This Privacy Policy explains how Lucitude LLC (“Lucitude”, “we”, “us” or “our”) collects, uses, shares and protects personal information, and the choices and rights you have.
It applies to:
- our website at lucitude.com (the “Website”);
- the mobile and web applications we publish, including apps distributed through the Apple App Store and Google Play under the Lucitude developer name (the “Apps”); and
- the support and communication services connected to them (together with the Website and the Apps, the “Services”).
Lucitude LLC is the controller of the personal information described in this policy. Where we build software for a client and process data on that client’s behalf, the client’s privacy policy governs that data and we act as its processor or service provider.
An App may show additional privacy information inside the App or on its store listing, for example to explain a specific permission. That information supplements this policy. If it conflicts with this policy, the App-specific information applies for that App.
Summary
- This Website sets no cookies and uses no analytics or tracking.
- We collect only what we need to run the Services, answer you and keep the Services secure.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Our Apps do not track you across other companies’ apps or websites.
- Payments for Apps are handled by Apple or Google. We never receive your full payment card details.
- You can ask us to access, correct or delete your information at any time by emailing hello@lucitude.com.
Information we collect
Information you give us
- Correspondence. When you email us, we receive your name, email address, the content of your message and any attachments you choose to send.
- Account information. If an App offers an account, we collect what you provide to create it, such as your email address, a display name and a password (stored only in hashed form). If you sign in with Apple or Google, we receive the name and email address that provider shares with us, which may be a private relay address.
- Content you create. Text, files, images or other content you enter into an App, where the App stores it on our servers to provide a feature such as sync or backup.
- Feedback and support details. Information you include in a support request, such as your device model, operating system and app version, or screenshots.
Information collected automatically
On the Website. The Website does not use cookies, analytics, advertising tags or similar technologies. Like any website, our hosting provider receives technical information needed to deliver pages and protect the Website from abuse: IP address, browser type, requested page, referring page, and date and time of the request. This information is kept in short-lived server and security logs.
In the Apps. Depending on the App and the features you use, the App may collect:
- Device and app information: device model, operating system and version, app version, language, region setting and time zone.
- Diagnostics: crash reports and performance data, such as the state of the App when a crash occurred, stack traces and launch times.
- Usage information: which screens and features are used and how often, collected as events. This is used in aggregate to understand which features work and which do not.
- Identifiers: a random identifier generated for your installation of the App, used to group diagnostics and usage events. Our Apps do not access the advertising identifier (IDFA on iOS, Advertising ID on Android) unless an App’s store listing says otherwise and, on iOS, you grant permission through Apple’s App Tracking Transparency prompt.
Device permissions
Some features need access to parts of your device, such as the camera, photo library, microphone, location, contacts or notifications. An App asks for permission before it accesses these, uses the access only for the feature you are using, and continues to work without it where possible. You can change permissions at any time in your device’s settings.
Information from third parties
- App stores. Apple and Google give us reports about downloads, purchases, subscriptions, refunds, crash rates and ratings. These reports are mostly aggregated. For purchases, we receive the transaction records needed to give you access to what you bought, not your payment details.
- Sign-in providers. If you choose Sign in with Apple or Google Sign-In, the provider shares limited profile information with us, as described above.
Information we do not collect
We do not knowingly collect sensitive personal information, such as government identification numbers, precise health information, financial account credentials, or information about racial or ethnic origin, religion or sexual orientation. If an App ever needs information of this kind for a feature you choose to use, it will explain why and ask for your consent first.
How we use information
We use personal information to:
- provide, operate and maintain the Services, including your account and the features you choose;
- process transactions and give you access to purchases and subscriptions;
- respond to messages and support requests;
- diagnose crashes and errors, and improve performance and reliability;
- understand, in aggregate, how the Services are used so we can improve them;
- send service messages, such as security notices or changes to these terms (we do not send marketing email unless you ask us to);
- detect and prevent fraud, abuse and security incidents; and
- comply with legal obligations and enforce our Terms of Service.
We do not use personal information to build advertising profiles, and we do not make decisions that have legal or similarly significant effects on you based solely on automated processing.
Legal bases (EEA, UK and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
- Contract: to provide the Services you request, such as your account, purchases and support.
- Legitimate interests: to keep the Services secure, diagnose problems and understand aggregate usage, where these interests are not overridden by your rights. You can object to this processing (see Your rights).
- Consent: where we ask for it, such as for optional device permissions or optional analytics. You can withdraw consent at any time.
- Legal obligation: to keep records required by law and respond to lawful requests.
Third-party services
We use carefully chosen service providers to run the Services. They process personal information on our behalf, under contracts that limit their use of it to providing services to us and require them to protect it.
| Category | Purpose | Examples |
|---|---|---|
| App stores | Distributing Apps, processing payments and subscriptions, store analytics | Apple (App Store), Google (Google Play) |
| Hosting and infrastructure | Serving the Website, running App back-end services, storing data | Cloud hosting and content delivery providers |
| Crash reporting | Collecting crash and error reports so we can fix problems | Firebase Crashlytics, Sentry |
| Analytics | Aggregate, privacy-focused measurement of App feature usage | Firebase Analytics, TelemetryDeck |
| Sending and receiving email, including support requests | Business email provider | |
| Sign-in | Optional sign-in with an existing account | Sign in with Apple, Google Sign-In |
Not every App uses every provider listed above. Each App’s privacy details on the App Store and its Data safety section on Google Play describe the data that App collects. You can ask us at any time which providers process your information.
