Privacy policy
Last updated 3 October 2026
In short: Lumora keeps what it needs to show your library on every screen: your account, your playlist logins (encrypted), your catalogs, and your favourites, history and playback progress. There are no ads, no analytics and no tracking, in the apps or on this website. You can download or delete everything at any time.
Who runs Lumora
Lumora is run by Mohammad Esmaeilimoakhar, a private individual, who is responsible for your data under the EU General Data Protection Regulation (GDPR). For anything about your data, email m.esmaeilimoakhar@gmail.com.
This policy covers the Lumora apps for Android, Android TV, Google TV, iPhone, iPad, Mac and Apple TV, the Lumora server they talk to, and this website.
What Lumora is
Lumora is a player. It doesn’t provide any channels or other content: you add a playlist from an IPTV provider you already use, as an M3U link or an Xtream account, and Lumora plays it.
What we keep and why
| Data | What it’s for | Legal basis |
|---|---|---|
| Account: with Google sign-in, your Google account ID, email address, name and profile picture link; as a guest, a random ID | Signing you in, and showing the same library on each device you sign in on | Providing the service you asked for (Art. 6(1)(b) GDPR) |
| Playlist logins: for each playlist you add, the M3U link, or the Xtream server address, username and password, and the name you give it | Importing your catalog and playing what you choose | Providing the service (Art. 6(1)(b)) |
| Catalog: the channel, film and series names, categories, artwork links and stream IDs in your playlist | Showing your library on every device | Providing the service (Art. 6(1)(b)) |
| Library: favourites, recently watched titles, where you stopped in each one, and the categories you chose to hide | Picking up where you left off, on any device | Providing the service (Art. 6(1)(b)) |
| Lumora Pro: your plan, subscription status and renewal date, and the purchase reference from Google Play or the customer and subscription IDs from Stripe | Knowing whether Pro is active; handling renewals, cancellations and refunds | Providing the service (Art. 6(1)(b)); keeping business records (Art. 6(1)(c)) |
| Server logs: IP address, time, the address requested, the response, and the browser or app version | Keeping the service secure, stopping abuse, and fixing faults | Our legitimate interest in a secure, working service (Art. 6(1)(f)) |
We don’t sell your data or share it for advertising. The only use of your viewing history beyond the apps themselves is the Lumora Pro picks described below, which suggest titles from your own catalog.
Your playlists and what you watch
- Playlist logins are encrypted with AES-256-GCM before they’re stored, and they’re only decrypted to import a catalog or start playback.
- When you play something, the stream is relayed through the Lumora server so it plays reliably in the apps. Your provider sees the server’s address instead of yours. Lumora doesn’t record or store the video.
- Lumora doesn’t keep a separate log of what you watch. The only viewing data is the history and progress described above, which you can see in the apps and delete.
Picks for Lumora Pro
- On Lumora Pro, the server suggests what to watch from your own catalog (“Top picks for you”, “Because you watched …”). It works this out from your favourites, history and progress each time you open Home; nothing new is collected for it and nothing extra is stored.
- When you choose a mood or ask Lumora in your own words, the server sends OpenRouter, a service that connects apps to AI models, what you asked, your most-watched genres and categories, up to eight titles you watched recently, and a list of candidate titles from your catalog with their catalog details (category, genres, year, rating, length, description). OpenRouter passes it to Google’s Gemini model, which picks the titles. It doesn’t include your name, email address, playlist logins or stream links, and because the request comes from the Lumora server, neither OpenRouter nor Google sees your IP address or device.
- Lumora only allows endpoints that OpenRouter lists as keeping no copy of the request (zero data retention), and OpenRouter doesn’t use requests to train AI models; see OpenRouter’s privacy policy. If you never use moods or asking, nothing is sent.
This website
- The website sets no cookies and has no analytics. Its fonts and images are served from Lumora’s own server.
- The account page loads Google’s sign-in button from accounts.google.com. Google then receives your IP address and browser details under Google’s privacy policy. The other pages load nothing from Google.
- After you sign in on the account page, your session is kept in your browser’s session storage until you sign out or close the tab.
The apps
- The apps contain no third-party analytics, advertising or crash-reporting libraries. In the Android app, Google’s sign-in and Google Play billing libraries may send Google their own diagnostic data, under Google’s privacy policy.
- On the free plan the apps show ads chosen by the Lumora server: a short message about Lumora Pro, and sometimes a sponsor’s image or video, before playback or while it’s paused. Ads aren’t chosen from your data, only from the kind of app you use. To limit how often you see one, the server remembers when you last did (in memory only), and it logs each view, click, skip and completed ad with your account ID so sponsors can be told how their ad did, in totals.
- A sponsor’s image or video is loaded from the sponsor’s own server, which then receives your IP address and device details. Lumora’s own message loads nothing from elsewhere.
- The apps keep your session, your settings and the playlist details you last entered on your device.
- Signing in on a TV uses Google’s device sign-in: you approve a code at google.com/device, and Google tells the Lumora server who you are.
Who else is involved
- Hetzner Online GmbH hosts the Lumora server in Falkenstein, Germany, and processes the data above on our behalf.
- Google provides Google sign-in, device sign-in on TVs, Google Play for Lumora Pro on Android, and the Gemini AI model behind Lumora Pro moods and asking.
- OpenRouter passes Lumora Pro moods and asking to the AI model, only when you use them.
- Sponsors host the images and videos of their ads on the free plan.
- Stripe processes Lumora Pro payments that aren’t made through Google Play. Stripe handles your card details; Lumora never sees them.
- Your IPTV provider receives requests from the Lumora server when your catalog is imported and when you watch.
Google and Stripe may process data outside the EU, including in the United States. They do so under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. OpenRouter is based in the United States and processes mood and asking requests there.
How long we keep it
- Your account, playlist logins, catalogs and library: until you delete them or your account. Deleting your account removes all of it from Lumora’s database straight away.
- Removing a playlist deletes its login, catalog and hidden categories, and keeps your favourites and history.
- Server logs rotate automatically and are kept for a limited time, normally no longer than three months.
- Records that tax law requires, such as payments, are kept for as long as the law requires, usually up to ten years. Most of them are held by Stripe or Google.
Your rights
You have the right to:
- see the data Lumora holds about you, and get a copy of it in a portable format;
- have it corrected, restricted or deleted;
- object to processing based on legitimate interests;
- complain to a data protection supervisory authority, in particular in the EU country where you live or work.
On the account page you can download your data and delete your account yourself. For anything else, email m.esmaeilimoakhar@gmail.com; you’ll get an answer within one month.
Deleting your account
- Signed in with Google: sign in on the account page and choose Delete account, or delete it in the app’s settings.
- Guest account: delete it in the settings of the app you use it on. Uninstalling the app doesn’t delete it.
- By email: write to m.esmaeilimoakhar@gmail.com from the address you use with Lumora.
Deleting your account doesn’t cancel a Lumora Pro subscription. Cancel it first in Google Play, or wherever you bought it.
Children
Lumora isn’t meant for children under 16, and we don’t knowingly keep their data.
Security
All traffic to the Lumora server and this website is encrypted with HTTPS. Playlist logins are stored encrypted, the database isn’t reachable from the internet, and only the operator can reach the server.
Changes
If this policy changes, the new version will be published here with a new date. If a change affects how we use data you’ve already given us, we’ll tell you before it takes effect.