Privacy Policy

Last updated: August 1, 2026

LuxaSmartFrame ("we", "our", or "the app") is a dedicated digital ambient display application operated by Laurentiu Gheorghisan, Bucharest, Romania. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

1. Information We Collect

Photos and videos. LuxaSmartFrame accesses photos and videos from your device gallery or connected Google Photos account solely to display them in the slideshow. Photos and videos are processed and cached locally on your device. We do not upload, store, or transmit your photos or videos to any external server.

Google Photos access. We use the Google Photos API (Picker API and Ambient API) to allow you to select and display your media. This access is used exclusively for personal display on your device.

Google Calendar access. If you enable the Digital Calendar or Digital Agenda presets, LuxaSmartFrame uses the Google Calendar API to read your calendar events. This information is used only to display your schedule on the dashboard. We do not store, share, or transmit your calendar data to any external servers.

Self-hosted / On-device AI Processing. All AI-powered features (such as face detection, alignment, and smart curation) use a self-hosted on-device machine learning model (via Google ML Kit). These operations run entirely offline and locally on your physical device. No raw or derived user data (including photo data or calendar information) is sent to, processed by, or shared with external servers or third-party AI services.

2. Google API Limited Use Disclosure

LuxaSmartFrame's use and transfer of information received from Google APIs (including raw or derived user data received from Google Workspace or Google Photos APIs) to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Data Protection & Security Measures

LuxaSmartFrame is built as a fully local, on-device application: for sensitive or restricted data such as your Google Photos content and Google Calendar events, no LuxaSmartFrame-operated server exists to receive, store, or process it. We apply the following safeguards to protect this data:

• Encryption in transit. All communication with Google APIs (Photos, Calendar) and any other connected cloud source (Dropbox, OneDrive, Box, Immich, WebDAV) uses HTTPS/TLS. LuxaSmartFrame never transmits your data over an unencrypted connection.
• Secure credential storage. Google sign-in and OAuth session management is handled entirely by Google's native Sign-In SDK, which stores and refreshes credentials using the operating system's secure credential storage (the Android account manager, backed by Android Keystore, on Android; the Keychain on iOS). LuxaSmartFrame does not read, copy, or persist your raw OAuth tokens in its own application storage.
• Sandboxed local storage. Cached photos, videos, and calendar data are written only to the app's private, OS-sandboxed storage area, which is inaccessible to other apps on your device.
• Encryption at rest. On both Android and iOS, app-private storage resides on the device's encrypted storage volume (enabled by default on all supported Android and iOS versions), so cached content is encrypted at rest whenever your device's screen lock or passcode is enabled.
• User-controlled deletion. You can permanently delete all locally cached sensitive data at any time — see Section 6, "Data Retention and Deletion."

4. How We Use Your Information

We use the information described above to:

• Display your photos and videos in the slideshow
• Provide AI-powered curation and face-aware framing
• Display your Google Calendar events on the dashboard
• Show weather information based on your location

5. Data Sharing and Sale

We do not sell, share, or transfer your personal data, photos, or calendar events to third parties. Your data remains strictly on your device.

6. Data Retention and Deletion

All photo and calendar data is cached locally on your device for performance and offline use. We do not operate servers that store your media content or schedule. You can delete all locally cached data at any time by:

• Using the "Disconnect" or "Clear Cache" button in the app settings
• Signing out of your Google account within the app
• Uninstalling the application

7. Third-Party Services

LuxaSmartFrame integrates with the following third-party services:

• Google Photos API — to access your albums and media (when connected by you)
• Google ML Kit — for on-device face detection (no data leaves your device)
• Weather services — to display local weather (only approximate location is used)

Each third-party service is governed by its own privacy policy.

8. Children's Privacy

LuxaSmartFrame is not directed at children under the age of 13. We do not knowingly collect personal information from children.

9. Your Choices

You can revoke Google Photos access at any time through your Google Account settings. You can disable location access through your device settings. You can clear all cached data by uninstalling the app.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the app or on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at laurentiugh@gmail.com.