Luci privacy statement

This English version is the authoritative version of this document. Translations into other languages are provided for convenience only.

Robin Chung built the Luci app as a Freemium app. This SERVICE is provided by Robin Chung at no cost and is intended for use as is.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions unless otherwise defined in this Privacy Policy.

Information We Collect

What you write in Luci. Your mood entries, journal text, tags, and reminders are created on your device and stored on your device. By default they are never transmitted to us and we cannot read them.

Health data (sleep and steps), only if you connect it. Luci can optionally connect to Health Connect on Android and Apple HealthKit on iOS to read your sleep data and daily step counts. If you grant this permission, Luci reads this data to show it alongside your journal entries and to generate insights — computed entirely on your device — about how your sleep and activity relate to your mood. Health data is stored on your device together with your entries. If you have enabled optional online sync, the sleep and step values attached to your entries are synced to our sync servers in encrypted form along with those entries; otherwise they never leave your device. We never use your health data for advertising, never sell it, never share it with third parties, and never use it for any purpose other than the features described here. Connecting health data is entirely optional: Luci works fully without it, and you can revoke access at any time in Health Connect or in your device's Health settings, which stops all further collection. You can delete health data already attached to entries by deleting those entries or by using the deletion controls described below.

Your account, only if you turn on sync. Luci works without an account. If you choose to enable online sync so you can use Luci on more than one device, we collect the email address you sign up with and store your entries on our sync servers in encrypted form.

Diagnostic and usage data. When the app crashes we collect crash reports, and we collect anonymous usage statistics about how the app is used, so that we can fix problems and improve the Service. This may include information such as your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Purchases. If you subscribe to Luci, your purchase is processed by Apple or Google. We receive a record that a subscription exists and its status. We never receive your payment card details.

How Your Data Is Stored

By default Luci is local only: everything you write stays on your own device, and your entries are included in your phone's own backup. We hold no copy.

If you turn on optional online sync, your entries are stored on our sync infrastructure, provided by Supabase. Synced data is encrypted in transit and at rest. Either way, your data is never sold, never shared with advertisers, and never used to train models.

Service Providers

We employ the following third-party companies to operate the Service. Each has access only to the data needed for its function, and each is obligated not to disclose or use that information for any other purpose:

  • Supabase — hosts optional account and sync data. Privacy policy
  • Firebase Crashlytics (Google) — receives crash reports. Privacy policy
  • Mixpanel — receives anonymous product usage analytics. Privacy policy
  • RevenueCat — manages subscription status. Privacy policy
  • Apple App Store and Google Play — process payments and app distribution.

Data Retention

We keep data only for as long as it serves the purpose it was collected for:

  • Entries kept on your device are retained until you delete them in the app or uninstall Luci. We never receive them, so there is nothing for us to retain.
  • Health data (sleep and steps) attached to your entries follows the same rules as the entries themselves: it stays on your device until you delete it, and if you use sync it is deleted together with your entries or account. Revoking Health Connect or HealthKit access stops any further collection immediately.
  • Synced entries and account data are retained for as long as your account is active.
  • Data after you delete your account is removed from our live systems immediately. For 7 days it remains recoverable from rolling backups, in case a deletion was made in error. After 7 days those backups have rolled over and recovery is no longer possible.
  • Crash reports are retained by Firebase Crashlytics for up to 90 days and then deleted automatically.
  • Anonymous usage analytics are retained for up to 12 months.
  • Purchase and subscription records are retained for as long as tax and accounting law requires us to keep them. These records are held by Apple, Google, and RevenueCat, and do not contain anything you wrote in Luci.

Deleting Your Data

You can delete your data at any time, from inside the app, without contacting us:

  1. Open Luci and go to Settings → Privacy.
  2. Tap Delete my Data to erase your entries, or Delete account to erase your entries and close your synced account entirely.
  3. Confirm when prompted.

Data on your device is erased immediately. Synced data is deleted from our live systems immediately, stays recoverable from backups for 7 days as described above, and is then gone permanently. Deleting your account cannot be undone after that point.

If you cannot access the app — for example because you have lost the device — email us at [email protected] from the email address associated with your account and ask us to delete your data. We will confirm your request and complete it within 30 days.

These steps also have their own page: fromluci.com/data-deletion.

Your Rights

You may ask us to give you a copy of the data we hold about you, correct it if it is wrong, or delete it. To exercise any of these rights, use the in-app controls described above or contact us at [email protected]. We do not charge for this and we will not treat you differently for asking.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use these "cookies" explicitly. However, the app may use third party code and libraries that use "cookies" to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. Synced data is encrypted in transit and at rest. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

This policy is effective as of 2026-08-23

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected].