Signed updates
Every version and every message is digitally signed. Lumobix checks the signature, size and checksum itself.
Ed25519 · Older, expired or withdrawn versions are never offered.What's yours
stays yours.
Lumobix has access to your projects, your servers and your AI agent. That's why it collects as little data as possible, and every version is verified before it's installed.
The essentials
No usage data
Lumobix sends no usage data and no crash reports.
At startup it only briefly checks whether there's anything new; when you're signed in, it identifies itself with your session.Your keys stay with you
Lumo and its tools don't read SSH keys, credentials or Lumobix's own data.
Commands that make deep changes only run after you confirm them.The details.
The key we sign with is never on the download server. Even someone who took over the server couldn't sneak a foreign version into an installed Lumobix. The installers check the same signature before they download anything.
Updates and messages only come over HTTPS. Lumobix rejects unencrypted redirects. You connect to servers via SSH.
Two-factor with an authenticator app is required. We only store passwords as a secure hash (scrypt), and anyone trying lots of passwords gets slowed down.
During setup, Lumobix shows the server's fingerprint before you enter a password. If a server later identifies itself differently, Lumobix doesn't just keep connecting. “Test connection” then shows you why.
Lumobix never replaces an existing key. It writes port and tunnel to a separate file of its own, and your own SSH configuration stays untouched.
You decide for each server whether it may reach your PC. Access ends when you close Lumobix.
Close Lumobix,
and everything stops.
Connections, terminals, PC access and the local AI: whatever Lumobix started stops with it.
What we know about you. And what we don't.
- Projects stay on your PCChats, notes, files and settings stay with you alone. Whatever your AI agent is asked to work on, it sends to its provider.
- No access logsThe server doesn't record who visits which page. Instead of the IP address, the security log holds a short code that changes every day.
- No advertising or tracking cookiesOnly technically necessary cookies: sign-in, your chosen language and, if you tick it, “Trust this browser”. That's why there's no cookie banner.
- Counters, not profilesWe count visits per page, day and country. We don't know who you are.
- Your account, your decisionYou can delete it yourself at any time under “Account”: profile, picture, sessions, server entries and tickets are gone immediately. Only payments must be kept for our accounting.
| What | Which data | Where | How long |
|---|---|---|---|
| Projects, chats, notes | everything you work on in Lumobix | only on your PC | until you delete it |
| Lumobix account | name, email, password only as a secure hash, user ID | our server | until you delete the account |
| Profile picture | one of the Lumo pictures or your own picture (public at a random address) | our server | until you change it or delete the account |
| Plan | chosen plan, term, orders, cancellation | our server, with the account | as long as the account exists |
| Payments | amount, purpose, period, status | our server | 10 years (statutory retention), even after the account is deleted |
| Lumobix Server | if your server PC registers with your account: computer name, Windows user, version, fingerprint, address in your home network and, if “Remote access” is on, the public address with port | our server, with the account | until you remove the server or delete the account |
| Sign-in | cookies lumobix_sitzung and (if you choose “Trust this device”) lumobix_geraet | your browser | up to 30 or 90 days respectively, or until you sign out |
| Support tickets | subject, description, category, version, name and email from your account | our server | until you delete it; answered tickets close after 30 days without a new message and are deleted 180 days after closing |
| Statistics | counters: page, day, country, downloads, device (phone, tablet, computer, from the browser identifier), design | our server | 400 days |
| Security | type of event, affected account, a short code derived from the IP address that changes every day | our server | 30 days |
| Team log | what the Lumobix team changed in an account (who, when, what) | our server | 365 days |
The program
Lumobix stores projects, chats, notes and settings only on your PC. Your AI agent (e.g. Claude Code by Anthropic, USA) processes your requests and the files it reads for them through your own account with the agent's provider; that provider's terms and privacy notices apply. Lumo works on your PC and sends nothing to the internet. Only during setup does Lumobix download programs from their makers: the AI engine from GitHub, the models from Hugging Face and, if you want, Claude Code from Anthropic. As with any download, they see your IP address. If you turn on Git sync, Lumobix sends your projects with your own access to the Git service you enter (e.g. GitHub or GitLab).
Updates
At startup, Lumobix fetches two small files from this website (available version and messages). Nothing about you is sent along. Our server keeps no access logs. The connection runs through Cloudflare, which processes technically necessary data such as your IP address.
Lumobix account
For your account, we store your name and email address, your password only as a secure hash (never in plain text), your two-factor sign-in setup, your plan and, if you want, a profile picture. You stay signed in through a cookie that exists only for that purpose. If you delete your account under “Account”, the account, picture, sessions, server entries, orders and tickets are gone immediately, and any running subscription ends. We keep payments for accounting for as long as the law requires (10 years) and use them for nothing else. Once email delivery is set up, we send you confirmations (address, password, order, cancellation) through an email delivery service.
