Nothing
leaves the
device.

No account, no profile

LutKit never asks for your name, your email, a password, a phone number or a date of birth. There is nothing to sign into and nothing to sign out of. Your settings, your LUT library and your presets live in the app's own storage on your device and are included in your device backup like any other app's data.

Analytics

LutKit uses one third-party service, Amplitude, Inc., for basic product analytics. It is the only third-party code in the app. It is never used for tracking or advertising, and hloo never sells it or shares it with data brokers.

What it collects: a device identifier (Apple's identifier-for-vendor, or a random ID Amplitude's SDK generates — never your name, email or account); coarse location such as your city, region or country, which Amplitude works out from the IP address of the request — LutKit never asks for location permission and never reads your GPS; and a short list of product events, such as opening the editor, completing an export, completing a purchase, and viewing an upgrade offer.

LutKit still has no advertising identifier and no crash reporter of its own, and there is no App Tracking Transparency prompt, because nothing here is used to track you across other apps or websites. Amplitude keeps this data only as long as it is useful for analytics.

If you have turned on Share With App Developers in your own iOS or macOS privacy settings, Apple may separately send hloo an anonymised crash or usage report. That is Apple's own channel, it is off unless you switched it on, and it carries no personal data and none of your footage.

Your footage and your LUTs

Clips are opened, decoded, graded and exported entirely on your device, using its own video hardware. No frame is ever uploaded, and LutKit has no ability to upload one.

• The clip you import is never modified. An export always writes a new file.
• Imported .cube files are copied into LutKit's own storage so the library keeps working if you move or delete the original.
• Exports go where you choose: your photo library, or a folder in Files or Finder.
• Deleting the app deletes everything it stored, including the LUT library. It does not touch your exports or your original clips.

Photos and file access

LutKit asks for photo library access for two reasons only: to read the clip you picked, and to save an export you asked for. You can grant access to selected clips only, and the app works normally that way. Nothing is scanned in the background, and nothing is read that you did not choose.

When you export to a folder instead, macOS and iOS hand LutKit access to that one folder, and nothing else on the disk.

Purchases

Buying LutKit Pro or a look goes through Apple's in-app purchase system. Apple takes the payment and holds the receipt; hloo never sees your card, your billing address or your Apple Account.

What LutKit keeps is the answer to one question: whether Pro is active and which looks you own. It is stored on the device so the app is not wrongly locked while it is offline. That record contains no identity, no transaction detail and no price, and it is never sent anywhere.

Completing a purchase also sends one analytics event to Amplitude: the product, its price, its currency, and whether it was a trial. No card number, billing detail or Apple Account information is ever part of it — the app never sees those in the first place. Beyond that event and Apple's own systems — asking the App Store what the products cost in your country, completing a purchase you started, and restoring purchases when you ask it to — LutKit makes no other network requests.

Children

LutKit is made for people shooting and grading video, and is not directed at children. It does not knowingly collect anything, analytics included, from children, and nothing in the app is built to identify or single out anyone by age.

This website

get.lutkit.here.now is a static site hosted on here.now. It loads a web font from Google Fonts; beyond that it sets no cookies, runs no analytics and builds no profile of you.

One page is the exception. The beta sign-up stores the email address you type into it, and the name too if you give one, for one purpose: sending you a TestFlight invitation. It is not a mailing list, it is not shared with anyone, and it is deleted when the beta ends. Ask at the address below and it will be deleted sooner.

Your rights

Rules like the GDPR and the CCPA give you the right to see the personal data a company holds about you, correct it, have it deleted, and know who it was sold to. LutKit holds very little, and none of it has ever been sold: the analytics identifier and events described above, tied to your device rather than to you by name.

Email lutkit.app@proton.me to request access to, or deletion of, the analytics data tied to your device. The other exception is a beta sign-up email, and the paragraph above says how to have that removed.

If this policy changes

The date at the top says when it last did. If LutKit starts collecting anything new, this page will say so before the version that does it ships, and the App Store privacy label will say so too.

Getting in touch

Questions about privacy, or about anything else in the app: lutkit.app@proton.me.