Privacy Policy
Lumen Circle has no servers. What the app knows about your home is stored on your device and stays there. You need no account, you never sign in anywhere, and nothing is analysed.
What data the app needs
- Home (HomeKit)
- Rooms, devices, names, scenes and sensor readings. The app reads them straight from HomeKit and writes switching commands back to it. None of this leaves the device.
- Location — weather
- Apple’s weather service (WeatherKit) receives your rough position so it can deliver the forecast for your area. It is not used for anything else. If you refuse the permission, only the weather card stays empty; everything else keeps working.
- Location — leaving alert
- If you switch the feature on, you set your home location once. That location is stored on the device and never sent anywhere; iOS then watches the zone and wakes the app when you leave it. Out of the box, the feature is off.
- Hue Bridge on the home network
- For the energy meter, the app talks directly to your Hue Bridge on the home network, encrypted and with it alone: it checks the bridge’s certificate and accepts no other. The key the bridge hands out after you press its button is stored by the app in the device’s keychain; it does not leave the device. For this, iOS asks once for access to the local network. You can disconnect at any time in Settings.
- Consumption profiles — Powercalc
- Hue lamps do not measure their own consumption. For every lamp model the bridge reports, the app fetches a measured profile once from the open library of the Powercalc project (api.powercalc.nl, with the measurement series from GitHub). What goes out is the model identifier as printed on the box, such as “LCT015”, and nothing else: no name, no location, no identifier for your home, and not how many lamps you have. Each model is looked up at most once, and the result stays on the device. Offline, the app works with an estimate and says so. The data is available under the MIT licence.
- Microphone — Party mode
- Party mode measures the volume to keep the lights on the beat. Only the level is analysed, directly on the device. No recording is made: the sound is discarded as soon as the number has been read from it.
- Notifications
- Threshold, leaving and energy alerts are generated locally on the device. There is no push service and no server of ours behind them. The energy alerts are off out of the box.
- Settings
- Palette, thresholds, the order of the tiles, your electricity price, the energy alerts, the home location for the leaving alert and the state of the trial are kept in the app’s local settings.
- Shared folder for widgets and complications
- A widget runs for seconds rather than continuously, so it cannot ask HomeKit itself. The app therefore places four files in a folder that only it and its own extensions can read: a snapshot with room names, light states, outdoor temperature and CO₂ value, a measurement history of the last 24 hours for the charts, the readings of the energy meter (hourly for 90 days, daily for five years) and the learned lamp profiles. All of it stays on the device and disappears with the app.
- Apple Watch
- The watch app talks to HomeKit itself and keeps its own snapshot on the watch. Nothing of ours travels between phone and watch; iOS mirrors notifications to the wrist on its own.
- Shortcuts and Siri
- Rooms and scenes are offered to iOS as options for Shortcuts so that Siri can switch them. What Siri processes of your request depends on Apple’s settings, not ours.
- Live Activity on the Lock Screen
- A running room timer appears as a Live Activity. It shows the room name and the remaining time and runs through iOS on the same device.
Purchase
Unlocking goes through the App Store. Apple handles payment and receipt; the app only learns whether it is unlocked, not who bought it. There is no other payment provider. Apple’s privacy policy governs how Apple handles this data.
No tracking
There is no advertising identifier in the app and no library that analyses your behaviour. Crash reports go to no one, and this website sets no cookies. The app never asks for tracking permission, because there is nothing to track.
Your rights
No personal data ends up with us. So we can neither give you access to it nor delete anything: there is simply nothing there. Everything the app has stored disappears as soon as you delete it from the device, or when you choose Factory reset in Settings. That also clears the Hue Bridge key from the keychain.
Contact
Last updated: September 2026.