Website and statistics
The website loads no third-party fonts or scripts and doesn't recognize anyone. We only count how often a page is viewed and how often Lumobix is downloaded, per day and country. A page only counts once it has been open for a few seconds. Beyond that, only rough categories: whether phone, tablet or computer (our server recognizes this from the browser identifier every request sends; the page reads nothing from your device for it) and which design. We don’t record where you came from. The country comes from Cloudflare. Only these counters are stored, without IP address, without cookie and without any identifier that could link a visit to a person. If you don't want to be counted at all, turn on “Do Not Track” or “Global Privacy Control” in your browser: then the website doesn't count you. Lumo on the website answers from a fixed list in your browser. What you ask never leaves your browser.
Protection against abuse
Failed sign-ins, too many requests, a very large number of page views in a short time (the server then blocks that source for an hour), copying of long texts and copies of the website on other domains are recorded in the security log for 30 days. It contains the type of event, the page and, if affected, the account. Instead of the IP address, it holds a short code that changes every day. The server only briefly keeps in memory how many requests come from a source.
Lumobix Server
If you register a PC running Lumobix Server with your account, it sends us the computer name, Windows user, version, the fingerprint of its SSH server and its address in your home network, and with “Remote access” also its public address and port. That way your Lumobix app finds it by itself. This stays with the account until you remove the server. Connections to your server never go through us.
Cookies and browser storage
This website only uses cookies it can't work without. That's why there's no cookie banner:
lumobix_sitzung: keeps you signed in after you sign in (up to 30 days or until you sign out).lumobix_geraet: only if you choose “Trust this device”; then your password is enough to sign in (90 days, 30 for the team).lumobix_sprache: the language you chose at the bottom of the page (one year).lumobix_vorschau: only during the preview, access for the Lumobix team (30 days).
In your browser's storage, the website also remembers your chosen design (lumobix-design, lumobix-modus), your name and picture for the display at the top right (lumobix-ich), the number of your last ticket (lumobix-ticket) and, only until you close the tab, where to continue after signing in. None of this leaves your browser.
Legal bases
- Account, plan, orders, tickets, Lumobix Server entries and confirmations by email: for the performance of the contract with you (Art. 6(1)(b) GDPR).
- Payments: statutory retention obligation (Art. 6(1)(c) GDPR).
- Security log, limits against too many requests, team log, anonymous statistics and protection against copies of the website: our legitimate interest in secure operation free of abuse (Art. 6(1)(f) GDPR).
Recipients
Our server runs on our own hardware. The connection to the website runs through Cloudflare (Cloudflare, Inc., USA; certified under the EU-U.S. Data Privacy Framework), which processes technically necessary data such as your IP address. We send emails through a delivery service in the EU. From launch, payments are handled by a payment provider that we will name here before plans can be booked. We conclude the necessary contracts with all service providers that process data on our behalf. Nothing is passed on or sold.
Support tickets
You write tickets with your account. To help you, we store the subject, description, category, the Lumobix version (if provided) as well as the name, email and user ID from your account. You can delete a ticket yourself at any time. We delete closed tickets no later than 180 days afterwards.
Your rights
You can request access to your data, have it corrected or deleted, have its processing restricted and receive your data in a common format. You download your data yourself as a file (Account → Profile → “Download my data”), and you delete your account and your tickets yourself; for everything else, send us a ticket or an email. You can also lodge a complaint with a data protection supervisory authority, for example in your country of residence or, in Luxembourg, with the CNPD.
Right to object: If we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process this data unless there are compelling legitimate grounds, such as defending against an attack.
Controller
Details of the provider will follow shortly.
Legal notices
The Terms of Use apply.
Copyright and intellectual property
Lumobix – the program with its code, the interface, the room and its graphics, the character Lumo as well as the texts, images and design of this website – is protected by copyright. All rights reserved. Use is permitted only within the scope of the Terms of Use.
Without our prior written permission, it is not permitted to copy, distribute, sell, rent out, modify or incorporate into other products Lumobix or parts of it; to reverse engineer or decompile the program, except where the law expressly permits it; to circumvent protection and verification mechanisms such as the signature check of updates; or to use the design, texts and graphics for your own offerings. The name and mark “Lumobix” may only be used with our permission.
We take action against infringements. We expressly reserve all legal steps – in particular claims for injunctive relief, information and damages, as well as filing a criminal complaint. Third-party components remain under their own licenses.
Lumobix is an independent program. It works together with Claude Code by Anthropic, which you use with your own Anthropic account. Claude is a trademark of Anthropic PBC. Lumobix is not affiliated with Anthropic and is neither endorsed nor reviewed by Anthropic.
Licenses
This website uses your system's fonts and no third-party images; it is built with React and Next.js (MIT). QR codes are generated by the “QR Code generator library” by Project Nayuki (MIT). Lumobix includes, among others, Python (PSF License), pywebview (BSD), cryptography (Apache 2.0/BSD) with OpenSSL (Apache 2.0), xterm.js (MIT) and the Monaco Editor (MIT); the full license texts come with the program (THIRD-PARTY-NOTICES). Lumobix only downloads the AI engine llama.cpp (MIT) and the AI models for Lumo during setup; the models are under their publishers' licenses, which Lumobix names before downloading. For conversations, Lumobix downloads the speech recognition whisper.cpp (MIT) with the Whisper model (MIT) and the speech output Piper (MIT) with the voices “Thorsten” and “Joe” (CC0) during setup.