Luci Privacy Policy

Last updated: November 2, 2026

Softivate Inc. ("Luci", "we", "us"), a company based in Ontario, Canada, runs the Luci app and lucidating.app. This policy explains what we collect, why, who we share it with, how long we keep it and your choices. Contact our privacy officer at hello@lucidating.app, or by mail at Softivate Inc., Attn: Privacy Officer, 40 Hickling Lane, Ajax, Ontario L1T 0P9, Canada.

Luci is only for adults 18+. We do not knowingly collect information from anyone under 18; if we learn we have, we close the account and delete it.

1. What we collect

You give us

• Sign-in: your Apple or Google account identifier and, if shared, an email address (Apple's private relay address is fine).
• Profile: pseudonym, photos, headline, bio, occupation field, preferences and settings you choose. Optional: a partner pseudonym, a work email you confirm (we keep only that it was confirmed, when, and a one-way hash of the email's domain, not the address itself).
• Messages and media you send: text, photos, voice notes, sealed notes, plans you propose.
• Purchases: if you buy a subscription or other in-app purchase, the App Store (or Google Play) confirms it to us with a purchase reference, the product and its expiry date. Payment is handled by the store; we never receive your card details.
• Reports and feedback you send us, including a chat transcript only if you tick "Share our recent chat" when reporting.

Identity and age check (Didit)

• To prove you are a real adult, you scan an ID document and take a liveness selfie with our provider Didit. Didit processes those images and tells us the result. We keep: pass/fail, whether you are 18+, the Didit session reference, and salted one-way fingerprints (HMAC) of document details used only to stop banned people from re-joining. We do not receive or store your ID images or your date of birth. Didit's handling is covered by its own Verification Privacy Notice and our agreement with Didit.

Collected automatically

• Approximate location: while the app is open, your device position is snapped on your phone to a ~500 m grid cell and only that cell is sent to us, to show you people nearby. The raw GPS position is not sent.
• Safety Signal (optional, only when you turn it on): precise location is sent during the signal so the person you chose can see you're safe. Only recent positions are kept while the signal runs, and all of its location history is deleted when the signal ends.
• Device and usage: time zone, app version, push-notification token, and security logs (IP address, timestamps) used to keep the service working and to prevent abuse.
• Screenshot events: if you take a screenshot where the app allows it, the other person is told that a screenshot was taken.
• Crash reports (Sentry): when the app or our server crashes, an error report is sent to our crash-reporting provider Sentry — the error, the app version, the device model and OS version. We switch off names, emails, IP addresses, messages, photos, screen recordings and screenshots in these reports.
• Product statistics (PostHog): to learn which features work, the app sends usage events such as "opened the app", "matched", "sent a first message", "a call connected", "a notification was opened", a 1–5 rating after a meetup, or the screen you were on and the reason you chose (optional) when you pause or delete your profile. Each event carries a random install ID that is not your account ID, your app language, the device type and, at most, the city or area you are in (never your grid cell or coordinates). Events never contain your name, profile text, messages, photos, who you matched with, or contact details. Session recording, screenshots and automatic text capture are switched off. When you delete your account, your app-open history is unlinked from you and a new random ID is used if you sign up again.
• Statistics we compute ourselves: our team sees only totals (for example, how many members are in a city, age bands, languages, how many matches led to a chat). Any group with fewer than 10 people is hidden.

We do not use advertising identifiers, sell personal information, or show third-party ads.

2. Why we use it

• To run the service: show profiles, match, deliver messages and calls, send notifications.
• Safety and integrity: age/ID verification, automatic content filtering, reviewing reports within 24 hours, enforcing bans, preventing fraud and spam.
• To support you and answer requests.
• To fix crashes and improve the app, using the crash reports and statistics above.
• To comply with law and respond to lawful requests, including reporting suspected child exploitation.

Legal bases (where GDPR applies): contract (running the service), legitimate interests (safety, security, crash reports and product statistics), consent (location, notifications, sensitive information you choose to share, such as your sexual orientation implied by using a dating service), and legal obligation.

3. Who we share it with

• Other members see what you put on your profile (with the blur/cover choices you make) and the messages you send them.
• Service providers acting for us, under contract:

- Didit — identity and age verification; - Fly.io — app hosting, database and storage (our servers are in Toronto, Canada); - Google Maps Platform (Places API) — place search and neighbourhood names; searches you type and grid-cell coordinates are sent to Google. Google's use is governed by the Google Privacy Policy; - Cloudflare (Realtime/Calls) — relays masked audio/video calls over its global network; we do not record calls; - Apple (Sign in with Apple, push notifications, App Store), Google (Sign-In) and Expo (push notification delivery); - Zoho (ZeptoMail and Zoho Mail) — transactional email (work-email confirmation, safety-team alerts) and our support inbox; - Sentry (Functional Software, Inc.) — crash and error reports, stored in the United States; - PostHog — product statistics with random install IDs, stored in the United States.

• Authorities when required by law, or to protect someone from serious harm.
• A successor if Luci is merged or sold, under this policy.

Our own servers are in Canada, but some providers (for example Sentry, PostHog, Zoho, Didit, Cloudflare, Google, Apple and Expo) process information in the United States or elsewhere outside Canada, so your information may be processed there and be subject to those countries' laws. We use contracts and the settings described above to limit what they receive.

4. How long we keep it

• Account and profile: until you delete your account.
• Photos in chats: deleted when the chat closes. Disappearing messages: deleted on the timer you set. Other chat messages: kept until either of you clears the chat or deletes their account.
• Reports, moderation decisions and the fingerprints of banned members' ID documents: kept only as long as needed to enforce bans, protect members and handle legal claims.
• Automatic content-filter strikes: account, category and time only, for 30 days.
• Crash reports: kept by Sentry for a limited period under its standard retention (currently up to 90 days).
• Product statistics: random-ID events are kept by PostHog for a limited period under our account's retention settings; on our servers, app-open records (time, city/area) are kept for about 13 months (400 days) and match-funnel flags for 90 days. Pause/delete reasons and meetup ratings are stored without any account link.
• Identity check (Didit): Didit keeps the images and results of a check for the retention period we set in our Didit account and then deletes them, subject to the shorter limits in Didit's notice for biometric data. You can ask us to have your Didit verification data deleted.
• Server backups: daily backups are kept for 14 days and then deleted automatically. Occasional copies made before server maintenance are kept only as long as needed and then deleted.

5. Deleting your data and your rights

• Delete your account any time in the app: Settings → Delete everything. This immediately removes your profile, photos, matches and messages from the live service; copies in our backups are deleted as those backups expire. If your account was under review or banned, we keep only the minimum record (salted ID fingerprints and the decision) to enforce the outcome.
• You can also ask us to access, correct, export or delete your information, or withdraw consent, by writing to hello@lucidating.app. We answer within 30 days.
• You can turn off location and notifications in your device settings.
• You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Commission d'accès à l'information du Québec, or your local data-protection authority.

6. Security

We use encryption in transit (HTTPS), server-side access controls, salted hashing for sensitive identifiers, screenshot blocking and blurred photo previews. No system is perfectly secure; tell us at hello@lucidating.app if you find a problem.

7. Changes

We will post updates here and tell you in the app before material changes take effect.

8. Contact

Softivate Inc., 40 Hickling Lane, Ajax, Ontario L1T 0P9, Canada — hello@lucidating.app