Privacy Policy for Lymic
Summary: Privacy First by Design
Lymic contains no advertising, tracking, or analytics telemetry of any kind. Lymic is an independent open-source desktop client built to upload your local media files directly to your own self-hosted Immich server. We do not operate central servers, collect user accounts, or profile user behavior.
1. No Advertising, Tracking, or Analytics
Lymic does not collect, record, or transmit any user tracking information or analytics telemetry. There are no tracking SDKs, advertising frameworks, crash-reporting servers, or analytics beacons integrated into Lymic.
2. Destination of Media Assets
Your photos, videos, and associated metadata (such as sidecar files and checksums) are transferred exclusively to the Immich server URL you configure.
- All uploads occur directly between your device and your configured Immich server.
- No media files, checksums, or metadata are ever routed through intermediate proxy servers or third-party cloud infrastructure operated by Lymic.
3. Native Operating System Credential Storage
Sensitive authentication credentials—including your Immich API key and optional Cloudflare Access service token credentials—are stored exclusively in your operating system's native secure keyring (Windows Credential Manager on Windows, Keychain on macOS, Secret Service on Linux).
Credentials are never written to unencrypted SQLite databases, configuration files, application log files, or user interface events.
4. Local Settings & Synchronization State
Lymic maintains local operational state in a private local SQLite database on your device:
- Local preferences: Configured watched folder paths, target album assignments, exclusion patterns, user interface theme preference, language locale, and upload concurrency settings.
- Synchronization progress: Checksum cache, queue status (pending, synced, failed), and remote asset identifiers to ensure resumable uploads and avoid duplicate re-uploads.
This data remains strictly on your local computer and is never uploaded or shared.
5. Local Structured Audit Logging
To assist with troubleshooting and security monitoring, Lymic records security-relevant administrative events (such as authentication state changes, watched folder additions/removals, and queue lifecycle operations) into local structured audit logs.
These logs remain stored locally in your operating system user profile directory with automated retention and rotation, and are never automatically transmitted over the network.
6. Independence from Immich
Lymic is an independent desktop client application designed for self-hosted Immich servers. It is not affiliated with, endorsed by, or sponsored by Immich or its developers.
7. Contact and Questions
If you have any questions about this Privacy Policy or Lymic's data handling practices, you can contact the project maintainers via our Support page or open an issue on our GitHub repository.