Legal documents for the Luke iPhone app
Last updated: September 20, 2026
Luke (“the App”) is developed and published by Ryuichi Sumida, an individual developer based in Kyoto, Japan (“we”, “us”). This policy explains what information the App handles, what stays on your iPhone, what leaves it and why, and the choices you have. It applies to Luke on the App Store worldwide. Region-specific information for the United States and Japan is at the end.
Luke stores the following on your device: the name and birthday you enter during setup, chat history with Luke, AI-generated memories, photo descriptions and tags, people you name in photos, place visits and place labels, journal entries and notes, voice memos, recorded conversations and their transcripts, face feature data, voice feature data, and app preferences.
This data lives inside the iOS app sandbox, encrypted by iOS with your device passcode. You can additionally require Face ID or your passcode to open the App (Settings → App Lock). We have no technical ability to read, copy, or restore it.
All AI features (chat, voice conversation, memory extraction, photo understanding, timeline and life analysis) run on your iPhone, using open-weight models that ship inside the app (photo, memory and speaker models) or are downloaded to your device when you turn on Talk or calls (the chat model and voice assets), plus Apple’s built-in on-device models. No prompt, photo, transcript, or memory is sent to an external AI service by Luke, and nothing you do in Luke is used by us to train any model.
With your permission, Luke reads your photo library on your device to build memories, using Apple’s Vision framework and the on-device models. Photos you take with the camera inside Luke are stored on your device. Luke never uploads a photo, thumbnail, or derived description to us or to any AI service. Photo thumbnails can leave your iPhone only through Agent Access, Export, or backups, described below.
To group photos of the same person and to recognize who is speaking in a recording, Luke computes face feature data and voice feature data on your iPhone.
Luke has three speech features, and they behave differently.
Voice audio never leaves your iPhone.
You can record real-life conversations only by an explicit tap. Recordings and transcripts are stored on your device. Nothing you record is uploaded by Luke. You are responsible for complying with the recording and consent laws that apply where you are; some places, including several US states, require the consent of everyone in a conversation.
If you grant location access, Luke records the places you visit to build your personal timeline, including in the background if you allow “Always” access. Visit history is stored on your device. To show place names, Luke sends the coordinates of each visit to Apple’s geocoding service. When you search for or label a place, your search text and the map area are sent to Apple Maps. These requests go from your device to Apple, are governed by Apple’s privacy policy, and carry no Luke identity, because Luke has none. You can pause location capture or delete your location history at any time in Settings.
Luke has no server of its own. Your device connects to the following services, and only for the purposes listed.
| Purpose | Who receives the request | What they receive |
|---|---|---|
| Downloading the chat model and voice assets when you turn on Talk or calls, when a model is updated, and if a file needs re-downloading. The photo, memory and speaker models ship inside the app and are never downloaded. | Hugging Face (huggingface.co) | Your IP address and standard download request metadata. No personal content. |
| Checking for model updates at launch (a small manifest file) | Hugging Face | Your IP address and request metadata. |
| Place names and place search | Apple | Coordinates of visits; search text and map area when you label a place. |
| Speech language assets | Apple | Asset downloads only. Audio is never sent. |
| Luke Pro subscription | Apple App Store | Apple processes the purchase. The App receives only the subscription status on your device. We never see your payment details or Apple ID. |
| Agent Access (off by default) | A tool on your own computer | See below. |
| Daily anonymous usage summary (off by default; only if you turn on Share Anonymous Usage Data) | TelemetryDeck GmbH (telemetrydeck.com), Germany | Feature-usage day counts, action counts, technical failure codes, average response times, Pro status, device model, iOS and App version, language, and a random one-time identifier. No content. Like any internet request it carries your IP address; TelemetryDeck states that it does not store IP addresses. |
The chat model (about 3.4 GB) and the voice models wait for Wi-Fi unless you allow cellular downloads. The launch-time update check may use any connection.
Agent Access is off by default. If you turn it on, Luke listens on your local network while the App is open, and any tool that has the address and your access token (for example Claude Code on your Mac) can search your memories and receive matching text and photo thumbnails. That information leaves your iPhone and goes to the connected tool. Depending on the tool and how you configured it, the tool may send what it retrieved to a cloud AI provider or store it. Those copies are controlled by that tool and provider, not by Luke, and turning Agent Access off does not delete information a tool already retrieved.
