80 lines
6.7 KiB
Plaintext
80 lines
6.7 KiB
Plaintext
LUMI COMPANION PRIVACY NOTICE
|
||
Effective date: 23 July 2026
|
||
|
||
This notice describes the default data behaviour of the Lumi Companion Windows application. It does not replace the privacy notice of the person or organisation operating the Lumi host to which Companion is paired.
|
||
|
||
1. WHO IS RESPONSIBLE
|
||
|
||
Companion is client software developed by OokamiKunTV. It can connect to Lumi installations operated by different people or organisations.
|
||
|
||
The person or organisation operating the paired Lumi installation is normally responsible for deciding why and how server-side personal data is processed through that installation. That operator is referred to here as the “Host Operator”. The installer shows the paired host URL when it can read one from the adjacent pairing package.
|
||
|
||
The host URL identifies a technical endpoint, not necessarily the Host Operator’s full legal identity. Obtain the operator’s identity, contact details, purposes, legal bases, recipients, retention periods, and rights information from the operator or the paired Lumi WebUI.
|
||
|
||
OokamiKunTV is not automatically responsible for processing performed by an independently operated Lumi host. If OokamiKunTV also operates the paired host or receives information for support, security, or another stated purpose, responsibility for that processing follows the actual arrangement and applicable law. This notice does not override statutory controller or processor roles.
|
||
|
||
2. DATA STORED ON THE WINDOWS COMPUTER
|
||
|
||
Companion may store the following under the current Windows user profile:
|
||
|
||
- settings, selected source identifiers, and feature preferences;
|
||
- a random installation identifier;
|
||
- a device credential containing the paired host address, device identifier, secret, capabilities, and protocol version;
|
||
- short-lived diagnostic log files containing timestamps, connection and component events, error messages, host addresses, device names, and potentially caption or test text;
|
||
- staged update files while an update is being prepared; and
|
||
- a copied one-time pairing package until it is successfully used, found redundant, manually removed, or expires.
|
||
|
||
The device credential is protected with Windows Data Protection API for the current Windows user. This reduces casual disclosure but does not protect against every compromise of the Windows account or device.
|
||
|
||
Diagnostic logs are pruned after seven days and capped at a combined 256 MiB by default. Uninstalling Companion may leave the per-user settings, credential, installation identifier, logs, and update directory in %LocalAppData%\Lumi\Companion so that reinstalling does not silently create a new authorised device. Use “Forget this device” before uninstalling when available, revoke the device from the Lumi host, and delete that folder manually if you want the remaining local data removed.
|
||
|
||
3. DATA SENT TO THE PAIRED LUMI HOST
|
||
|
||
Depending on the features you enable, Companion may send:
|
||
|
||
- the computer or device name, installation identifier, Companion version, protocol version, capabilities, and component status;
|
||
- OBS state and selected-source information;
|
||
- audio from the OBS source you select, converted to 16 kHz mono signed 16-bit PCM and transmitted in bounded frames;
|
||
- readiness, test, benchmark, connection, and diagnostic information; and
|
||
- settings or control messages required for enabled Companion features.
|
||
|
||
Raw audio is held in bounded memory and is not written to disk by Companion by default. Audio is transmitted to the paired Lumi host for server-side processing. The Host Operator controls the server-side speech model, storage, logs, caption delivery, integrations, and retention. Review the Host Operator’s notice before enabling capture.
|
||
|
||
You are responsible for having authority to capture and transmit audio or other information, including informing participants and obtaining consent where required.
|
||
|
||
4. NETWORK CONNECTIONS
|
||
|
||
Companion connects to:
|
||
|
||
- the host and exchange URL contained in the pairing package;
|
||
- the paired Lumi host over secure HTTP and WebSocket connections, except for an exact matching loopback host where local unencrypted transport is permitted; and
|
||
- an update artifact URL supplied by the paired Lumi host when you approve or initiate an update.
|
||
|
||
Companion does not include advertising or general-purpose analytics telemetry in the inspected release. It does not send data directly to OokamiKunTV merely because OokamiKunTV wrote the software. An independently operated host may add integrations or server-side logging outside Companion’s control.
|
||
|
||
5. PURPOSES AND LEGAL BASES
|
||
|
||
Local processing is performed to pair the device, remember settings, operate enabled features, diagnose failures, verify components, and apply approved updates.
|
||
|
||
The Host Operator determines the purposes and legal bases for server-side processing. Depending on the context, those bases may include performance of a contract, legitimate interests, consent, legal obligations, or another basis available under applicable law. Contact the Host Operator for the basis that applies to your use.
|
||
|
||
6. RETENTION AND DELETION
|
||
|
||
Local diagnostic logs follow the default limits described above. Credentials and settings remain until removed by the user, the application, or the operating system. Pairing tokens are designed to be single-use and expire after the period stated in the pairing package.
|
||
|
||
Server-side retention is controlled by the Host Operator and may differ from local retention. Deleting local data does not automatically delete data already sent to the host. Revoking a device on the host does not necessarily delete prior server-side logs or content.
|
||
|
||
7. SECURITY
|
||
|
||
Companion validates the pairing origin, normally requires HTTPS, protects the device credential with Windows user-scoped encryption, verifies update checksums, and keeps raw audio in bounded memory by default. No security measure is perfect. Keep Windows, OBS, Companion, and the Lumi host updated; protect the Windows account; and revoke devices that are lost, shared, or no longer trusted.
|
||
|
||
8. YOUR RIGHTS
|
||
|
||
Depending on applicable law, you may have rights to information, access, correction, deletion, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority.
|
||
|
||
For data held by the paired Lumi host, direct requests to the Host Operator. For local data, use Companion controls where available, revoke the device from the host, and remove the local Companion data directory. For information actually received and controlled by OokamiKunTV, use the official Lumi project contact channel through which that processing occurred.
|
||
|
||
9. CHANGES
|
||
|
||
This notice may be updated when Companion’s data behaviour changes. The effective date identifies the version of the notice supplied with the installer. Material changes should be presented with a new release or through the relevant Host Operator.
|