Privacy Policy

The short version

This summary is here for orientation, not as a replacement for the full policy below.

• We collect only what the pause needs to work: your account, the things you tell it, and basic technical data.
• The proactive guard on Android decides which app is in front of you on your device. That app-usage detection never leaves your phone.
• We never sell your data, and we never use it to train AI models.
• You can export everything, or erase your account and its data, in one tap.
• Your data is stored in the European Union.

Who we are

lucid ("lucid", "we", "us") is a tool that puts a deliberate pause between an impulse and the action it wants to trigger, and builds a private psychometric profile so that pause can speak in your own patterns. lucid is operated from Portugal, within the European Union.

For any privacy question, or to exercise the rights described below, contact us at support@uselucidapp.com.

What we collect

Account and sign-in. If you register with email, we store your email address and a securely hashed password. If you sign in with Google or Telegram, we receive the basic identifiers those services return (such as your name, email address, and avatar) so we can create and recognise your account. We never receive your Google or Telegram password.

What you tell the pause. The answers you give in the assessment, the loops and categories you choose to work on, the pauses you run and how they went, any notes you add, and, if you use the Trader module, the trade entries you record.

Payments. When you subscribe, checkout and billing are handled by our payments provider acting as merchant of record. They process your payment details directly. We receive confirmation of your subscription status, not your card number.

Technical data. Standard server logs and a session cookie that keeps you signed in. We do not run advertising or cross-site tracking.

Crash reports. If the Android app crashes, it sends a diagnostic report so we can fix the fault: the error and where in our code it happened, the app version, and the device model and Android version. It carries no account identifier, so a crash report cannot be traced back to you, and it does not include the screen you were on, screenshots, or anything you had written.

What stays on your device

The Android proactive guard watches only the apps you explicitly add. To do that it checks which app is currently in the foreground, on your phone, locally. Which apps you have installed, which one is open, and how long you spend in it are used on the device to decide whether to raise the pause. That app-usage information is not transmitted to us and is not stored on our servers.

How we use your data

• To provide the pause: to run the assessment, generate your profile and lenses, hold cooldowns, and record outcomes so the loop can weaken over time.
• To operate your account and subscription, including access to Core and Trader features.
• To keep the service secure, prevent abuse, and diagnose problems.
• To meet legal obligations and enforce our terms.

AI generation

Your written profile, the lenses, and the coach replies are produced by a large-language-model provider (Anthropic). To generate a result, the minimum input necessary is sent to that provider, processed to return your result, and not used to train their models. On mobile, the profile is scored on your device and, where possible, only the scores are sent rather than your raw answers.

Who processes data on our behalf

We rely on a small set of processors, each bound to protect your data and use it only to provide their service to us:

• Supabase, for our database and backend, hosted in the European Union.
• Anthropic, for the AI that writes your profile, lenses, and coach replies.
• Our payments provider (merchant of record), for subscriptions and billing.
• Google and Telegram, only where you choose to sign in or interact through them.
• Vercel, for hosting the website.
• Sentry, for crash reports from the Android app, on their EU infrastructure.

Where your data lives

Your account data is stored in the European Union. Where a processor operates outside the EU, that transfer is covered by appropriate safeguards such as the European Commission's standard contractual clauses.

How long we keep it

We keep your data for as long as your account is active. When you erase your account, its personal data is deleted from our systems, except where we are required to retain limited records (for example, billing records) to meet a legal obligation. Backups are cycled out on a rolling basis.

Your rights

Under the GDPR you have the right to access, correct, export, and erase your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your local supervisory authority.

You can export your data and erase your account directly from the app in one tap. You can also reach us at support@uselucidapp.com and we will respond within the time the law requires.

Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or analytics cookies that track you across other sites.

Children

lucid is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

If we make a material change, we will update the date at the top and, where appropriate, tell you in the app. Continuing to use lucid after a change means you accept the updated policy.

Contact

Questions, requests, or concerns: support@uselucidapp.com.