lumento LOAD
LOAD sends your photos and videos from your iPhone to your own NAS. Nothing goes to me or to anyone else. I have no server, no accounts, no analytics, no advertising and no tracking.
What LOAD uses, and where it goes
Your photo library
LOAD reads the photos and videos you choose to archive and uploads the original files to lumento STORE on your own NAS. Originals include whatever metadata the camera saved in them, such as date, time and, if location services were on, location. They go to your NAS and nowhere else.
Your local network
LOAD looks for lumento STORE on your network so it can pair with it. It doesn't scan for or talk to anything else.
Pairing details
When you pair, LOAD tells your STORE this iPhone's name, its iOS version and a random identifier that LOAD makes on this phone. It isn't tied to your Apple ID or to any other app. This lets your STORE recognise the phone. If you type a name under the pairing code, that goes to your STORE too, and you can change or clear it in Settings.
Notifications
LOAD's notifications are created on your iPhone. LOAD doesn't register for push notifications, and no notification server is involved.
On your iPhone
LOAD keeps its pairing credentials and your STORE's certificate fingerprint in the iOS Keychain, set never to sync to iCloud, and a record of upload progress in a local database. These stay on the phone. "Forget This Server" in Settings removes the pairing and tells your STORE to remove this phone. Deleting the app removes the upload record. The random identifier stays in the iOS Keychain, so your STORE sees the same phone if you reinstall LOAD.
What I receive
Nothing. The connection runs directly between your iPhone and your NAS. It's encrypted, and LOAD checks it against the certificate your STORE presented when you paired. I have no copy of your photos, your pairing details or anything else, and no way to get one.
LOAD contains no third-party analytics, advertising or tracking code. It uses two outside libraries, and both run entirely on your iPhone: GRDB, a database, and spake2p, lumento's own pairing library.
Apple
Apple distributes LOAD through the App Store and processes data under its own privacy policy. If you've chosen in iOS Settings to share analytics with app developers, Apple may give me anonymous crash reports and usage statistics. You can turn this off under Settings → Privacy & Security → Analytics & Improvements.
Your data, your NAS
Everything LOAD uploads is stored on hardware you own and is under your control. Who can see it there depends on how you've set up your NAS and lumento STORE.
Children
LOAD collects no data from anyone, including children.
Changes
If LOAD ever starts sending data anywhere other than your own NAS, this page will say so before that version is released.
Contact
Questions: hello@lumento.one. The website operator and legal details are in the Impressum.
Effective 30 September 2026.
lumento KEEP
KEEP runs on your own NAS and only reads your files. It has no accounts, no analytics, no advertising and no tracking. It makes one kind of outside request: it asks this website for updated advice.
What KEEP fetches, and what it sends
The advice update
At most once a week, and when you press "Check now", KEEP fetches https://lumento.one/keep/rules/v1/rules.json and rules.json.sig over HTTPS. These files hold the advice KEEP shows you. The signature lets KEEP check that the file really comes from lumento before it uses it.
What the request contains
It is an ordinary web request. It sends your NAS's IP address, which this website's host, GitHub Pages, sees as it does for any visitor, a User-Agent: lumento-KEEP/<version> header that names KEEP and its version, and an If-None-Match header so an unchanged file isn't downloaded again. It sends no box name, no serial number, no share, no file name and no measurement of your NAS.
Your choice
The update is on by default. KEEP tells you so when you install it, and there is an off switch on KEEP's settings page. With it off, KEEP uses the advice built into the version you installed and makes no outside request.
KEEP itself sends nothing else. Its alerts go to ADM's System log; if you have set up ADM notifications, ADM sends them to you by e-mail or push.
Changes
If KEEP ever sends anything more than this, this page will say so before that version is released.
Questions: hello@lumento.one.
lumento ONE
ONE runs on your own NAS and shows your photos and videos in your browser. It makes no requests to the internet. It has no accounts of its own, no analytics, no advertising and no tracking.
What ONE keeps, and where
On your NAS
ONE only reads your photos and videos. It never changes them and never writes into your shares. In its own data folder on the NAS it keeps an index of your library (folder and file names, dates, sizes and the metadata it reads from the files), thumbnails and converted copies, your projects and marks, and a log. Uninstalling ONE deletes all of it. Upgrading keeps it.
Sign-ins
You sign in with the accounts your NAS already has. ONE doesn't store your password: ADM checks it. ONE keeps your sign-ins and the devices you've signed in on, and stores the sign-ins only as fingerprints, so a copy of its database can't be used to sign in.
In your browser
ONE sets cookies that keep you signed in and remember choices made on that device, such as the classic or modern view. They're sent only to your NAS.
Who can see your library
Each person sees only the folders ADM lets them read. Who that is depends on how you've set up accounts on your NAS.
What ONE sends, and to whom
lumento STORE, on your network
If you pair ONE with lumento STORE for camera-card import, ONE tells your STORE a name for this NAS, such as "lumento on AS6704T", its ADM version and a random identifier that ONE makes. Cards you import go from your browser, through ONE, to your STORE. All of this stays on your own network.
Links
ONE's About page links to this website and to Ko-fi. Your browser opens them only when you click them, and from then on those sites' own policies apply.
What I receive
Nothing. I have no copy of your photos, your accounts or anything else, and no way to get one.
Asustor
Asustor distributes ONE through App Central and processes data under its own privacy policy.
Changes
If ONE ever starts sending data anywhere other than your own NAS and network, this page will say so before that version is released.
Questions: hello@lumento.one.
Effective 21 October 2026.