About your data

Beta requests

We keep your email, the page language and, if you answered, your calendar and what you forget. Only to tell you about access and to learn who we’re building Luefy for. Never shared.

Deleted once you get access, or whenever you ask.

Your account

Your e-mail and name from the sign-in provider (Google or Microsoft), the provider id, the time you signed up and were last active. Sign-in tokens for your calendar providers and, if you linked iCloud, the app-specific password you entered. Tokens are used only to read and write your calendars on your behalf.

Calendars

Luefy reads your calendar events live from the provider when you open the app; it does not keep copies of your external events. It stores which calendars you hid, which calendar receives Luefy's tasks, and, for events you placed into a day phase, the link between the event id and the phase.

Tasks and settings

Everything you enter: task names, notes, duration, priority, phases, windows, recurrence, the slot where Luefy placed each task and when you completed it. Your day settings: wake and sleep time, phases of the day, planning preferences, language, reminder preferences, time zone. Tasks and settings live on our server in the EU (Hetzner); backups are kept in Cloudflare R2.

Companion (voice)

What you say or type to Companion is sent to speech-recognition and language-model services to understand it, together with the tasks and settings needed for the answer. Luefy keeps no transcript and no model text: per request only timings, token counts and error codes, for 30 days, so the service can be kept healthy. Facts you explicitly ask Companion to remember are kept as entries you can see and delete in Settings; at most 40.

Behaviour journal

To be able to recommend a schedule that fits you, Luefy keeps a journal of how you use your schedule: when you create, finish, move, skip, edit or delete a task (with the task's name, length, priority, phase and slot, never its notes or place), when you change your day settings, and a daily snapshot of those settings and phases. Nothing is read from your external calendars for this.

• 12 months. Entries older than a year are deleted; at most about 20,000 entries are kept per account.
• Nothing is inferred yet. Today the journal is only stored, and any later conclusions will never be about who you are, only about how you schedule.
• Off means deleted. Settings, Profile, "Learn from my schedule" is on by default. Turning it off stops the journal and deletes everything collected so far.

What you tell us about yourself

Optionally, in Settings, Profile, you can say whether you work, study at a university, study at school, or other. Luefy never guesses this from your schedule. If you say you are a school pupil, Luefy stops the behaviour journal for you; only what you entered yourself is used.

Who can see what

• You: everything above, in the app and in "Download my data".
• The operator (admin console): counts only — how many tasks, how many journal entries, whether collection is on. No task names, no journal content, no transcripts.
• Language-model providers: the text of a Companion request and the context it needs, for that request only.

Download and delete

Settings, Account, "Download my data" gives you a JSON file with everything above (except credentials). "Delete account" removes it all, journal included, and Luefy's events in your Google calendar first. We don’t sell data or use it for ads.