Privacy Policy

The short version

Lutri is built so that searching your memories never means sharing them. It reads your photos and videos on your phone, builds a search index on your phone, and searches that index on your phone. Lutri runs no server that receives your library, your searches, or your index.

There is no account, no advertising, and no tracking, and the app does not measure how you use it. It goes online for only two reasons: to confirm or restore a plan, and to download the search model once. It also sends what you choose to send, such as an email to support.

Who is responsible for your information

Lutri publishes Lutri and is the controller of the personal information described in this policy, which means we decide how and why it is used. You can reach us at support@lutri.app.

Most of what Lutri works with never reaches us. It stays on your phone, under your control. This policy explains what stays there, what leaves, and who receives it.

What Lutri reads on your phone

With your permission, Lutri reads the photos and videos in your library: the pictures, frames, and audio tracks themselves, and the details stored with them, such as the date, the size, and the album. On Android, if you switch on Include voice memos in Settings, it also reads audio files from your device. Spoken words in videos and voice memos are transcribed on your phone with a bundled speech model so you can search what was said.

You decide how much it can see. On both iPhone and Android you can allow only selected photos, and Lutri will work with just those.

Lutri does not use the GPS coordinates in your photos, does not look up addresses, and does not track where you are.

If you search with a photo, you choose it with your phone’s photo picker. Lutri reads that one photo on the phone to find similar ones and does not add it to your index.

What Lutri stores on your phone

To make search fast, Lutri builds an index in the app’s private storage. It contains:

• words it reads in your pictures, such as the text on a screenshot or a sign, and spoken words transcribed from videos and voice memos
• short descriptions of what each picture or video shows
• numerical fingerprints of pictures, video frames, and text, which let search match meaning and not only words
• file names, dates, albums, and similar details, plus small preview pictures the app makes for itself
• the searches you choose to save, and automatic collections such as Receipts, Tickets, Documents, Screenshots, and Duplicates built from your indexed library

The descriptions and fingerprints come from your photos, so treat the index as private in the way your photos are. It is not sent anywhere. It is kept out of the phone’s automatic backups, so it is not copied to iCloud or to Google, and it is deleted when you choose Clear search index in Settings or when you uninstall Lutri. Lutri does not keep a history of what you type into search. Only searches you choose to save are stored.

Lutri also keeps your settings and a random identifier made for this installation. Your plan is kept as a sealed record, signed with a key held in the phone’s secure storage (the Keychain on iPhone, the Keystore on Android), so that a paid plan keeps working without a connection.

What leaves your phone

Lutri goes online only in these situations:

• Purchases. Viewing plans, buying, restoring, or managing a plan goes through the App Store or Google Play, which handle your payment details and do not share them with us. Lutri uses RevenueCat, a subscription service, to load plan options and confirm what you bought. RevenueCat receives a random identifier made for this installation (it is not your name, your email address, or your store account), your purchase receipt or token and plan status, and standard technical details such as the app version, the device type and system version, your language and region settings, and your IP address. It acts as our service provider, keeps this information on servers in the United States, and gives us combined subscription statistics, such as how many people bought a plan. RevenueCat’s own policy is at revenuecat.com/privacy.
• The search model. If you choose to get it, your phone downloads one file from Hugging Face (huggingface.co), a model hosting service. Hugging Face sees the request, your IP address, and the technical details any download carries, and its own privacy policy applies (huggingface.co/privacy). No photos and no personal information are sent. The app checks the file against a fixed checksum and rejects it if it does not match.
• What you choose to send. If you email support, we receive your address and whatever you write or attach. Starting a support email from Settings fills in your support ID, app version, and system version in your mail app so you can review or edit them before sending. If you use Share or Copy on a note, or on text that Lutri found in a picture, that text goes wherever you send it. Lutri writes to your phone’s clipboard only when you tap Copy and never reads the clipboard. Copied text sits on your phone’s clipboard, which other apps may be able to read, and some phones pass it on to other devices signed in to the same account. Lutri never shares photos or videos itself. If you open a link to our website or to a store, that site sees your visit under its own policy.
• The stores. Apple and Google run the App Store and Google Play, and their own privacy policies apply to what they collect (apple.com/legal/privacy and policies.google.com/privacy). If you have chosen in your phone’s settings to share usage or crash data with developers, they may give us combined, anonymous statistics such as downloads and crashes. We cannot see your photos or identify you from those statistics.

Lutri does not send your photos, videos, audio, the text found in them, your searches, your index, or your location to Lutri, to RevenueCat, to Hugging Face, or to anyone else.

On Android, text recognition uses Google ML Kit, which reads images on the phone but includes a usage-metrics feature that its settings cannot turn off. Lutri is set up to block the network connection that those metrics would use. On iPhone, Lutri uses Apple’s Vision framework, which runs on the phone.

What we do not do

• We do not ask you to create an account.
• We do not show advertising, work with ad networks, or use your phone’s advertising identifier.
• We do not put analytics or tracking software in the app, and we do not follow you across apps or websites.
• We do not sell or rent personal information, and we do not share it for advertising.
• We do not use your photos, videos, or searches to train any model.
• We do not recognize faces or identify people, and we do not collect biometric information.
• We do not use your camera, your microphone, your contacts, or your live location.
• We do not make automated decisions about you or profile you in a way that has a legal or similarly significant effect.

