Privacy notice

Effective October 23, 2026. This pilot supports self-service research accounts. Paid subscriptions are not enabled. Each account has a separate research database, private file directory, research process and encrypted provider-connection store. The original owner workspace remains separate.

Your account

We store your username, salted password hash, hashed recovery code and hashed session tokens. No email address is required to create an account. Save your recovery code: automated password recovery requires it, and we do not offer email resets. Sessions expire after seven days; sign-out revokes the current session and password recovery revokes all sessions. Server administrators have operational access needed to maintain the service; workspace privacy is isolation between accounts, not end-to-end encryption from the operator.

Research and records

The app stores the program names and locations you enter, source pages and financial records it collects, research results, flags, notes, uploaded files and records-request history on its server. Returned agency mail and attachments stay in private case storage. Do not upload protected beneficiary, banking, identity or other confidential data you are not authorized to use.

Google connections

When authorized, Gmail access lets the app send approved records requests and read tracked request threads. Google’s read permission covers the mailbox; the app queries tracked references and thread IDs. Gmail messages, tokens and private response files are not sent to artificial intelligence services or included in the general public-research export. The app does not sell Gmail data or use it for advertising or general model training.

Google client credentials, refresh tokens and entered provider keys are saved using encrypted account credential storage. You can disconnect Gmail in Requests & replies and revoke authorization in your Google Account. Disconnecting removes saved mailbox authorization; it does not delete the case history or sent mail.

Maps and other providers

Opening recipient cards sends the displayed public address to Google to obtain maps and Street View. Google receives normal connection information and applies its Privacy Policy and Maps terms. Imagery is displayed live and is not archived or sent to an artificial intelligence model.

Public-data queries are sent to the relevant government or financial-data source. Optional Brave search sends search terms when connected; optional OpenAI review sends bounded public evidence summaries only when enabled. Review each provider’s current terms before enabling a paid connection. This app does not treat uploaded private records as public merely because they were uploaded.

Phones, sessions and offline use

The website uses a secure session cookie. The private native app keeps its session in memory. The progressive web app caches only public presentation assets and an offline notice; case data, mail, keys, maps and reports are excluded from that cache. Native file sharing temporarily uses the device cache for a file you choose to export. Recipient apps control files after you share them.

Retention and control

Case files remain in your account until removed under the service’s retention process. Starting another investigation does not erase older request history. Request an export, correction or deletion from the workspace owner at support@lukhoo.com. This pilot has no automatic case retention or self-service account deletion. Account deletion requests are handled through support after identity verification. Encrypted account backups may retain prior copies for three days; the original owner workspace uses a separate seven-day backup policy. Backups currently stay on this server and require its protected recovery key.

For applicable Google information, see the Google API Services User Data Policy. Use of information received from Google APIs follows that policy, including its Limited Use requirements. Public Google authorization may still require Google verification and audience configuration before external users can connect Gmail. Creating an account does not authorize any Gmail mailbox.