Privacy Policy

This policy covers withluff.com, app.withluff.com and the Luff Enterprise Studio app. The controller is Lanvex Technologies W.L.L., Bahrain Financial Harbour, East Tower (Majali), 34th Floor, Kingdom of Bahrain.

The app

The app runs on your Mac and never contacts Lanvex or withluff.com on its own. It has no telemetry, no usage reporting, no crash upload, no cloud sync and no cloud backup. We receive nothing about what you build.

• Claude. Work sessions run through the Claude Code CLI on your Mac, under your own Claude account. What those sessions send to Anthropic is governed by your agreement with Anthropic.
• OpenRouter, optional. If you add your own OpenRouter key, a classifier sends up to 300 characters of each chat message you write to OpenRouter, under your key, to decide whether and how to wake Claude. Set LUFF_JEV_SEND_TEXT=0 to stop the text being sent. Without a key, nothing is sent.
• Updates. A manual Check for Updates button, arriving in a later release, reads one static file from withluff.com only when you click it. That request carries no identifier, and the file is served without cookies or logging.
• Licence. Your licence key is checked on your Mac, offline. No licence server is contacted.

What the website collects

• When you buy: your email, and if you give them, your name, your company and your Mac's machine ID. The machine ID is a value you copy from the app yourself; the site never reads it from your computer. We use it only to sign your licence key, which is bound to that ID.
• Orders: plan, amount, dates and Paddle's transaction reference. Card and wallet details go to Paddle, never to us.
• Portal: one strictly necessary session cookie while you are signed in, and the licence keys issued to you, which we also send to your email.
• Server logs: standard web server logs (IP address, time, page requested) kept for security for a short period. Downloads and the update feed are not logged.

We use no analytics, advertising or tracking cookies, and we do not sell or share data for marketing.

Paddle

Paddle.com is our merchant of record. It processes your payment, calculates tax, and issues invoices under its own privacy notice. We receive the order details listed above.

Your rights

You can ask for a copy of your data, correction, or deletion, subject to what we must keep for tax and accounting. See DPDP & GCC Data Governance for how these rights apply where you are. Write to privacy@withluff.com.