Privacy Policy

Notice at Collection — California Civil Code § 1798.100. Lutso collects personal information categories listed in Section 2 only for purposes in Section 3. The company does not “sell” personal information but “shares” it only when users enable Marketing cookies. See Section 8(B) for CCPA/CPRA rights.

1. Who We Are

Lutso Inc. (“Lutso,” “we,” “our,” or “us”) operates:

• Sites: lutsohealth.com and lutso.ai
• Device:A tabletop device with real keys. It has a microphone and no camera, and it only listens after you press the button. Your questions are sent securely to Lutso’s service and our AI providers to create the answer. Lutso keeps your conversation history so it can remember.
• Cloud Services: Servers that create answers and keep logs of your conversations.

Together, these constitute the “Services.”

2. Information We Collect

Waitlist and Early Access

• Details: Your email, who you are considering Lutso for, and the age range you choose. Your IP address, browser details, and ad-click identifiers.
• Source: You and your browser
• Why needed: Run the waitlist, contact you, and measure and target our advertising.

Account / Billing

• Details: Name, email, phone number, address, and payment basics (full card information not stored). Your mobile number identifies your account when you sign in on the Device.
• Source: You
• Why needed: Account and subscription management, customer support, fraud prevention.

Conversations

• Details:What you say after you press the button, including anything sensitive you choose to ask about, and anything others nearby say while the Device is listening. Lutso’s answers and your conversation history.
• Source: You and the Device
• Why needed: Create answers, remember earlier conversations, and operate and improve the Services. Our team reads conversations, together with your name, in internal tools for these purposes.

Device Diagnostics

• Details: IP address, device ID, Wi-Fi network name, crash logs.
• Source: The Device
• Why needed: Security and troubleshooting.

Site Usage Data

• Details: Cookie IDs, pages viewed, referrer information.
• Source: Browser cookies and tracking pixels
• Why needed: Improve site performance and (with consent) optional marketing purposes.

Support Records

• Details: Emails, text messages, call notes.
• Source: You
• Why needed: Resolve support issues and train team.

Legal basis for collection: Data collection based on contract performance, legitimate business interests, or explicit consent (especially non-essential cookies and marketing).

3. How We Use Information

• To provide, maintain, and improve the Services
• To answer your questions and remember earlier conversations
• To send service and security-related notices
• To process payments and enforce Terms
• To detect fraud or abuse and comply with legal obligations
• To identify your account when you sign in on the Device. Phone numbers are not sold, rented, or shared with third parties or affiliates for marketing.

4. What We Never Do

• The Device has no camera, and it never listens until you press the button
• We never sell or rent your personal data
• We never make automated decisions with legal or similarly significant effects without human review
• We do not knowingly collect data from children under 13 (see Section 9)

5. Cookies and Similar Technologies

Essential Cookies

• Purpose: Security, load balancing, and remembering how you arrived at the site
• Always enabled.

Analytics Cookies

• Purpose: Aggregate usage tracking via Google Analytics 4
• Off by default unless you click “Accept all” or enable in Cookie Settings.

Marketing Cookies

• Purpose: Retargeting through Google, Meta, or TikTok
• Off by default. Enabling counts as “sharing” under CPRA.

Banner text (displayed to users)

“We use cookies to improve your experience. Essential cookies run by default; Analytics and Marketing cookies load only if you click Accept all. Click Cookie settings to manage preferences.”

Do-Not-Track signals

No accepted industry standard; use the cookie settings panel instead.

6. When We Share Information

Information may be shared with:

Service Providers

Hosting, payments, messaging, shipping, email, error monitoring, team tools, and AI model services, used to operate core functions. Your questions are sent to AI model providers to create answers. Providers bound by contractual confidentiality and security obligations.

Advertising and Analytics Partners

Our sites use analytics and advertising tools from Google, Meta, and TikTok, which receive information about your visit. When you join the waitlist, we send Meta a hashed version of your email, your IP address, browser details, and ad-click identifiers to measure and target our ads.

Legal or Safety Authorities

Shared only when required by law or necessary for safety. Disclosure limited to strictly necessary information.

Successor Entities

If involved in merger, acquisition, or asset sale, prior notice will be given. Acquiring party required to uphold same or stronger privacy protections.

7. Data Retention

• Account and Billing Data: Duration of subscription plus 7 years (tax and audit purposes)
• Conversation History: Our AI provider holds the conversation so Lutso can continue it. Separately, we log the text of questions and answers for up to 12 months to review, troubleshoot, and improve the Services. You can ask us to delete your data (see Section 8). Copies in logs and at our AI provider expire on their own schedule
• Diagnostics Data: Up to 12 months
• Support Records: 2 years

Data may be retained longer if required by law, for fraud prevention, or to resolve disputes.

8. Your Rights and Choices

A. Rights for All U.S. Users

• To opt out of marketing emails, click “unsubscribe” or email info@lutsohealth.com
• To make privacy-related requests, email info@lutsohealth.com or call +1 (347) 348-2511

B. Rights for Residents of CA, CO, CT, VA, and UT

You have the right to access, delete, correct, port your data, or opt out of “sharing” your data for advertising purposes.

Verification process:

1. Submit request through website or by phone
2. Receive one-time secure link; match two data points (e.g., email + last 4 phone digits, or last login timestamp/IP)
3. For sensitive requests (such as deletion of conversation history), signed declaration under penalty of perjury required
4. Response within 45 days (with one optional 45-day extension)

Lutso does not sell personal information. “Sharing” occurs only when marketing cookies are enabled. Government-issued ID never requested unless absolutely necessary to verify identity or legal authority.

9. Children’s Privacy

Services not directed at children under 13. If you believe a child provided data, contact us immediately and we will delete it.

10. Security

We encrypt data between the Device and our servers, and we verify software updates before they install. No system is completely secure.

11. HIPAA Notice

Lutso is not a “business associate” under HIPAA. What you ask Lutso, including health questions, is not protected by HIPAA.

12. International Data Transfers

Our servers and providers operate in the United States and the European Union. By using the Services, you consent to data processing in those places and any other country where Lutso or its providers operate.

13. Changes to This Policy

Material changes trigger notification by email or website banner at least 30 days before taking effect (where required by law). “Last updated” date reflects current policy version.

14. Contact Us

Email: info@lutsohealth.com

Phone: +1 (347) 348-2511

Mailing Address:
Lutso, Inc.
101 Rainbow Drive PMB 11758
Livingston, TX 77399
United States