Updated 2 November 2026 · lo (uk.co.iova.lo) · IOVA LTD
lo is an open-source phone client for a lo server you own and operate. You choose the server address. This policy describes the phone app and its optional notification service.
The app connects directly to your server over HTTPS. Session conversations, task instructions, approvals, queued messages, routines and preferences travel between your phone and that server. Your server may send work to the AI providers you configure. Their terms and policies apply to that processing. IOVA does not receive your conversations through the phone client.
Your phone stores its random install identifier and server login token in the operating system’s secure storage. The app sends the install identifier, device model and operating system to your server for pairing and device management. Passkey sign-in takes place on your server’s domain in the system browser. The app does not receive your fingerprint, face scan or private passkey.
If you enable notifications, the configured push relay receives your notification device token, platform, server address, pairing identifiers, and the title and state of notification events. This supports delivery through Google Firebase Cloud Messaging on Android or Apple Push Notification service on iOS. Conversation text is not included in lo’s relay events. Notification titles may identify a session. The relay operator and Google or Apple process delivery data under their own policies. Turning notifications off unregisters this phone from future server notifications.
The camera is used only when you choose to scan a pairing QR code. The app does not upload camera images. Clipboard text is read only when you tap Paste. Text you share to lo opens a new-task draft; it is sent to your server when you tap Start task.
Conversations and routines are retained by your own server under its configuration. Disconnecting the phone revokes its current login and notification registration on that server and removes the saved login from this phone. You can also revoke devices with /web on Telegram. To remove server data, manage it on the server you operate. Operating-system notification settings control whether notifications are shown.
The app includes no advertising or analytics SDK. Opening the public lo website or its app-link fallback page creates ordinary web-hosting requests. App-link server and route information is held in a URL fragment, which browsers do not send in HTTP requests to the website.
Questions about this app: support@iova.co.uk. Questions about a self-hosted server or third-party relay should go to its operator.