Privacy Policy
- 1. Who is responsible
- 2. What we collect
- 3. Why, and on what basis
- 4. Automated processing of your entries
- 5. Who else handles your data
- 6. How long we keep it
- 7. Security
- 8. Your rights and controls
- 9. Children
- 10. Changes to this policy
- 11. Contact
1. Who is responsible
Lucent is responsible for your data (the “controller”). Contact: [email protected].
2. What we collect
| Data | Where it comes from |
|---|---|
| Email address; first name if you give one | You, when you start the two-minute questionnaire or create an account |
| Waitlist sign-up before launch: name, email, the plan you chose | You, when you create an account on the plans page before Lucent opens |
| Website usage events: pages viewed, sections reached, buttons clicked, scroll depth, screen size, referring page, campaign tags, a random visitor id stored in your browser | Collected automatically on lucentletters.com; no cookies, no advertising identifiers |
| Questionnaire answers | You, during the questionnaire that sets up your profile |
| Journal entries, edits to summaries, session answers, the day and time you chose for your weekly session | You, inside the app |
| Derived data: entry summaries, subject tags, pattern matches between entries, the monthly letter | Produced by the service from your entries |
| Usage events: which screens you open, when you write, whether you kept a session, plan chosen, cancellation | Collected automatically as you use the service |
| Technical data: IP address, device and browser type, approximate country, referring page | Collected automatically by our hosting and by the website |
| Purchase records: plan, price, dates, country, tax status, refund status | Paddle, our merchant of record. We never receive your card number. |
3. Why, and on what basis
- To provide the service you pay for (performance of a contract): storing your entries, producing summaries, questions and patterns, sending the weekly session reminder and the monthly letter, managing your plan.
- To run and secure the service (legitimate interests): preventing abuse, keeping the service working, understanding which features are used so we can improve them, in aggregate.
- To send you emails about your plan (contract): receipts, renewal notices, changes to terms. These cannot be switched off while you have a plan.
- To tell you about Lucent (consent): if you gave your email before buying, we may send you a small number of emails about your results and the offer. Every one has an unsubscribe link, and we stop when you use it.
- To comply with the law: tax and accounting records are kept via Paddle.
4. Automated processing of your entries
Summaries, the questions you are asked, subject grouping, the pattern view and the monthly letter are produced by a large language model run by a third-party provider. Before any text is sent to the model we remove email addresses, phone numbers and the names of other people. The provider processes the text only to return the result and, under its commercial terms, does not use it to train its models. No person at the provider or at Lucent reads your entries as part of normal operation. Automated output is a reading of your words and can be wrong; nothing in Lucent produces a score, rating or medical opinion about you, and no decision with legal or similar effect is made about you automatically.
5. Who else handles your data
We use a small number of providers, each bound by a contract to process data only on our instructions:
| Provider | What for |
|---|---|
| Paddle | Checkout, payment, tax, receipts, refunds (merchant of record; Paddle is an independent controller for the purchase itself, under its own privacy policy) |
| Language-model provider | The automated processing described in section 4 |
| Hosting and content delivery | Serving the website and the app; storing the waitlist and website usage events |
| Database hosting | Storing accounts, entries and events, encrypted at rest |
| Email delivery | Sign-in links, session reminders, the monthly letter |
We do not sell your data, and we do not share your entries with anyone else. We will disclose data if a court or authority with jurisdiction over us lawfully requires it, and we will tell you unless we are prohibited from doing so.
6. How long we keep it
- Entries and derived data: for as long as your account exists. When you delete your account, they are deleted within 30 days, and removed from backups within a further 30 days.
- Account and plan data: for as long as your account exists, then 30 days.
- Questionnaire answers and email without a purchase: 12 months from your last activity, then deleted.
- Waitlist sign-ups: until launch plus 6 months, or until you ask us to remove you, whichever is first.
- Usage and technical events: 24 months, then deleted or aggregated so they no longer identify you.
- Purchase records: kept by Paddle for the period tax law requires.
7. Security
Entries are encrypted in transit and at rest. No system is perfectly secure; if a breach affects your data we will tell you as the law requires.
8. Your rights and controls
Wherever you live, you can do the following from your account or by emailing [email protected]:
- Export every entry, summary and pattern as a plain file.
- Correct your email or name.
- Delete single entries, or your whole account and everything in it.
- Object to marketing emails by unsubscribing.
- Ask what we hold about you and why.
If you are in the European Economic Area, the United Kingdom or Switzerland you also have the right to restrict processing, to data portability, and to complain to your local data-protection authority. If you are in California, you have the rights set out in the CCPA/CPRA; we do not sell or share personal information as those terms are defined there. We answer every request within 30 days and never charge for it.
9. Children
Lucent is for adults. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has an account, tell us and we will delete it.
10. Changes to this policy
If we change this policy in a way that matters to you, we will email you before the change takes effect and keep the previous version available on request.
11. Contact
[email protected]. We reply within two business days.