Privacy policy

Effective September 6, 2026; replaces the version of September 4, 2026. This policy covers applications published by LukaAI Group LLC under lukaaigroup.com, including Personal Hub.

Who we are

LukaAI Group LLC is a California limited liability company based in Studio City, California. Questions about this policy go to andrew@lukaaigroup.com.

What Personal Hub connects to

Personal Hub is a dashboard that runs on the user's own computer and shows, on one page, information drawn from accounts and applications the user chooses to connect. Each connection is optional and is set up by the user. Currently those are:

Google accounts (one or more)

Gmail and Google Drive, through Google's APIs, with the permissions shown on the Google consent screen and described below.

Applications on the user's Mac

Calendar, Reminders, and Mail, read through the system frameworks and automation interfaces of macOS, with the permissions macOS asks the user to grant.

OneDrive folders

The names, types, and modification times of files in OneDrive folders already synced to the user's computer. No Microsoft account credentials are involved; the application reads its own computer's disk.

Notion

One database the user designates — a list of prospective jobs — read through a Notion integration the user creates and grants access to. That integration is configured as read-only.

What it reads

Personal Hub reads metadata, not content:

• Gmail: sender, subject, date, and labels of messages. It does not read message bodies, attachments, or drafts.
• Google Drive: file names, types, modification times, and links. It does not read file contents.
• Calendar and Reminders: titles, dates and times, locations, and calendar or list names.
• Mail (iCloud, via Mail.app): sender, subject, date, and read status.
• OneDrive: file names, types, and modification times.
• Notion: the fields of the designated database — property names, contact names and companies, dates, stage, quoted fee, notes.

What it can change

Personal Hub takes an action only when the user clicks a control asking for it. Every action can be undone for a few seconds afterward, and every action is recorded in a log on the user's computer. The complete list:

• Gmail: archive a message (remove it from the inbox) and mark a message as read or unread. Nothing else — it does not send, reply, draft, forward, delete, or trash messages, and does not change any other label.
• Mail.app: mark a message as read and move it to the account's Archive mailbox.

It makes no changes to Google Drive, Calendar, Reminders, OneDrive, or Notion. Notes, pins, and snoozes the user attaches to items inside Personal Hub are stored only on the user's computer and are never written back to the connected services.

About the Google permission for those actions

To archive or mark a message read, Google requires a permission (gmail.modify) that is broader than what Personal Hub uses: it would technically allow reading full messages and changing any label. Personal Hub does not do those things. Its use of that permission is limited to the two actions listed above, and its reading of Gmail remains limited to message metadata. The user can withdraw the permission at any time at myaccount.google.com/permissions.

How the data is used

To show it to the person who connected the accounts, and to carry out the actions that person clicks. That is the whole use. We do not analyze it, build profiles from it, use it for advertising, or use it to train or improve any AI or machine-learning model.

Where the data is kept, and who can reach it

On the user's own computer, in a local database the user controls. The application listens only on that computer. If the user chooses, it can also be reached from the user's other devices — for example, a phone — over a private network the user controls (Tailscale), which admits only devices the user has enrolled. It is never exposed to the public internet. Access is protected by a password the user sets. LukaAI Group operates no server that receives, stores, or can see this data, and none of it is transmitted to us.

Sharing

We do not share, sell, rent, or transfer data obtained through Google APIs, or through any other connected service, to anyone. No person other than the user sees it.

Google API Services User Data Policy

LukaAI Group's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Data stays in the local database until the user deletes it. Deleting the application's database file removes everything it has read. Revoking the application's access — at myaccount.google.com/permissions for Google, in System Settings for the Mac applications, in Notion's connection settings for Notion — stops all further access immediately; the application cannot reconnect without a fresh grant.

Security

Access to the page is protected by a password the user sets. Credentials and tokens for connected services are stored only on the user's computer and are never sent to LukaAI Group. The user's device security — its login, disk encryption, and updates — protects the data at rest.

Children

Our applications are not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, the new version will appear at this address with a new effective date. Changes that affect how Google data is handled will be reflected on the application's consent screen as well.