When you download or buy an App, Apple or Google also processes your information as an independent controller under its own privacy policy:
- Apple: apple.com/legal/privacy
- Google: policies.google.com/privacy
How we share information
We share personal information only:
- with service providers that help us run the Services, as described above;
- with app stores and sign-in providers, as needed to deliver, sell and authenticate Apps;
- for legal reasons, when we believe in good faith that disclosure is required by law, regulation or legal process, or is necessary to protect the rights, property or safety of Lucitude, our users or others;
- in a business transfer, such as a merger, acquisition or sale of assets, in which case the information remains subject to the commitments in this policy; and
- with your consent or at your direction.
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months.
Cookies and similar technologies
The Website does not set cookies and does not use local storage, tracking pixels, fingerprinting or similar technologies, so no cookie banner is shown. If this changes, we will update this policy and ask for consent where the law requires it.
The Apps store information on your device to work properly, for example your settings, sign-in state and cached content. This storage is necessary for the App to function and is not used to track you.
We honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information. Because we do not sell or share personal information, no further action is needed.
Data retention
We keep personal information only for as long as we need it for the purposes described in this policy, then delete or anonymize it:
| Information | How long we keep it |
|---|---|
| Website server and security logs | Up to 30 days |
| Crash reports and diagnostics | Up to 90 days |
| App usage events | Up to 14 months, then aggregated or deleted |
| Support and other correspondence | Up to 2 years after the matter is resolved |
| Account information and content you store with us | For as long as your account is active; deleted within 30 days of account deletion |
| Backups | Overwritten on a rolling cycle of up to 90 days |
| Transaction and tax records | As long as the law requires, typically up to 7 years |
We may keep information longer where it is needed to resolve a dispute, enforce our agreements, or comply with a legal obligation, and only for as long as that need lasts.
Security
We protect personal information with technical and organizational measures appropriate to its sensitivity, including encryption in transit (HTTPS/TLS), encryption at rest where supported by our providers, access limited to people who need it, multi-factor authentication on administrative accounts, and regular security updates.
No method of transmission or storage is completely secure. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as required by law.
International transfers
Lucitude is based in the United States, and our service providers may process information in the United States and other countries. Where we transfer personal information from the EEA, the UK or Switzerland to a country that does not provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider’s certification under the EU–US Data Privacy Framework and its UK and Swiss extensions.
Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is inaccurate or incomplete;
- delete your information; and
- stop sending you any non-essential messages.
To make a request, email hello@lucitude.com from the address linked to your account or correspondence, and tell us which App or service your request relates to. We may need to verify your identity before acting on a request, and we will only use the information you provide for verification for that purpose. We will not charge you for making a request, and we will not treat you differently for exercising your rights.
You can delete an App account and its data from the App’s settings, or by following the steps on our Support page.
EEA, UK and Switzerland
Under the GDPR, the UK GDPR and Swiss data protection law, you also have the right to:
- restrict our processing of your information in certain circumstances;
- object to processing based on our legitimate interests;
- data portability, meaning to receive information you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller;
- withdraw consent at any time, without affecting processing that took place before; and
- complain to your local data protection authority. We would appreciate the chance to address your concern first.
We respond to requests within one month. Where a request is complex, we may extend this by up to two further months and will tell you why.
California and other US states
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), gives you the right to:
- know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to;
- delete personal information we collected from you;
- correct inaccurate personal information;
- opt out of the sale or sharing of personal information (we do not sell or share personal information);
- limit the use of sensitive personal information (we do not use sensitive personal information for purposes that require this right); and
- not be discriminated against for exercising these rights.
In the past 12 months, we may have collected the following categories of personal information, from the sources and for the business purposes described above:
| CCPA category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, email address, account and installation identifiers, IP address | Service providers, app stores, sign-in providers |
| Commercial information | Records of App purchases and subscriptions | App stores, service providers |
| Internet or other electronic network activity | App usage events, crash and diagnostic data, server logs | Service providers |
| Customer records | Information in support requests and correspondence | Service providers |
You may use an authorized agent to make a request on your behalf. We may ask the agent for proof of authorization and ask you to verify your identity directly. We respond to verifiable requests within 45 days, and may extend this by a further 45 days where reasonably necessary, with notice.
Residents of other US states with consumer privacy laws, including Colorado, Connecticut, Oregon, Texas, Utah and Virginia, have similar rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, sale and certain profiling. We honor these requests in the same way. If we decline a request, you may appeal by replying to our decision with “Appeal” in the subject line, and we will respond within the time the applicable law requires.
Children’s privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK, or the equivalent minimum age where you live) without verifiable parental consent.
If we publish an App designed for children, we will comply with the Children’s Online Privacy Protection Act (COPPA), Apple’s Kids Category rules and Google Play’s Families Policy, and will describe that App’s practices in an App-specific notice.
If you believe a child has given us personal information without the required consent, contact us at hello@lucitude.com and we will delete it.
Changes to this policy
We may update this policy as the Services or the law change. When we do, we will change the date at the top of this page. If a change materially affects how we handle your personal information, we will give notice before it takes effect, for example on this Website or inside the affected Apps, and ask for consent where the law requires it.
Contact us
For questions about this policy, or to exercise your rights, contact us:
- Legal name
- Lucitude LLC
- Address
- 1209 MOUNTAIN ROAD PL NE # 13687
ALBUQUERQUE, NM 87110
United States - hello@lucitude.com
- Website
- lucitude.com
When contacting us about an App, please include the App’s name.