This policy covers the Luxio mobile apps, controller firmware and discovery service operated by Emile B.V. Luxio does not require an account and has no advertising or analytics SDKs in its mobile apps. We do not use discovery data for advertising, profiling or tracking across other companies’ apps and websites.
Finding your controllers
The apps first look for controllers on your local network. They can also contact api.luxio.lighting to find controllers using the same public internet connection. The service uses the request’s public IP address to match recent controller announcements. The production API and reverse proxy do not retain request logs.
Controllers announce the following information to the discovery service, which stores the latest record for each controller:
- Public internet (WAN) IP address and local network (LAN) IP address.
- Controller name, which you can choose.
- Device identifier and public key, used to verify controller announcements. The private key stays on the controller.
- Firmware build, update channel, and creation and last-announcement timestamps.
We use this information to discover controllers and identify their firmware. A controller name may contain personal information if you put it there. Discovery results disclose the controller’s name, identifier, local IP address, firmware details and last-announcement time to clients connecting from the same public IP address.
Local control and settings
Colors, gradients, animations and device settings are sent directly to the selected controller over your local network or Bluetooth. App preferences and Simulator data are stored locally. Saved controller presets are stored on that controller; they are not uploaded to the discovery service.
Wi-Fi credentials used during setup are sent to the selected controller, not to the discovery API. Local-network and Bluetooth permissions enable device discovery and control. On Android 11 and earlier, Bluetooth discovery may require the system’s location permission; Luxio does not use it to obtain your geographic location.
The public discovery and firmware services use HTTPS. Local HTTP communication with controllers is not encrypted. Matter integrations are optional and are subject to the privacy practices of the platform you connect.
Retention and deletion
Controllers that have not announced for one hour are excluded from discovery results. This does not delete their stored record: controller records currently have no automatic expiry and remain until removed. Temporary verification challenges expire after two minutes and are removed automatically.
For questions or a request to delete stored discovery information, contact info@luxio.lighting. Include your controller’s device identifier if available; do not send passwords or private keys. A controller that continues announcing can recreate its record after deletion.
Removing the app deletes its local app data, subject to your operating system’s backup and restore settings. It does not erase presets on your controller or its discovery record.
Service providers and contact
Hosting and network providers process information needed to deliver the service. We do not sell discovery data or share it with advertising networks. If you contact us, we use the information you provide to respond and handle your request.
The Luxio website is hosted on GitHub Pages. GitHub processes website requests under its privacy statement. Links to other services open under those services’ own privacy policies.
Emile B.V. · info@luxio.lighting