Lutasan ("we", "us") is the developer of the Lutasan iOS application and the operator of lutasan.com. You can reach us any time at hello@lutasan.com.
Lutasan is a voice capture app. You record a spoken note; Lutasan has it transcribed, splits it into individual items (tasks, calendar events, email drafts, text messages, reminders, and notes), shows you the result for review, and creates those items inside the apps and accounts you choose to connect, such as Todoist, Google Calendar, Apple Calendar, and Apple Reminders. Email drafts open in your Gmail or Mail app for you to send. Nothing is connected until you connect it.
Lutasan has no account system and no login. There is nothing to sign up for inside the app, and we keep no server-side copy of your captures. What we handle is either processed briefly to provide the service, or stored on your own phone.
Recordings are not transcribed on your phone. When you record a note, the audio travels from your phone, through our server, to third-party transcription services that turn it into text. The transcript, along with a little context such as the date, your timezone, and your wording preferences, is then sent through our server to a third-party AI service that splits it into items and decides where each one should go. The audio recording itself is never sent to the AI service.
Our server exists to hold the credentials these services require. It runs on Cloudflare, passes your audio and text through, and does not store them; it keeps only routine technical logs (which request was made, when, and whether it succeeded), never your recording, transcript, or items. The transcription services are AssemblyAI and Groq; the AI service that splits your transcript into items is Anthropic's Claude. Each processes your data only to provide its part of the service, under terms that restrict it from using your data for anything else, and each may retain a copy under its own retention terms; details are in each provider's privacy policy (AssemblyAI, Groq, Anthropic). We do not use your data to train AI models.
The recording is kept on your phone until the capture has been filed, and then for a further 7 days, after which it is deleted from your phone. A capture that is waiting on your attention, or one that Lutasan is still trying to process (for example because the phone was offline), keeps its recording until it is filed or until you delete it, so nothing you said is lost while it is unfinished. Transcripts, the items created from them, a receipt of where each item went, and your notes are stored on your phone so the app can show your history and undo recent items. Notes live in the app, on your phone.
If you join the waitlist on lutasan.com, we collect your email address, store it with a third-party email list service, and use it only to tell you about Lutasan's availability and major updates. Every email includes an unsubscribe link. We do not sell or share this list.
Connecting a service is optional, and each service is its own separate grant: connecting Todoist gives Lutasan nothing in Google, and connecting Google gives it nothing in Todoist. Sign-in happens on the service's own screen; we never see or store your password. The sign-in tokens a service issues are stored only on your phone, not on our servers.
This section describes exactly how Lutasan accesses, uses, stores, and shares data from Google APIs, as required by Google's policies.
calendar.events.owned). Lutasan can create events on calendars the user owns, and changes or deletes only the events Lutasan itself created, only when the user taps Undo. It cannot access calendars owned by other people. The permission covers events on calendars the user owns, and in practice Lutasan only creates its own events and undoes them.userinfo.email). Used for one thing: showing which Google account is connected in the app's settings.Email drafts are written on your phone and opened in your Gmail or Mail app with everything prefilled, for you to review and send. Lutasan requests no Gmail permission and never connects to your Gmail account.
Google user data is used solely to provide the features you see in the app: creating the calendar events you asked for by speaking them, and showing which account is connected. We do not use Google user data for advertising, market research, profiling, or any purpose unrelated to the app's visible functionality.
The authorization tokens Google issues are stored only on your phone. The content of the events Lutasan creates is kept in the app's history on your phone so you can review and undo. We do not maintain a copy of your calendar. We never had access to it in the first place.
We do not sell, rent, or share Google user data with third parties. The text that becomes an event comes from your transcript, which is processed by the transcription and AI services described above before anything is created in Google; those providers are bound by terms that prohibit using your data for anything other than providing their service. Beyond that, we disclose data only if legally required to do so. We do not transfer Google user data to advertisers, data brokers, or analytics platforms.
Lutasan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we only use Google user data to provide and improve user-facing features of Lutasan; we do not transfer it except as necessary to provide those features, for security purposes, or to comply with law; we do not use it for advertising; and we do not allow humans to read it except with your explicit permission, for security purposes, to comply with law, or in aggregated, anonymized form. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
If a spoken item is an email or a text to someone you named, Lutasan can look that name up in your phone's contacts so the message opens already addressed. iOS asks for your permission first, and only when the feature is first needed. The lookup happens entirely on your phone and reads names, nicknames, phone numbers, and email addresses from your contacts. Exactly one clear match fills in the address; anything unclear is left for you to decide.
Your contact list is never uploaded and never leaves your phone. The only name the transcription and AI services ever see is the name you spoke, because it is part of your recording. You can revoke contacts access at any time in iOS Settings.
If you connect Todoist, Lutasan uses your authorization to create tasks in your Todoist account, inside a project it creates for that purpose, and to delete a task it created if you undo it. To file into the right place, it reads the names of your Todoist projects; it also reads your account email so the app can show which account is connected. It never reads the contents of your existing tasks. A task Lutasan creates contains the text you spoke for that item. If you route email to-dos to Todoist, the task can also carry the drafted email's subject and body, so you have the draft to hand when you send it. Apple Calendar, Apple Reminders, Apple Mail, and Messages are used on your phone through Apple's own iOS permissions, which you grant in the app and can revoke at any time in iOS Settings; that data is handled on your phone.
Your capture history stays on your phone until you delete it, and undo is available in the app for 24 hours after an item is filed. "Delete everything" in the app's settings removes recordings, transcripts, items, notes, and history from your phone. Connected services stay connected until you disconnect them; disconnecting a service deletes its sign-in token from your phone, so Lutasan can no longer act on that account. You can also revoke Lutasan's Google access directly at myaccount.google.com/permissions. To delete your waitlist email or request deletion of anything else we hold, email hello@lutasan.com and we will complete the request within 30 days.
Everything sent between your phone, our server, and the services above is encrypted in transit. Sign-in tokens are stored only on your phone, and our server holds the service credentials so your phone does not have to; it does not store your recordings or transcripts. No system is perfectly secure, but we deliberately minimize what we can access in the first place. The less we can touch, the less can go wrong.
Lutasan is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
If we make material changes to this policy, especially any change to how Google user data is handled, we will update this page, revise the effective date above, and notify users in the app or by email before the change takes effect.
Questions, requests, or concerns: hello@lutasan.com.