Privacy Policy

Effective October 4, 2026

Chanchan does not collect personal information.

There's no account or sign-in, and we don't run any servers. Your photos, videos, sorting history, and analysis results are stored only on your device, and Lumos Lab can't receive or see them. We don't use ads, analytics, or tracking.

The app itself sends only one thing off your device: location coordinates, sent to Apple's map service to name a trip after a place. What iOS exchanges with Apple for purchases and iCloud Photos, and whatever you send us if you contact us by email, are explained separately below.

This website and our inquiry email run on services from two U.S. companies, Cloudflare and Google. Section 6 explains what website access records and inquiry emails they handle for us.

1. Information handled and why

We don't collect or process any personal information. The table below lists what the App handles only on your device. None of it is sent to us.

InformationUsed forStored in
Photos, videos, and their metadata (date taken, location, favorite, albums, and so on)Showing them one at a time and carrying out your decisions, such as adding to albums or deletingYour photo library (the App reads it and only makes changes you choose)
Sorting history (decisions, position, undo history, statistics, settings)Letting you pick up where you left offThe App's private storage on your device
Analysis results (similar photo groups, blur, topics, face quality, barcodes, trips and events)Similar photo groups, topic and blurry photo sessions, protection badgesThe App's private storage on your device
A small image of one photo for the widget, a progress summary, and decisions made in the widgetShowing the Home Screen widget and applying decisions made thereA shared container on your device used only by the App and its widget (App Group)
Purchase status (whether you have Pro)Keeping Pro features available offlineThe shared container on your device (App Group)

Photo analysis runs on your device using Apple's built-in Vision framework. It only uses small images already on your device and never downloads originals from iCloud for analysis.

Album name suggestions are only available on devices that support Apple Intelligence. Up to 4 of the photos you selected are scaled down and given to Apple's on-device language model (Foundation Models), which suggests names.

2. What leaves your device

The App sends nothing to us. In the cases below, iOS features exchange information with Apple services, and Apple handles that information under its own privacy policy.

  • Place names (reverse geocoding): After grouping photos taken close together in place and time into trips and events, the App sends one representative coordinate for each group to Apple's map service (MapKit) to title it with a city name. No photos or other information are sent. Names are saved on your device by area (about 1 km), so the same place isn't looked up twice. If there's no connection or the lookup fails, the title uses dates instead. This is the only place the App itself uses the network.
  • iCloud Photos: If you use iCloud Photos and an original isn't on your device, iOS downloads it from your iCloud when you view a photo full size, play a video, or compress, convert, or export it.
  • Purchases: Purchases, subscriptions, and restores are handled by Apple's App Store. The App uses Apple's StoreKit only to check whether your Apple Account has Pro.
  • Statistics Apple provides to developers: If you've turned on “Share with App Developers” in iOS Settings, Apple may give us crash logs and usage statistics in a form that doesn't identify you. We also see sales and download totals compiled by Apple in App Store Connect. We don't use this information to identify anyone.
  • Things you send yourself: If you share a share card from the Stats screen, or choose a folder such as iCloud Drive when exporting files, it goes where you choose. Share cards don't contain photos.

The App doesn't ask for location permission. It only uses location data already recorded in your photos.

3. Email inquiries

If you email us, we receive your email address and the content of your message, including anything you write or attach, so that we can reply. We use it only to answer your inquiry and any follow-ups, keep it for 1 year after the inquiry is resolved, and then delete it, unless the law requires us to keep it longer.

Inquiry emails pass through Cloudflare's email forwarding service and are received and stored in the Gmail account we use, provided by Google. See section 6 for how this processing and international transfer work. You can also contact us by phone instead of email (section 13).

You never need to send us photos.

4. Retention and deletion

  • We don't keep any personal information about App users (see section 3 for email inquiries).
  • Sorting history and analysis results on your device are deleted when you delete the App. You can also clear only your decisions and progress with Reset Decisions in Settings.
  • Sorting history may be included in your iOS device backup, including iCloud Backup. Analysis results are excluded from backups. Backups are stored in your Apple Account, and we can't see them.

5. Sharing with third parties

Not applicable. We don't share your personal information with third parties.

6. Processors and international transfers

The App: Not applicable. App data never leaves your device to reach us, so we don't have anyone process personal information about App users on our behalf, and we don't transfer it abroad.

This website and inquiry email: To provide this website and answer email inquiries, we have the two companies below process personal information on our behalf, which involves transferring it outside Korea. This processing and storage is necessary to provide the website and handle inquiries, and we disclose the details of the transfer in this policy as required by Article 28-8(1)(3) of the Korean Personal Information Protection Act.

