Privacy

lumikey is a desktop app. Everything it does with your music happens on your computer: downloading and transcribing a recording, working out the hands, listening to your MIDI keyboard or microphone, and storing your library. None of it is uploaded anywhere.

The app connects to the internet for three things: fetching the audio for a link you paste, keeping its downloader up to date, and checking lumikey.app for updates. The first time it runs it opens a welcome page on this site in your browser, and that is how we count installs. No account is needed.

The app sends us anonymous usage events through PostHog: that it was opened, that an import succeeded or failed and how long it took, that a song was played and with which settings, and any crash. Each install has a random id; no song titles, links, recordings, notes or anything you play are ever included. You can turn this off in settings.

The app also runs a small local API so scripts and AI assistants on your computer can drive it. It listens only on your own machine, with a key kept there, unless you switch on local network access in settings; that lets devices you pair by scanning a code reach it over your Wi-Fi, encrypted, and nothing else. There is no server in between.

If you buy a licence, Stripe takes the payment and we never see your card. We keep only your email address, to send you the key and to answer if you write to us; the key itself is signed for that address and checked by the app offline.

This website counts page views, downloads and purchases with PostHog, under a random visitor id kept in a cookie so a download can be matched to the install it became. No ad networks, no third-party tracking.

Questions: hello@lumikey.app