Effective October 2, 2026

Privacy notice

Luey is a private personal and household task organizer operated by Josh Kaiser. Contact: josh@joshkaiser.io.

Information Luey accesses

The direct Gmail notification connection requests metadata access: account identity, message identifiers, labels, and headers. That permission does not allow reading message bodies. Notification watches cover mailbox changes; task reconciliation acts on action-labeled or already-linked messages.

Separate authorized Gmail connections through Zapier can read email subjects, senders, dates, labels, and message content to extract action items. Luey also processes linked task titles, notes, evidence excerpts, assignments, dates, priorities, status, and service identifiers.

How information is used and shared

Luey uses this information to identify action items, give tasks useful context, synchronize task changes, apply completion labels, and recover from missed updates. Selected action-email content is sent through Zapier to OpenAI for task extraction. Relevant task information is stored in Zapier Tables and synchronized with the configured Todoist and Hearth accounts. Household task details may be visible to other people with access to those shared lists.

Google Cloud hosts the event service, synchronization state, and credentials. Zapier provides connected-account access and scheduled workflows. These providers process information as part of providing the configured service. Luey does not use Google user data for advertising, sell it, or use it to train its own models.

Luey's use and transfer to other apps of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and retention

OAuth credentials are stored in Google Cloud Secret Manager. Task and synchronization records are stored in Zapier Tables and Google Cloud Firestore. Event receipts contain event type, timestamps, and hashed identifiers rather than message bodies, and are configured for automatic deletion after seven days; deletion may occur later as the cleanup service processes them.

Task records and synchronization records do not currently have automatic expiry. Dismissing a task hides it from active lists but preserves its record. Provider logs, backups, and copied task records may have separate retention settings.

Your choices and deletion

You can revoke Luey's Gmail connection in Google Account connections. Existing Zapier Gmail connections are separate and must also be disconnected to stop those workflows. Connected-app authorization can also be revoked in Todoist or Zapier.

Revoking access does not automatically delete previously stored tasks. Contact the operator to request removal of Luey credentials, task records, and synchronization records. Copies in Gmail, Todoist, Hearth, provider logs, or backups may require separate deletion or expire under those services' retention rules.

Security and changes

The event service authenticates incoming callbacks and limits access to stored credentials. Its application error responses avoid email content and tokens. No system can guarantee absolute security. This notice will be updated when Luey's data practices change.