Privacy Policy

Lumi — a personal assistant in Telegram.
Version 1.0, effective 20 августа 2026. · Русская версия

1. Who we are

Data controller: ИП Юшков Андрей Давронович, Tax ID (INN) 665816054893 , registration number (OGRNIP) 316965800157481 , address: г. Екатеринбург (полный адрес — по запросу).
Contact for any data request: hi@desire-s.ru.

2. Data we process

• Telegram data: your Telegram ID and name, the messages you send to the assistant, files and voice messages you share.
• Your Telegram conversations — only if you explicitly connect your own account, so the assistant can remember commitments and help you reply. This step is optional and reversible.
• Google Calendar: events (title, time, location, attendees, description) — read and modified at your request. Google Tasks if connected.
• Settings: preferred name, time zone, city.
• Technical data: IP address and request time in server logs.

3. Purpose and legal basis

Data is used solely to run the assistant: manage your calendar and reminders, keep track of commitments and contacts, draft replies you ask for. The legal basis is your consent, which you give by using the service and may withdraw at any time. We never sell your data or use it for advertising.

4. Google user data (Limited Use)

Lumi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google Calendar data is used only to provide the user-facing features you see (view your schedule, create/move/cancel events, remind you in advance);
• it is never used for advertising;
• it is never used to train AI models;
• it is not shared with third parties except as required to provide those features (see section 5), to comply with law, or with your explicit consent;
• you grant access yourself and can revoke it at any time at Google Account → Third-party apps; once revoked, the assistant loses calendar access.

5. Processors we share data with

Recipient	Data shared	Purpose
Anthropic (USA)	your request and the context needed to answer it: messages, event details, notes	generate the assistant's reply
OpenAI (USA)	voice messages (transcription) and text for speech	speech recognition and synthesis
Google (USA)	calendar events and tasks	show and modify your calendar at your request
Telegram	your messages and the assistant's	message delivery
Yandex (Russia)	meeting addresses	travel time estimation

Processors use the data only to deliver their service. Anthropic and OpenAI do not train their models on data submitted through their APIs.

6. Where data is stored, and for how long

Databases are hosted on servers located in the Russian Federation. Each user has a separate database in a separate container — different users' data is never mixed. Data is kept while you use the service. After you withdraw consent or request deletion, everything is deleted within 30 days, including backups as they rotate. Some processors are located outside Russia (USA), so using the service involves cross-border transfer of the minimum data needed to answer you.

7. Your rights

• request a copy of the data we hold about you;
• have inaccurate data corrected;
• withdraw consent and request deletion — email hi@desire-s.ru;
• revoke Google access yourself at any time (link in section 4).

We respond to requests within 30 days.

8. Security

Server access is restricted to the operator via keys, with no shared passwords. Secrets are kept outside the code base. User instances are isolated from each other, each with its own credentials and database. We never ask for or store your Google or Telegram passwords.

9. Children

The service is not intended for people under 16.

10. Changes

If this policy changes, the effective date above changes; material changes are announced by the assistant in chat.

---

ИП Юшков Андрей Давронович · hi@desire-s.ru · about the service