Privacy

Last updated October 4, 2026

Luxe is built so your photo library stays on your Mac. This page explains what stays there, what leaves it when you choose to share, and how to delete it.

On your Mac

Luxe reads the folders and Photos library you choose. Everything it works out about your photos stays in Luxe’s own folder on your Mac. That includes scores, descriptions, keywords, places, albums and search indexes. The AI models run on your Mac.

People & Pets. To group photos of the same person or pet, Luxe finds faces and cat and dog heads in your photos and turns each one into a list of numbers that only matches the same face or pet. This happens entirely on your Mac. The numbers, the small face crops and the names you give people are kept in Luxe’s folder and are never sent anywhere, used for anything else, or shared with us or anyone. Sharing a Moment never shares face data. Names are shared only if you choose to include them in a Moment’s captions (“Include people’s and pets’ names”, off unless you turn it on). If you turn on write-back, the names you give are written into your photo files as keywords, like other keywords. To remove a person’s face data, hide them in People; to remove all of it, delete Luxe’s folder (below).

When you turn on write-back, Luxe writes keywords, ratings and captions into your photo files or their sidecar files. In the Photos library, it writes albums. These stay on your Mac too.

Luxe downloads its AI models once, from models.luxephotoai.com and from Hugging Face (huggingface.co). Like any download, those servers see your IP address. No information about your photos is sent with those requests.

When you share

Sharing is optional and needs an account. When you sign in with Apple or Google, we receive your name, your email address (Apple may give us a private relay address instead) and an account identifier. We use these to show who shared what, to let you manage your groups, and to reach you about your account.

When you share a Moment with a group, Luxe uploads:

• A display-size copy of each photo you choose (up to 2560 pixels on the long side, or 1280 on the short side for panoramas) and a small thumbnail, with location and camera information removed. Your originals are never uploaded.
• The Moment’s title, dates and place, and each photo’s caption and date if you choose to include them.
• Which member shared or added each photo.

If you buy Luxe Pro, Apple handles the payment. Luxe receives Apple’s signed record of the purchase and keeps its transaction ID, product and date with your account, so it can unlock sharing more Moments. We never see your payment details.

If you report a Moment or photo, Luxe keeps the report (who reported what, the reason and your note) for a year so we can act on it; the person who shared it isn’t told who reported it. If you block someone, Luxe keeps the list of people you’ve blocked with your account.

Luxe also stores the groups you create or join: their names and web addresses, their members, and the invite links you make. People who view a group’s site in a browser can add their own photos to a Moment. Those photos are resized and have location removed in their browser before they upload.

Only signed-in members of a group can see its Moments. Photos are served only to members, through short-lived signed links.

Where it’s kept

Shared information is stored with Amazon Web Services in the United States (Oregon). Sign-in is handled by Amazon Cognito, together with Apple or Google, depending on how you sign in. These companies process this information only to run the service. We don’t share it with anyone else, and we don’t use it for advertising.

Our servers keep error logs for 30 days so we can fix problems. We don’t keep access logs of the pages you view.

Cookies

Group sites use cookies only to keep you signed in and to let your browser load your group’s photos. There are no advertising or analytics cookies.

Deleting your information

• A photo or a Moment: whoever shared it, or a group admin, can remove it: in Luxe, Stop Sharing… beside the shared album, or Remove… in Settings › Sharing › Manage…; on the group’s site, Remove this Moment… in its ⋯ menu. It’s deleted from storage right away, and cached copies are cleared.
• Leaving a group: everything you shared or added in that group is deleted.
• Your account: in Luxe, choose Settings › Sharing › Delete Account. Every Moment and photo you shared is deleted, you leave all your groups, and your sign-in is removed. If you use Sign in with Apple, Luxe’s access is revoked with Apple too. Your library on your Mac isn’t affected.

To remove everything Luxe keeps on your Mac, delete the app and its folder in Library › Containers › com.jboone100.luxe.

Children

Luxe’s sharing is not intended for children under 13, and we don’t knowingly collect their information.

Changes and contact

If this policy changes, we’ll update this page and its date. For questions or requests about your information, email jboone100@gmail.com.