Agents can read but never change your data. Luke does not publish the address to the internet; your network’s configuration determines who can reach devices on it. Turning Agent Access off stops the server immediately, you can regenerate the token at any time, and Clear All Data deletes it.
The App contains no advertising SDKs, sets no cookies, and does not track you across apps or websites. We do not sell or share personal information and we do not engage in targeted advertising.
Sharing usage statistics is off by default. If you turn on Share Anonymous Usage Data (offered during setup and available in Settings → Privacy & Data), the App sends one anonymous summary per day to TelemetryDeck GmbH, a privacy-focused analytics provider in Germany. The summary contains: which features you used; how long each area of the App was open; how far the photo analysis has progressed; counts of actions such as messages sent, calls started, recordings, imports, and backups; technical failure codes (for example a paused photo analysis or a failed model download); average response times; whether Luke Pro is active; whether Photos, Location, and Notifications access is granted; the approximate size of your photo library (in ranges); how many weeks since you installed the App; and device details: model, iOS version, App version, language, region, time zone, screen size, and display and accessibility settings. Each summary carries a random identifier generated for that summary alone, so summaries cannot be linked to you, your device, or to each other. Summaries never include photos, messages, prompts, answers, recordings, names, places, or any other content. Nothing is counted while the setting is off. Turning it off stops counting immediately and discards the unsent day. We use these statistics only to understand which features are used and what fails. Because this data cannot identify you, Do Not Track and Global Privacy Control signals do not change it.
Apple may share crash reports with us if you chose to share analytics with app developers in iOS Settings; that sharing is controlled by Apple.
Notifications are generated on your device. Luke does not send notifications from a server.
Your data stays on your device for as long as you keep it. You can delete individual items (a memory, a visit, a recording, a chat), or everything at once with Settings → Privacy & Data → Clear All Data. Uninstalling the App permanently deletes all Luke data on that device. See Faces and Voices for what deleting a person does.
Your data is protected by the iOS sandbox and device encryption, and optionally by App Lock. Model downloads are fetched over HTTPS. Since we hold no copy of your data, there is no Luke database that could be breached. Protect your device passcode, your Agent Access token, and any backup files you create.
If you contact us, we receive what you send: your email address, your name if you include it, your message, and any screenshots or files you attach. We use it only to answer you and to investigate the problem you report. We receive and store this email through Google’s Gmail service, whose servers may be located outside your country. We keep support threads until the issue is resolved and delete them within one year after that. Please do not send memories, recordings, or other people’s information unless it is needed to solve your problem. In-app deletion does not delete email you have sent us; ask us and we will delete it.
Luke is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.
You control your Luke data directly in the App: view, correct, export, and delete it there, because that is the only place it exists. Permissions for Photos, Location, Microphone, Speech Recognition, Camera, Local Network, and Notifications can be changed at any time in iOS Settings. For information we actually hold, which is limited to support correspondence, you can ask us to access, correct, or delete it at the address below, and we will respond as applicable law requires. Sharing anonymous usage statistics is optional; turn it off at any time in Settings → Privacy & Data.
This section supplements the policy for residents of US states with privacy laws, to the extent those laws apply to us.
This section supplements the policy under the Act on the Protection of Personal Information (個人情報保護法). A Japanese-language version of this section is published alongside the Japanese translation of this policy.
Your use of Apple services is governed by Apple’s Privacy Policy (https://www.apple.com/legal/privacy/). Downloads from Hugging Face are governed by its privacy policy (https://huggingface.co/privacy). Support email is handled under Google’s Privacy Policy (https://policies.google.com/privacy). Anonymous usage statistics, if you turn them on, are processed by TelemetryDeck GmbH under its privacy policy (https://telemetrydeck.com/privacy/).
We may update this policy when the App changes. The current version is always available in Settings → Legal → Privacy Policy and at the published URL. If a change materially affects what leaves your device, we will show it in the App before it takes effect.
Ryuichi Sumida Email: rui.sumida1@gmail.com