Cloudflare, Inc.

Service providedHosting and security for this website, and forwarding of inquiry email sent to hello@lumoslab.app (Cloudflare Email Routing)
Information transferredWhen you visit the website: IP address, the address requested, browser information, and time of access. When email is forwarded: the sender's email address and the content of the message
Destination countryUnited States. Depending on where you connect from, data may pass through other countries where Cloudflare has data centers.
When and howSent over the network when you visit the website or send email to hello@lumoslab.app
Recipient and contactCloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; Data Protection Officer, dpo@cloudflare.com
PurposeProviding and securing the website, and forwarding email
RetentionAccess records: as set out in Cloudflare's privacy policy. Email is processed only while being forwarded, and Cloudflare does not store message content.

Google LLC

Service providedReceiving and storing inquiry email (Gmail)
Information transferredThe sender's email address and the content of the inquiry, including anything you write or attach
Destination countryUnited States. Google may also process information on servers in other countries.
When and howSent over the network when email to hello@lumoslab.app arrives through Cloudflare
Recipient and contactGoogle LLC; for privacy questions, the contact channel listed in Google's Privacy Policy (policies.google.com/privacy): support.google.com/policies
PurposeReceiving and answering inquiries
Retention1 year after the inquiry is resolved, or longer if the law requires

How to refuse, and what happens if you do: If you don't want your information transferred abroad, you can choose not to visit this website and contact us by phone (050-1913-3193, Korea) instead of email. In that case you won't be able to view the website or receive answers by email, but your use of the App is not affected. You can ask us to delete an email you've already sent, as described in section 10.

7. Permissions

  • Photo library (required): Used to show your photos and videos and to add photos you choose to albums or delete them from Trash. The App works with Limited Access (selected photos only), with album features turned off. You can change this anytime in Settings > Privacy & Security > Photos.
  • Add photos (when using tools): Used to save compressed videos and converted photos to your library.
  • Notifications (optional): Used for On This Day, weekly cleanup, items left in Trash for a while, and a reminder 2 days before a free trial ends. Notifications are scheduled on your device, not sent from a server. You can turn each type off in the App's settings, or revoke the permission in the Settings app.

The App doesn't ask for location, camera, microphone, or contacts permission.

8. This website

  • This website doesn't use cookies and doesn't load any outside resources such as analytics or ad scripts or web fonts.
  • The website is hosted by Cloudflare. When you visit, records such as your IP address, the address requested, browser information, and time of access may be kept by Cloudflare for security and operations, and are handled under Cloudflare's privacy policy. We don't use these records to identify visitors. Section 6 gives details of this processing and international transfer.

9. Children

The App doesn't collect personal information from anyone, whatever their age. We don't knowingly collect personal information from children under 14. If we learn that a child under 14 has emailed us without consent from a parent or guardian, we will delete that information promptly.

10. Your rights

  • You control the information on your device. Deleting the App or using Reset Decisions removes it, and you can revoke photo and notification access anytime in the Settings app.
  • For information we received through an email inquiry, you can ask us to show, correct, delete, or stop processing it. Contact us below and we will act promptly. A legal representative or someone you authorize can also make the request.

11. Security

  • The App's data files are protected with iOS Data Protection (on-device encryption).
  • Because we don't receive App users' data, we don't store it on any server. Email inquiries are accessible only to the people who handle them.

12. Cookies and similar technologies

Not applicable. Neither the App nor this website uses cookies or similar tracking technologies.

13. Privacy officer and contact

Privacy officerGwangCheon Shin, Representative
Emailhello@lumoslab.app
Phone050-1913-3193 (Korea)
HoursWeekdays 10:00–18:00 KST, except Korean public holidays
OperatorLumos Lab (루모스랩), Business Registration No. 299-11-03054, 22-11 Dasanjungang-ro 82beonan-gil, Namyangju-si, Gyeonggi-do, Republic of Korea

14. Further help in Korea

For advice or to report a privacy violation, you can also contact these Korean agencies:

  • Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
  • Privacy Infringement Report Center (KISA): 118, privacy.kisa.or.kr
  • Supreme Prosecutors' Office: 1301, www.spo.go.kr
  • Korean National Police Agency: 182, ecrm.police.go.kr

15. Changes to this policy

If we change this policy, we will post the changes and their effective date on this website at least 7 days before they take effect, or at least 30 days before for significant changes to your rights, such as starting to collect information.

This policy takes effect on October 4, 2026.