Permissions

• Photos and videos: to index and search them. This is the only permission Lutri asks for at the start.
• Audio files (Android only, optional): asked for only if you turn on Include voice memos in Settings.
• Not requested: camera, microphone, contacts, your live location, or the location saved in your photos.

You can change or withdraw any permission at any time in your phone’s settings. Withdrawing one stops Lutri from reading anything new. It does not delete the index, which you can clear in Settings.

Why we use information, and on what basis

If you are in the European Economic Area, the United Kingdom, or Switzerland, the law asks us to name the basis for each use of personal information:

• To provide Lutri and your plan, by confirming and restoring purchases and unlocking what you bought: we need this to carry out our agreement with you.
• To keep Lutri secure and to stop plans being misused: our legitimate interest in protecting the app and the people who use it.
• To answer your emails and requests: our legitimate interest in supporting the people who use Lutri, and your request itself.
• To follow the law, for example tax and accounting rules: our legal obligations.

Lutri reads and indexes your library on your phone, using the permission you give, and we never receive the result. Because that happens only on your phone, we do not hold it or use it ourselves. We describe it here so that you can see exactly what the app does. You can withdraw the permission at any time.

How long information is kept

• On your phone: until you clear the search index or uninstall Lutri.
• At RevenueCat: for as long as it needs to run the service for us and to meet its own legal duties. We can ask it to delete the record for your installation.
• Support emails: for as long as we need to deal with your request and any follow-up, and then we delete them, unless the law requires us to keep them longer.
• At Apple and Google: under their own policies. We do not control those records.

Who else may receive information

• Service providers that help us run Lutri, such as RevenueCat for purchases, and the email and hosting services we use for support and for our website. They may use the information only to work for us.
• Apple and Google, as described above, and Hugging Face for the model download.
• Authorities, courts, and our professional advisers, if the law requires it or to protect our rights or the safety of others.
• A successor, if the business behind Lutri is sold or merged, which would take over the information we hold under this policy.

We do not sell your personal information.

Where information is processed

RevenueCat processes purchase information on servers in the United States. Hugging Face, Apple, and Google operate in many countries. If you are in the European Economic Area, the United Kingdom, or Switzerland, and a transfer of personal information to another country needs a safeguard under the law, we rely on one that the law recognizes, such as the standard contractual clauses approved by the European Commission. Everything else Lutri does happens on your phone, in the country where you are.

Your rights and choices

Because your library and index stay on your phone, you are in control of them. Clear search index in Settings removes everything Lutri has learned from your library without touching a photo. Turning off photo access in your phone’s settings stops Lutri from reading anything new. Uninstalling the app removes everything it stored on your phone, including the downloaded model.

Depending on where you live, you may have the right to ask us for access to the personal information we hold about you, for a copy of it, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent you gave. To use any of these rights, write to support@lutri.app. So that we can find the right records, include the support ID shown in Settings under About. It is the random identifier that RevenueCat holds for your installation. We may need to confirm that a request really comes from you, and we will answer within the time the law requires, which is usually 30 days.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you can also complain to your local data protection authority. We would like the chance to put things right first, but you do not have to contact us before you complain.

California and other US states

If you live in California or another US state with a privacy law, you may have the right to know what personal information we collect and why, to access, correct, and delete it, to opt out of its sale or sharing, and not to be treated differently for using these rights. You may use an authorized agent to make a request for you. If we turn a request down, you can ask us to reconsider it, and you may then contact your state’s attorney general.

In the last 12 months we have collected, or received through our service providers, these kinds of information: identifiers (the random installation identifier and an IP address), commercial information (which plan you bought and when), internet or network activity (a purchase check or a model download), and messages you send us. We use them only for the reasons given above. We have not sold personal information or shared it for cross-context behavioral advertising, and we do not collect or use sensitive personal information to work out anything about you.

Neither Lutri nor this website tracks you, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off.

Children

Lutri is not directed at children under 13, or under 16 where local law sets a higher age, and it does not knowingly collect information from them. It collects almost nothing from anyone. If you are a parent or guardian and think a child has sent us personal information, please contact us and we will delete it.

Keeping things safe

The index and settings live in the app’s private storage, which other apps cannot read. Your plan record is sealed with a key held in the phone’s secure storage, so it cannot be edited to unlock paid features. The search model is checked against a fixed checksum after it downloads, so a damaged or swapped file is rejected and never used. Everything that goes over the internet is encrypted in transit.

No system is perfectly secure. A phone that is rooted or jailbroken, has malicious software on it, or is unlocked in someone else’s hands can expose your photos and your index. Lutri has no passcode of its own, so anyone who can unlock your phone can open it and search your library. Keep your phone locked, and keep its software up to date.

If we learn of a breach that affects personal information we hold, we will tell the people affected and the authorities as the law requires.

This website

This website sets no cookies, loads no analytics, advertising, or other third-party scripts, and uses fonts it hosts itself. As with any website, the server that delivers a page receives your IP address, the page you asked for, and technical details such as your browser type, and our hosting provider may keep ordinary server logs to run and protect the site. If you email us, the sections above apply to your message.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change matters, for example a new way that information leaves your phone, we will say so in the app and on this page before it takes effect, and we will ask for your consent where the law requires it. We will not use information we already hold in a new way without telling you first.

Contact

Lutri publishes Lutri. Questions or requests about privacy: write to support@lutri.app.