Privacy Policy

Privacy Policy

Version 2026-10-01 · Published October 11, 2026

AnyLUT is local-first: core photo editing works on your device without an AnyLUT account. If you choose to use Discover, the information needed for sign-in and the assets you choose to publish are sent to the Discover service.

Local editing and public photos

Discover accounts and public sharing

Outside mainland China, you can browse public Discover pages and submit reports without an account. Creating an account requires a username and a sign-in method (Apple, Google, or an email sign-in link, where available). We process the provider identity, email address when provided, account and session identifiers, accepted Terms version, and sign-in information to manage your account and prevent abuse. An Apple private relay address may be used. Account email and provider identity are not displayed on your public profile; your username is public.

Publishing is a deliberate action. Your title, description, tags, selected preview images, LUT or Recipe, username (outside the official-only mainland China catalog), and fork attribution can be viewed by other people. Other users may download a local copy that remains usable offline after you remove the remote asset. A published asset is not silently replaced; an updated version is a new asset.

Mainland China experience

The mainland China experience is selected from the App Store storefront, not your language. It offers an official-only Discover catalog and anonymous downloads without AnyLUT account, user publishing, favorites, or in-app reporting and blocking. Local editing still takes place on your device. To report a problem with an official asset, email support@anylut.com. Anonymous download requests are subject to network-based rate limits; the mainland China experience does not upload account information because it has no account flow.

Website analytics

This website uses PostHog for anonymous pageview counts and basic browser and device information. We do not send account identifiers, prompts, photos, LUT files, or Recipes to PostHog as pageview properties. Visiting a public Discover asset page or opening a public preview necessarily requests that public content from the service; those requests are separate from website analytics.

Optional analytics

“Help Improve AnyLUT” is controlled by the user in Settings. When enabled, the app sends anonymous product-usage and performance data to PostHog. This includes app lifecycle and screen-view events; interface interaction metadata such as screen names, control labels, and repeated-tap diagnostics; app and OS version; device class; processing duration; success or failure categories; and bucketed library or LUT counts. It also sends crash and hang diagnostics that iOS itself prepares: the exception or termination reason with any file path removed, the app version, build number, and OS version the app was running when it happened, and the stalled thread’s call stack as binary names with numeric offsets, which identify our own code and Apple’s frameworks and contain nothing about you or your photos. For the AI assistant, it also sends which kind of model answered (the model on this device, Claude, ChatGPT, or a service of your own) and, for Claude and ChatGPT, the public model name; for a service of your own it never sends the address or the model name. For AnyLUT Pro, it sends purchase and restore events with the plan (annual or lifetime) and which feature opened the purchase screen. When you use Discover, it sends which kind of thing you did, with a category and nothing else: opening Discover, viewing or downloading a LUT or Recipe (its type, and whether it is an official one), publishing one (its type), reporting one (the reason you chose from the list, never your note), signing in (the method: Apple, Google or email link, and whether the account is new), and deleting your account. It also sends how many groups a Recipe you made contains and whether it includes a LUT, and which built-in Gradient Map preset you chose. None of these events carries the title or ID of an asset, a username, or an email address. AnyLUT does not include photos, photo content, LUT file content, account identifiers, usernames, email addresses, or contact details in these analytics events. The setting can be disabled at any time.

AnyLUT Studio (Mac) analytics

AnyLUT Studio asks once, the first time it opens, whether to share anonymous usage data, and sends nothing until you say yes. The answer can be changed at any time in Studio’s Settings. When you say yes, Studio sends to PostHog: which actions are used (importing, exporting, removing photos, applying or importing a LUT, and using the assistant); the size of your library and the number of LUTs, as ranges and not exact numbers; the app version, build number, and macOS version; crash and hang reports that macOS itself prepares, with the kind of failure and its reason (any file path removed), the build it happened on, and the stalled thread’s call stack as binary names with numeric offsets; and the assistant’s outcome categories, such as answered, failed, or cancelled, with a duration range, together with which kind of model answered (the model on your Mac, Claude, ChatGPT, or a service of your own) and, for Claude and ChatGPT, the public model name. For a service of your own, Studio never sends its address or model name. It also sends how the library is shown (grid, list, or preview), which kind of command was run from the command palette (and, for a tool panel, which panel), and which built-in Gradient Map preset was chosen, never the words you typed in the palette. Studio identifies the installation with a random number generated on your Mac, which is not linked to your name, account, or to the iOS app, and is deleted when you turn sharing off. Studio never sends your photos, file names or folder paths, edits, what you ask the assistant, model answers, or API keys. Development builds never send.

AI assistant

The assistant is optional. With the model on your device, where your device supports it, your request and your photo stay on the device. If you choose your own provider (Claude, ChatGPT, or a service you name), AnyLUT and AnyLUT Studio send that provider what it needs to answer: your request and the conversation so far; the current values of the editing controls and the names of your LUTs; facts about the photo (its file name, camera, lens, exposure settings, recognised subjects, and brightness and color statistics); and, where the model accepts pictures, a small JPEG preview of the photo (longest side 768 px). The original RAW file is never sent. We do not receive this content. The provider handles it under its own terms and privacy policy. Your API key is kept in the keychain on your device and is sent only to the provider it belongs to.

Reports, security, and retention

Reports can include a reason and an optional note. To review abuse and enforce the Community Rules, we process the reported asset or account, the report, and limited account or hashed network identifiers used for rate limiting and deduplication. Authentication, moderation, and deletion operations are recorded in operational logs, not sent to PostHog as account-linked analytics.

Account information and published assets are stored while the account or asset remains active. A request to delete your account removes its identities, sessions, bookmarks, and published remote assets; provider credentials are revoked where applicable. Deletion can take additional time if cleanup has to be retried. Reports are retained without the deleted reporter's account identity; minimal audit records of moderation and removal may also remain without public files, descriptions, or previews. Reports and moderation or removal records are kept for up to 12 months. Operational logs are kept for up to 30 days.

Service providers

Discover uses Cloudflare for its service, metadata, files, and operational logs, and Resend to deliver sign-in emails when you choose an email link. Apple and Google process their respective sign-ins. Website and optional app analytics are processed by PostHog. Turning off optional app analytics does not stop essential account, security, or Discover service requests.

Deleting data

You can delete a published asset or request account deletion in the app's Settings, or contact support@anylut.com for help. A removed asset becomes unavailable from AnyLUT's public service, but cached previews and copies downloaded by others cannot be recalled immediately. Independent forks remain without attribution to a deleted account. Deleting the app removes local photo copies, LUTs, Recipes, and edits stored in its container, but does not delete a Discover account or its published assets; delete the account separately. Files exported to the system photo library remain under your control in Photos.

Children’s privacy

Core editing does not require an account, and we do not actively collect age information. We do not knowingly solicit children's personal information or photos through Discover. If you believe content or account data involving a child needs removal, contact support@anylut.com.

Policy changes

If our data practices change materially, this page will show a new effective date and, where appropriate, the app will provide notice.

Contact

Privacy questions can be sent to support@anylut.com or raised through the AnyLUT support page. See also our Terms and Community Rules.