Support

Clasp is available on macOS, iOS, iPadOS, and visionOS. All versions sync through iCloud.

Absolutely. All clipboard data is stored locally on your device. AI features run on-device using CoreML. We never transmit your clipboard contents anywhere.

On macOS, Clasp needs Accessibility permission for text snippet expansion (simulating keystrokes). Clipboard monitoring uses the standard pasteboard API and does not require special permissions.

No. TypeMetrics only tracks typing speed and accuracy metrics. The actual text content is never recorded or stored.

Currently English and French, with 80 lessons covering beginner to advanced levels, including code typing exercises.

Moi supports Claude (Anthropic), Apple Intelligence (on-device), and Ollama (local open-source models). Smart routing automatically picks the best model for each task.

All conversations, memory, and documents are stored locally on your device. When using cloud AI providers, prompts are sent to their servers — but LorisLabs never sees your data. Local models process everything on-device.

For cloud providers (Claude, OpenAI), yes — you provide your own API keys, stored securely in the Keychain. Local models (Apple Intelligence, Ollama) require no keys and run for free on your device.

When you first launch CoreShield AI, it will prompt you to approve its Network Extension. Go to System Settings > Privacy & Security > Network Extensions and enable CoreShield AI. You may also need to allow it under Content & Privacy. A restart of the app may be required after approval. The onboarding wizard will guide you through each step.

Network Extension: Required to inspect and filter network traffic on your Mac. Location: Needed to identify your current WiFi network name (SSID) and detect evil twin access points — macOS requires location permission for WiFi identification. Bluetooth: Used to scan nearby devices for network environment awareness. All data stays on your device.

CoreShield AI intercepts DNS queries from your Mac using a Network Extension. Each query is checked against your configured blocklists and custom rules. Blocked domains receive a null response, preventing the connection. Allowed queries are forwarded to your chosen upstream DNS provider. All filtering happens locally on your Mac — no DNS data is sent to LorisLabs.

Open the Dashboard and navigate to the Settings tab, then select Rules. You can create rules to block or allow specific domains, wildcards, or regex patterns. You can also create rules per-application to control which apps can access specific domains. Rules take effect immediately.

CoreShield AI subscriptions are managed through the Apple App Store. To view, change, or cancel your subscription, go to System Settings > Apple ID > Media & Purchases > Subscriptions on your Mac, or Settings > [Your Name] > Subscriptions on iPhone/iPad. Cancellation takes effect at the end of your current billing period. Free tier features remain available after cancellation.

No. All network monitoring, DNS filtering, threat detection, and AI analysis happen entirely on your Mac. Your DNS logs, traffic data, and security events are stored locally and never transmitted to LorisLabs or any third party. If you choose to enable an optional cloud AI provider, only the data you explicitly send is transmitted — this feature is off by default.

Sinkhole uses iOS's VPN permission to intercept DNS queries, but it is not a traditional VPN. The tunnel connects to 127.0.0.1 (localhost) — your traffic is never routed through an external server. It does not provide anonymity, IP masking, or geo-unblocking.

VPN Mode (local DNS interception), LAN Server (your iPhone as a DoH server), and Off (disable filtering instantly).

No. All DNS processing happens entirely on your device. Query logs are stored in a local SQLite database and are never transmitted to any server. Allowed queries are forwarded to your chosen upstream DNS provider (e.g., Cloudflare, Quad9).

Go to Settings → DNS Provider. You can choose Cloudflare (1.1.1.1), Quad9, Google, or enter a custom DNS-over-HTTPS URL. Your choice only affects where allowed queries are forwarded — blocked queries never leave your device.

Go to Blocklists → tap + → Add URL. Paste any hosts-file or domain-list URL (e.g., StevenBlack, AdGuard, OISD). You can also import a Pi-hole gravity.db file directly via the import button. Blocklists refresh automatically.

Go to Custom Rules → tap +. Enter a domain (exact match), wildcard (*.example.com), or regex (/pattern/). Choose Allow, Block, or Redirect. Allow rules override blocklists. You can also swipe any domain in the Query Log to quickly block or allow it.

LAN Server turns your iPhone into a DNS server for your local network. Other devices connect via DNS port 5053 (UDP) or DoH port 8443 (HTTP). Use the generated mobileconfig profile (share via AirDrop) to configure other Apple devices. Your iPhone must stay on the same Wi-Fi.

Yes. In VPN mode, Sinkhole filters all DNS queries regardless of connection type — Wi-Fi, cellular, or even VPN. The local tunnel runs continuously in the background with minimal battery impact.

Go to the Query Log and look for blocked domains from that app. Swipe the domain and tap "Allow" to create an allow rule. If you're unsure which domain to allow, try pausing protection temporarily (Dashboard → Pause) to confirm it's a blocking issue, then check the log for recently blocked domains.

Go to Settings → iCloud Sync. When enabled, your custom rules, blocklist sources, SSID rules, and settings sync across devices via iCloud Key-Value Store. DNS query logs are never synced — they stay on each device.

None. Sinkhole has zero analytics, zero tracking, and zero cloud backend. All DNS query logs, blocklists, and rules are stored locally on your device. See our Privacy Policy for full details.

404 includes ICMP ping, traceroute, raw DNS lookup, port scanning, HTTP probing, TLS certificate inspection, local device discovery (mDNS/Bonjour + subnet scan), Wi-Fi analysis, speed testing, and a full security audit. The AI diagnostic assistant can analyze results and suggest fixes.

404 Pro includes an optional local VPN tunnel for traffic inspection and packet capture. This tunnel connects to localhost only — your traffic is never routed through an external server. It is used solely for on-device network analysis. You can disable it at any time.

No. All network diagnostics run entirely on your device. Results are stored locally in SwiftData. The only optional sharing is the Community Speed Map, which sends anonymized speed test results (ISP name, connection type, approximate location) via CloudKit — and this is disabled by default.

404 Pro is a one-time lifetime purchase that unlocks Traffic Inspector, Packet Capture, Advanced Security tools, Smart Home diagnostics, and background device monitoring. Core features — including speed test, ping, traceroute, DNS lookup, port scanning, device discovery, and device audit — are free forever.

Open Lumen, go to Settings → Servers → Add Server. Enter your Frigate server URL (e.g. http://192.168.1.100:5000) and your credentials if authentication is enabled. Lumen will test the connection automatically and show a green status indicator when successful.

In Lumen, go to Settings → Notifications and copy your personal webhook URL. Then, in your Frigate config.yaml, add this URL under the notifications section. Lumen will receive real-time push alerts for detections on your configured cameras and zones.

Yes. Go to Settings → Servers → Add Server to connect additional Frigate instances. You can switch between servers at any time from the server picker. Lumen automatically selects the lowest-latency endpoint when multiple URLs are configured for the same server.

Open LumenTV on your Apple TV and select Pair with iPhone. A QR code will appear on screen. Open the Lumen app on your iPhone, go to Settings → Apple TV, and scan the QR code. Your server credentials are transferred securely over your local network — no account required.

The Lumen Apple Watch app works standalone — it connects directly to your Frigate server over Wi-Fi or cellular. Credentials are automatically synced from the Lumen iPhone app to your paired Watch. No iPhone needs to be nearby once the sync is complete.

Each app offers a generous free tier. Premium features are available through a one-time purchase or subscription, depending on the app.

App Store purchases are managed through Apple. You can request a refund at reportaproblem.apple.com within 14 days of purchase.

Email us at support@lorislab.fr with a description of the issue, your macOS/iOS version, and the app version. Screenshots help!