Last updated 11 October 2026
Privacy Policy
Sentido Luz is a one-person film studio in Metro Detroit. This policy covers the Sentido Luz iPhone app and the website at sentidoluz.com. It is written plainly because you should be able to read it.
The short version. Your films and photos are private to you, the people you share your project code with, and anyone you choose to send a time-limited link to. I do not sell your information, I do not run advertising, and there is no analytics or tracking in the app. The only information collected is what is needed to give you your gallery, to let you and the studio talk about it (favorites, notes, approvals), to reply to you, and — if the app crashes — an anonymous crash report so it can be fixed.
1. Who is responsible
Sentido Luz, operated by Luis Loyola, Metro Detroit, United States. For any privacy question, or to exercise any right described below, email luieee@outlook.com.
2. What is collected, and why
| Information | Why | Where it comes from |
|---|---|---|
| Email address and password | To create and sign in to your account, and to reset it if you forget. | You, when you create an account in the app. |
| Your project access list | To show you your gallery and nobody else's. Stored as the project code you redeemed and the date you joined. | Generated when you enter a project code. |
| Photos, videos and files from your shoot | This is the service. They are uploaded by me and shown only to the people who hold your project code. | Created by Sentido Luz during your shoot. |
| Favorites, notes, and approvals on items in your gallery | So you can tell the studio which shots you love, ask for a change, or sign off on a cut. The studio sees them with your email address, so it knows who said what. Notes may include a timecode in a film. | You, when you tap the heart, write a note, or approve an item. |
| Gallery activity: when you last opened a project, which items you viewed and how many times, when you last downloaded, and links you created | So the studio can see that a delivery reached you and what is being watched. This is shown only to the studio, never to other clients, and is not used for anything else. | Generated as you use the app. |
| Shared links you create: the item or project, when it was made, when it expires, whether downloads are allowed, and how many times it was opened | So you can see and turn off the links you have sent out, and so expired or revoked links stop working. | You, when you share a link. |
| Visits to a shared link: when it was opened, which photos were looked at, which films were played, which downloads were tapped, the type of device and browser (for example “iPhone · Safari”), a random ID kept in that browser, and a scrambled form of the internet address. The address itself is never stored, and nothing records who the visitor is. | So the studio can see that a link reached the people it was meant for and how it is being used, and tell visits apart. Shown only to the studio. | Generated when someone opens a link you shared. |
| Inquiry form details: name, email, project type, date, location, message | To answer you. | You, if you use the contact form on the website. |
| Technical logs, including IP address and request times | Security, abuse prevention and keeping the service running. Handled automatically by the hosting provider. | Your device, automatically. |
3. What is not collected
- No third-party analytics and no tracking. The only “usage” records are the gallery activity and shared-link visits described above, which stay with the studio. The app does contain Firebase Crashlytics, which sends an anonymous report (device model, iOS version, the app version and where in the code it failed) only when the app crashes. Crash reports are not linked to your account or your projects.
- Push notifications are optional. If you turn them on, a device token is stored on your account so the studio can tell you when your project is ready or a note is answered; turning them off or signing out removes it.
- No advertising, no advertising identifiers, and no ad networks.
- No tracking of you across other apps or websites, and nothing shared with data brokers.
- No location data, no contacts, no microphone or camera access.
- Nothing is sold or rented to anyone, ever.
When you save a photo or video from the app, it is written to your device's Photos library or Files app. Those copies live on your device and are not visible to me.
4. Who else can see your information
The app and website run on Google Firebase, which provides authentication, the database, file storage, server functions and web hosting. Google processes this data on my behalf as a service provider, under its own security and privacy terms. See Firebase Privacy and Security.
Both the website and the studio dashboard use Google reCAPTCHA Enterprise, invisibly, to tell real visitors from automated scripts. It runs in the background on those pages (there is no puzzle to solve) and sends Google technical signals about the visit for that purpose; see the Google Privacy Policy. The app on your phone uses Apple's App Attest for the same purpose, which shares nothing about you.
Email from the studio — an invitation with your project code, a note that your project is ready, or a reply — is sent through Resend, which handles your email address on my behalf to deliver those messages and nothing else.
Nobody else receives your information. The only exception is if I am legally required to disclose something by valid legal process.
Who can see your gallery
Project galleries are not public. Seeing one in the app requires a signed-in account that has redeemed your project's code. One code is intentionally shared by everyone on your side, so treat it the way you would treat a house key. Codes can be given an expiry date or a maximum number of uses, can be turned off, and anyone who joined can be removed — email me if you need any of that done. A project can also be given an end date, after which it closes for everyone.
Links you share
You can create a private web link to one film or photo, or to a whole project, to send to family and friends who do not have the app. Anyone who has the link can watch, and download unless you turned downloads off, until the link expires — you choose 7, 30 or 90 days, and a link never outlasts the project. Links are not listed anywhere public and cannot be guessed, but they are not tied to an account, so share them the way you would share the files themselves. You can see every link you made and turn any of them off at once from the app (“My shared links”), and the studio can too. “View only” hides the download button; it does not stop a determined viewer from saving a film, and photos on view-only links are shared at preview size. When someone opens a link, the studio can see the visit: which photos were looked at, which films were played and which downloads were tapped, on what kind of device, and a scrambled network ID that tells two visitors apart without keeping their address. A random ID is kept in the visitor's browser so repeat visits count once.
5. How long it is kept
- Your media is kept for as long as your project exists. When a project is deleted, its files, database records, codes and access list are deleted along with it.
- Your account is kept until you delete it in the app (Account → Delete account) or ask me to.
- Favorites, notes and approvals live with the item they belong to. If the studio removes an item from your project, its notes are kept for 30 days in case the removal was a mistake, then deleted.
- Shared links stop working the moment they expire or are turned off; the record of the link, and of the visits to it, is deleted 30 days later.
- Gallery activity (opens, views, downloads, link creation) is kept for 90 days in the studio's activity feed; a log of the studio's own administrative actions is kept for one year.
- Backups. The database is backed up daily and each backup is kept for 7 days; deleted files can be recovered for 7 days; a daily export of account records (email addresses and sign-in dates, never passwords) is kept for 14 days. Deleted information disappears from backups on those schedules.
- Inquiries are kept while I am in touch with you and removed once they are no longer useful.
- Technical logs are kept on the provider's standard retention schedule.
6. Your choices and rights
You can ask me to show you what is held about you, correct it, or delete it. Email luieee@outlook.com and I will act within 30 days. You can also delete your account yourself from the app; that removes your sign-in record, your access list, your push notification token and any links you created. Your favorites and notes stay with the project so the studio's record of the delivery is intact — tell me if you want those, or your project's media, removed too.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the General Data Protection Regulation, including the right to object to processing and to lodge a complaint with your local regulator. Since no information is sold or shared for advertising, there is nothing to opt out of on that front.
7. Security
Connections use HTTPS. Passwords are stored and verified by Firebase Authentication and are never visible to me. Access to your media in the app is checked on the server for every single request, so a file cannot be reached by guessing an address. The one deliberate exception is a link you choose to share: it works for anyone who has it, for as long as you set. No system is perfect, but your work is not sitting in a public bucket.
8. Children
The app is not directed to children under 13 and I do not knowingly collect their information. If a child has created an account, email me and I will delete it.
9. International visitors
Sentido Luz operates in the United States and information is stored on servers in the United States. If you are using the service from elsewhere, you are sending your information to the United States.
10. Changes
If this policy changes, the new version is posted here with a new date at the top. For anything significant, clients will be told directly.
11. Contact
Luis Loyola, Sentido Luz
luieee@outlook.com
Metro Detroit, United States