Privacy Policy
Last updated:
Privacy Policy
Last updated: 1 August 2026 | Version 1.0
Lumetrix BV (“Lumetrix”, “we”, “us”, “our”), a company incorporated in Belgium, with registered office at Exelgaarden 20, 3550 Heusden-Zolder, Belgium, registered under company/VAT number BE 1029.601.154, is the data controller for the processing described in this Privacy Policy. This Policy explains how we handle personal data when you use the Lumetrix TV applications and the website lumetrix.tv (together, the “Service”), in accordance with the EU General Data Protection Regulation (GDPR) and Belgian data-protection law.
1. Our Approach (Privacy by Design)
Lumetrix TV is a media platform: it lets you organise and play media you supply yourself and launch third-party apps you already use. Your playlists, source URLs, credentials and media stay on your device or in your private account storage and are used only to provide the Service to you. We do not sell your data, we do not sell your media, and we do not build a commercial profile of what you watch. We collect the minimum data needed to run the Service.
2. Data We Process
a) Account data: e-mail, password (hashed), display name, language, license type and status.
b) Device data: device identifiers, device names, model, OS and app version (to manage your device license).
c) Library and settings data: metadata and settings required for features you enable (favourites, EPG configuration).
d) Diagnostic data: crash logs, error and performance data.
e) Usage/analytics data: aggregated, largely non-identifying information about feature use, only where you have consented (see Cookie Policy).
f) Connection data: IP address and session data, processed transiently for delivery, security and fraud prevention.
g) Purchase data: the app store (Google, Apple) processes your payment; we receive a purchase/subscription token and status, not your full card details.
We do not intentionally collect the content of your private media, and we do not collect special categories of data (health, religion, etc.).
3. Purposes and Legal Bases (Art. 6 GDPR)
- Provide the platform, accounts and device management: performance of a contract (Art. 6(1)(b)).
- Verify subscriptions and unlock features: contract (Art. 6(1)(b)).
- Security, fraud prevention, enforcing limits: legitimate interests (Art. 6(1)(f)).
- Diagnostics and stability: legitimate interests (Art. 6(1)(f)).
- Analytics and any marketing: consent (Art. 6(1)(a)).
- Legal, tax and accounting obligations: legal obligation (Art. 6(1)(c)).
4. AI Features (Future)
AI features such as AI-generated subtitles are not currently active or offered as part of the Lumetrix TV product. If such features are introduced in the future, audio would be processed entirely on your device to generate a text transcript. No audio or transcript data would leave your device. Transcripts would be displayed locally and not used to profile you.
5. Cloud Backup and Sync
Cloud backup and device synchronisation are currently not offered. If these features are introduced in the future, this Policy will be updated accordingly.
6. Sharing (Processors and Recipients)
We do not sell personal data. We share it only with processors acting on our instructions under a data-processing agreement (Supabase (EU region) for database, authentication and backend functions, Netlify for website hosting and CDN, and Resend for transactional e-mail), with app-store platforms for purchases, with authorities where legally required, and with a successor in a corporate transaction under this Policy.
7. International Transfers
Where a processor operates outside the EEA, we rely on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses or an adequacy decision. A copy can be requested via the contacts below.
8. Retention
- Account and library data: while your account is active, deleted within 90 days of account closure.
- Connection/security logs: 90 days.
- Diagnostics/analytics: not applicable — diagnostics stay on the device.
- Purchase and invoicing records: as required by Belgian tax law (up to 7–10 years).
- Support messages: 24 months after closure.
9. Your Rights
You have the right to access, rectification, erasure, restriction, data portability, objection (including to any direct marketing at any time), and to withdraw consent at any time. We do not carry out solely automated decision-making with legal effects. Exercise your rights via privacy@lumetrix.tv; we respond within one month. You may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.gegevensbeschermingsautoriteit.be, or with your local EU supervisory authority.
10. Account Deletion and Data Export
You can delete your account and export your personal data from within the app and via lumetrix.tv/legal/account-deletion. See the Account Deletion and GDPR pages for details.
11. Children
The Service is intended for users aged 18+ and is not directed at children. We do not knowingly collect data from children.
12. Security
We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, access controls and data minimisation. We will notify you and the authorities of a personal-data breach where legally required.
13. Changes
We may update this Policy; the current version is always on lumetrix.tv with a revised date. Material changes are notified where required.
14. Contact
Lumetrix BV, Exelgaarden 20, 3550 Heusden-Zolder, Belgium — BE 1029.601.154
- Privacy: privacy@lumetrix.tv
- General: info@lumetrix.tv