Draft — last updated 28 September 2026
What leaves your Mac
Lua is a Mac app. Your videos are edited on your Mac and your raw footage is never uploaded. When you use an AI feature, only the small piece it needs is sent. When you publish, only the finished reel goes out, on its way to Instagram.
| What | When | Where it goes | How long it is kept |
|---|---|---|---|
| Your email, sign-in profile, this Mac’s id, app and macOS version | When you sign in, and an account check about once an hour | Supabase and the Lua server | While you have an account |
| The audio of your takes, in pieces of up to 30 seconds (never video) | Transcription and the raw cut | Lua server → ElevenLabs | Deleted by our server right after; ElevenLabs keeps it per its own policy |
| Transcript words, your edit, the project name | AI chat, story planning, b-roll planning | Lua server → an AI model (OpenAI, Anthropic or Google) | Never stored by our server |
| Still frames of your cut | When the AI chat checks a frame | Lua server → an AI model (OpenAI, Anthropic or Google) | Never stored by our server |
| Stills from b-roll candidates (these can include b-roll you added yourself) and search phrases from your transcript | AI b-roll research | Lua server → OpenAI or Google, TypeSafe, Firecrawl, Pexels | Never stored by our server |
| Web clips fetched for b-roll research | AI b-roll research | Downloaded straight to your Mac (YouTube and similar sites) | On your Mac only |
| Your finished export and its caption | When you press Publish to Instagram | Temporary storage (Cloudflare R2) → Instagram, via Composio | Deleted after posting; about 48 hours at the very most |
| Your Instagram link (the handle only) | When you connect Instagram | Composio → Instagram | Until you disconnect |
| A scrubbed crash report | Only if you turn crash reports on | Sentry | Per Sentry’s policy |
What never leaves
Your footage, your source files, your projects and your local b-roll library. Transcripts are saved on your Mac; only the words an AI feature needs are sent, as listed above. Editing and exporting work offline.
Your choices
- Crash reports are off until you tick the box. Full crash dumps are never sent.
- Nothing in the table is sent unless you use the feature in the “When” column.
- Delete your account and everything above that we hold is deleted.
This is the plain version. The full text is the Privacy Policy.