Lehto

Privacy policy

Last updated 20 October 2026

Lehto is a personal tool used only by its developer, Johannes Havukallio. This policy explains what it does with data from Google.

What Lehto accesses

With read-only access to YouTube (the youtube.readonly scope), Lehto reads the list of videos the signed-in user has liked: each video's title, channel, description, duration and thumbnail. It does not post, change or delete anything on YouTube, and it does not access any other Google data.

How the data is used

Liked videos are saved as entries in the user's own library, so they can be browsed and searched later. To write a summary and tags, a video's title, description and public transcript are sent to OpenAI's API. Nothing else is done with the data.

Where it is stored

The library is stored as files on the user's own Mac and in their own iCloud Drive. The Google sign-in token is stored only on that Mac and never leaves it. Lehto has no server and no database of its own.

Sharing

Data is not sold, shared with advertisers or used for anything beyond the purpose above. The only third party that receives any of it is OpenAI, for writing the summaries, under OpenAI's API terms, which do not allow it to be used for training their models.

Limited Use

Lehto's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access and data

Access can be revoked at any time in the Google Account settings under Third-party apps & services. Saved entries can be deleted from the library files.