Privacy Notice

Lucid Inc ("we", "us", "our") operates VoiceFlow and the apps offered through it. This notice explains what personal data we collect, how we use it, and the choices you have. We act as the data controller for personal data described here.

• Account data: name, email address, password hash, and profile fields you provide.
• Your Content: audio you record, prompts, notes, and transcripts you submit to or generate through the Service.
• Subscription data: which plan you have purchased, subscription status, and billing period. Payment card details are collected by Paddle, not by us.
• Usage data: log data, device and browser metadata, IP address, and feature interactions used to operate and secure the Service.
• Support: messages you send to us, and information you provide in connection with support requests.

• To provide, operate, secure, and improve the Service (contract performance and legitimate interests).
• To transcribe your speech and generate the cleaned-up text you request (contract performance).
• To manage subscriptions, entitlements, and access to features you have purchased (contract performance).
• To communicate with you about your account, security, and material service changes (contract performance, legitimate interests).
• To prevent fraud, abuse, and violations of our Terms (legitimate interests).
• To comply with legal obligations (legal obligation).

We do not sell your personal data. We do not use Your Content to train third-party general-purpose AI models.

The Service sends the relevant portion of Your Content — including audio and text — to third-party AI providers (for example, models routed via the Lovable AI Gateway) to transcribe and clean up your speech. These providers process the data on our behalf under their enterprise terms and do not retain it to train their models.

• Service providers and subprocessors that host our infrastructure, database, authentication, email, and AI inference, acting on our behalf.
• Merchant of Record — Paddle: we share the data needed to process your order, manage your subscription, handle payments, calculate tax, and issue invoices. Paddle acts as the seller of record.
• Professional advisers (legal, accounting, insurance) under confidentiality obligations.
• Authorities where required by law, subpoena, or to protect rights, property, or safety.
• Business transfers: as part of a merger, acquisition, or asset sale, with notice.

We retain account data while your account is active and Your Content until you delete it or your account. Some data may be retained longer where required for legal, tax, accounting, security, or fraud-prevention purposes. Backups may persist for a limited period before being overwritten.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing, or withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@lucidinc.com. You also have the right to lodge a complaint with your local data-protection authority.

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege principles — to protect personal data. No system is perfectly secure and we cannot guarantee absolute security.

We may process data in countries other than your own, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

We use strictly necessary cookies and local storage to keep you signed in and secure the Service. If we add analytics or marketing cookies in the future, we will update this notice and, where required, ask for your consent.

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

We may update this notice. Material changes will be posted here with a new "Last updated" date.

Privacy questions: privacy@lucidinc.com.