Lur App Privacy Policy

Date: 28 October 2026. Published at https://lur.osnova.tools/privacy.

Lur is a messenger for organisations. The Lur app for iOS and Android connects to your organisation's server (the "organisation server"). This document describes what data the app processes and where it goes.

In short

• Messages, files, calls, names and contacts live on the organisation server. The publisher of the app has no access to them.
• The publisher runs two helper services: a push notification relay and an app update server. Both receive technical identifiers only.
• The app has no analytics, no advertising trackers and no usage statistics.

What the organisation server processes

Everything you do in Lur: your account, name and avatar, messages and files, voice messages, calls and their recordings (if the organisation turned recording on), settings, the list of devices you signed in from. The organisation installs and administers this server itself: it decides where it runs, who has access and how long data is kept.

The audio tracks of a meeting with AI notes but no recording are deleted after transcription; when the transcription fails, they are kept until the general retention period of recordings ends so that the organiser can retry it. Speech recognition (transcripts of voice messages and meeting recordings) runs on the organisation server by default. The organisation may connect an external speech recognition service; then fragments of speech are sent to that service over a secure connection, and its data retention terms are the organisation's choice.

The app keeps the address of the organisation server and your session token on the device, in the system's protected storage.

Push notifications

For notifications to reach the phone while the app is closed, the Apple (APNs) and Google (FCM) services are needed. Only the publisher holds the keys to them, so the organisation server sends notifications through the publisher's relay lur-push.

The relay receives from the organisation server only:

• the address (origin) of the organisation server, when the server registers with the relay;
• the device token for APNs or FCM and the app build identifier;
• identifiers: chat, message, call, the number of unread chats.

Message text, chat titles and people's names are never sent to the relay. The app fetches the notification text itself from the organisation server, under your session, on the phone.

Push notifications are turned on by the organisation's administrator. While they are off, the app does not register the device and shows notifications only while open.

The relay logs technical delivery facts only (the organisation server identifier, the token kind, the APNs or FCM response code) and stores no notification content.

App updates

The app's interface can be updated without a new version from the store. At start the app asks the publisher's update server lur-updates whether a newer version exists and sends it only its runtime version, the platform (iOS or Android) and the update channel. The update server receives no data about you, your device or the organisation server. Updates are signed with the publisher's key and the app verifies the signature.

Device permissions

• Camera — video calls, photos into a chat, scanning the sign-in QR code.
• Microphone — calls and voice messages.
• Photos and files — attachments you choose yourself.
• Notifications — only when the administrator turned push on.

All of them are used only on your action and only to send data to the organisation server.

What the app does not do

• It collects no analytics or usage statistics.
• It contains no advertising networks or trackers.
• It shares no data with third parties except APNs and FCM, to the extent described above.
• It does not read contacts, location or other device data.

Deleting data

Data is stored on the organisation server. To delete your account and the data linked to it, contact your organisation's administrator. Signing out of the app removes the session and the device tokens from the organisation server; after that no notifications are sent to this device.

Changes

A new revision is published at https://lur.osnova.tools/privacy with a new date.

Publisher contact

Operator: SPUTNIK LLC, TIN 7731323200 (PSRN 1167746722076 is given in the personal-data consent).

E-mail: mobile@sputnik.direct.

Registered address: 7 Nobel St., floor/room 3/51, Skolkovo Innovation Center, Moscow, Russia.

Postal address: PO Box 46, Kazan, 421001, Russia.