affiliated with the Jellyfin project.
The short version
- LumaFin has no accounts, servers or databases of its own. We do not collect, sell or rent your personal data.
- The app talks to the Jellyfin server that you choose. That server is run by you or by someone you trust, not by us.
- There are no ads, no analytics and no tracking SDKs in the app.
- The only connection to a LumaFin-run service is an anonymous check for app updates.
Information the app handles
Your Jellyfin server and account
To use LumaFin you sign in to a Jellyfin server. The app stores the server address, your Jellyfin user ID and the sign-in token your server issues, on your TV, so you stay signed in. Your password is sent only to your Jellyfin server to sign in and is not stored by the app. The app then exchanges information with that server as needed to work: your libraries and their artwork, what you watch, playback progress and watched status, favorites, playback reports, and device details (such as a device name and ID) that Jellyfin uses to manage sessions. How your server stores and uses this is governed by whoever runs it.
Settings stored on your TV
Your preferences (for example Home layout, subtitle style, playback choices, Watch Later and remembered audio and subtitle choices) are stored locally on the TV, separately for each Jellyfin user. They are not sent to us.
Optional settings sync
If you turn on Sync settings across devices, a copy of some personal preferences is saved to your own Jellyfin account (in Jellyfin's display preferences) so your other TVs can use it. It contains settings only, never passwords or sign-in tokens, and is stored on your Jellyfin server, not with us. You can turn it off or remove the synced copy at any time in Settings.
Crash reports
If the app crashes, it can send a crash report to your own Jellyfin server (the last server you used), never to us. A report contains the error details, app version, Android version and device model, and, if enabled, recent app logs. You can turn crash reports or included logs off in Settings → Help & Maintenance → Crash reporting.
Update check
LumaFin periodically downloads a small file from getlumafin.com to see whether a newer version is available. The request contains no account, server or device information. Like any web request, it reveals your IP address to our hosting provider, Cloudflare, which processes it under its own privacy policy to deliver the site. We do not use it to identify or track you.
Voice search
If you use voice search, the app asks for microphone permission and uses your TV's built-in speech recognition service (for example Google's) to turn your speech into text. LumaFin receives only the resulting text, which is used as your search on your Jellyfin server. The speech service is provided by your device maker or Google under their own privacy terms. Voice search is optional, and the app works without the microphone.
Subtitle downloads
If you choose Get more subtitles, the request goes to your Jellyfin server, which searches the subtitle providers its administrator has set up. LumaFin itself does not contact subtitle providers.
Diagnostics export and settings backup
These features create files on your TV only when you ask. Credentials and server addresses are removed or excluded. Files are shared only if you choose to share them.
Android TV home screen
LumaFin can add rows such as Continue Watching to your TV's home screen. This information stays on the device and is handled by the TV's launcher.
External players and trailers
If you choose an external video player or open a trailer, the app hands the stream link or trailer link to that app (for example VLC or YouTube), which handles it under its own policy.
Who we share data with
We do not share or sell your data. Data leaves your TV only to go to:
- Your Jellyfin server, which you choose and control (or its administrator).
- Our web host (Cloudflare), for the anonymous update check described above.
- Your device's speech recognition service, only when you use voice search.
- Other apps you choose, such as an external player or YouTube, only when you open them from LumaFin.
Security
Your sign-in token and settings are kept in the app's private storage on your TV. Connections to your Jellyfin server use HTTPS when your server supports it; we recommend using an HTTPS address. The update check always uses HTTPS.
Your choices and deleting your data
- Sign out or remove users and servers in the app to delete their sign-in details from the TV.
- Uninstall the app, or clear its storage in Android settings, to delete everything LumaFin stored on the TV.
- Turn off crash reports, settings sync or voice search at any time.
- Data kept on your Jellyfin server (watch history, synced settings, crash reports) can be removed there by you or your server administrator.
Because we do not hold your data, we have nothing to delete on our side. If you have a question, contact us below.
Children
LumaFin is not directed at children under 13 and does not knowingly collect personal information from children. Parental controls for content are set on your Jellyfin server.
Open source
LumaFin's source code is public, so you can check exactly what it does: github.com/bagodees/LumaFin-AndroidTV.
Changes to this policy
If this policy changes, we will update this page and its effective date. Significant changes will also be mentioned in the release notes.
Contact
Questions or requests about privacy: [email protected], or open an issue on GitHub.