Privacy Policy.

1. Information we collect

1.1 Information you provide

When you create an account, we collect your email address, a display name (optional), birth year (optional, used to contextualize age-related cognitive patterns), and your account preferences.

When you use the Service, you may choose to provide voice recordings, written journal entries, drawings (including from handwriting and clock drawing activities), photo and video content, responses to cognitive activities, self-reported information about mood, life events, and medical history, and family member contact information when you invite family members. All raw content is stored on your device by default.

1.2 Information from your device

With your permission, the Service can access your microphone (for voice journaling), camera (for video journaling), Apple HealthKit data (read-only), and notifications.

We do not collect: your location, your contacts, your browsing or search history, your photo library beyond items you choose to share, or any data you have not granted permission to access.

1.3 Information we derive

The Service processes the data above on your device to extract patterns and features. These derived patterns include linguistic features from your voice and writing (vocabulary diversity, speech rate, sentence complexity), facial features from videos (expression patterns, eye movement, head pose), performance metrics from cognitive activities, behavioral features (typing rhythm, app usage patterns), and health context (sleep architecture, activity patterns).

These derived patterns are what sync to your account, not the underlying raw data.

1.4 Third-party integrations

Lucid does not currently connect to any third-party service beyond Apple Health. If we add optional connections in the future (wearables, glucose monitors, or genetic services), each will be strictly opt-in, and this policy will be updated before any such connection goes live.

1.5 Family member information

If you invite family members to provide observations, we collect their email address to send check-in prompts, and the observations they provide. Family members have their own privacy rights and can request deletion of observations they have shared.

1.6 Automatically collected information

When you use the Service, our hosting provider records your IP address in server logs, which we use only to deliver and secure the Service, never to track you.

We collect product analytics: which screens you open, which activities you start and finish, and whether you subscribe. This tells us what to build and what to fix. It never includes what you write, say, draw, or score. Your journal entries, transcripts, recordings, images, and cognitive results are not sent to our analytics provider, and no analytics event carries the content of anything you have recorded. You can turn product analytics off at any time in Settings under Privacy, and the Service works exactly the same with it off.

We do not collect crash reports or advertising identifiers, and we do not track you across other apps or websites.

2. How we use your information

We use your information solely to provide the Service, improve the Service through aggregate pattern analysis and bug fixes, communicate with you about service-related matters, and comply with legal obligations.

We do not use your information to: sell or rent to third parties, train artificial intelligence models without your explicit opt-in consent, show you advertising, track you across other apps or websites, or make any inferences about your identity beyond what is necessary for the Service.

3. How we share your information

We share your information only in these limited circumstances:

3.1 Service providers

We use trusted service providers to operate the Service: Supabase (database hosting), Anthropic (generates your daily writing prompt and weekly digest), and Apple (App Store, push notifications).

What Anthropic receives is deliberately narrow: numeric summaries of your derived patterns and, at most, the category labels of any life context you have recorded. No journal text, transcripts, recordings, images, or account identifiers are sent.

RevenueCat (subscription management) and PostHog (product analytics) are both active. RevenueCat processes your subscription status and purchase history so we know what you have access to; it receives your account identifier and what Apple tells it about your purchase, never your health or journal content. PostHog receives the product events described in section 1.6, tied to your account identifier so we can tell one person's path through the app from another's. Neither receives what you write, say, draw, or score.

3.2 Family sharing

When you invite a family member and grant them permission, they can see the specific information you authorize. You control exactly what they see and can revoke access at any time.

3.3 Research participation

If you opt into research participation, we may share deidentified data with research partners such as academic institutions. This requires separate, explicit consent and can be revoked at any time.

3.4 Legal requirements

We may disclose your information if required by law, subpoena, or court order. We will notify you of such disclosure unless legally prohibited.

3.5 Business transfers

If Lucid is acquired or merges with another company, your information may transfer to the new entity, subject to this Privacy Policy or a successor policy that respects your rights equivalently.

4. Data storage and security

4.1 Where your data lives

Raw cognitive content (voice, video, journal entries, drawings) is stored on your device, optionally backed up via your iCloud (we do not have access to those backups).

Derived patterns and account data are stored on encrypted servers operated by Supabase.

4.2 Encryption

Data in transit uses TLS 1.3. Data at rest uses AES-256. Authentication uses industry-standard token-based authentication.

4.3 Data retention

We retain your account data and derived patterns as long as your account is active. When you delete your account, we delete all associated data within 30 days, except where required for legal compliance (financial records related to subscriptions are retained for 7 years per applicable regulations). You can export all your data at any time.

4.4 Security practices

We follow industry best practices, including HIPAA-aligned security practices (though Lucid is not a HIPAA covered entity), limited internal access on a need-to-know basis, and logging and monitoring of data access.

If we become aware of a security breach affecting your information, we will notify you within 72 hours of discovery for significant breaches and take appropriate remediation steps.

5. Your rights and choices

Access and export

View all data we hold about you within the app. Export a complete copy in a standard format (JSON) from the You tab, under "Export my data".

Correction

Correct any inaccurate information through the app or by writing to privacy@lucidhealth.app.

Deletion

Delete specific items at any time. Delete your entire account from Settings > Account > Delete Account.

Consent withdrawal

Withdraw consent for specific uses (research participation, family sharing, third-party integrations) at any time without losing access to the Service.

Granular permissions

Grant or revoke iOS permissions at any time in iOS Settings > Lucid. The app handles revoked permissions gracefully.

Marketing communications

We send only essential service communications. We do not send marketing emails by default.

6. Regional privacy rights

6.1 California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, the right to opt out of sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising), the right to limit use of sensitive personal information, and the right to non-discrimination for exercising these rights.

To exercise these rights, write to privacy@lucidhealth.app or use the in-app controls. We will respond within 45 days.

6.2 European Economic Area, United Kingdom, and Switzerland

EEA, UK, and Swiss residents have rights under GDPR, UK GDPR, and related laws, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing.

Legal bases for processing: Contract (providing the Service), Consent (specific features), Legitimate Interest (improving the Service, preventing fraud).

International transfers: Lucid is operated from the United States and your data is stored there, so using the Service from these regions means your data is transferred to the United States. We are putting the appropriate transfer safeguards in place, including Standard Contractual Clauses with our providers, before offering the Service generally in these regions.

Privacy contact: privacy@lucidhealth.app

6.3 Other jurisdictions

If you reside in a jurisdiction with specific privacy rights (Canada's PIPEDA, Brazil's LGPD, Australia's Privacy Act), we comply with applicable local laws. Write to privacy@lucidhealth.app for jurisdiction-specific inquiries.

7. Children's privacy

Lucid is intended for adults aged 18 and older, and we do not permit anyone under 18 to create an account. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, please write to privacy@lucidhealth.app and we will delete it promptly.

8. Health data and medical disclaimer

Lucid is a wellness app, not a medical device. We do not provide medical advice, diagnosis, or treatment. The information provided by the Service is for general informational and educational purposes only.

If you have specific health concerns, please consult a qualified healthcare provider. Do not rely on Lucid for medical decisions.

We are not a HIPAA-covered entity. The health data we collect is treated with HIPAA-aligned security practices but is governed by this Privacy Policy, not HIPAA.

9. Changes to this policy

We may update this Privacy Policy occasionally. Material changes will be communicated through the app and via email at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance. Previous versions are archived and available upon request.

10. Contact us

Privacy questions and data requests: privacy@lucidhealth.app
General support: hello@lucidhealth.app
Legal: legal@lucidhealth.app
Security: security@lucidhealth.app

We aim to respond to all privacy inquiries within five business days.