Privacy policy

Last updated 2026-09-21

This explains what [set the legal entity name in Superadmin] does with your information, under the Digital Personal Data Protection Act, 2023.

The short version

Your calls stay on your computer. Audio is never uploaded. Transcripts, call history and notes are stored on your own machine and are not readable by us.

When you use the managed AI allowance, the text needed to answer — the recent transcript and your notes for that call — is sent to our server and on to an AI provider to produce the answer. It is not stored afterwards and is not used to train anything. If you use your own provider key instead, it goes straight from your computer to them and never touches us at all.

What we hold

• Your account: email address, display name if you set one, password as a hash that cannot be reversed.
• Your devices: a random installation id, the operating system and app version.
• Your billing: orders, payments, invoices and credit movements. Card and UPI details go to the payment gateway and never reach us.
• Your usage: how many credits each request cost and which model answered. Not what you asked or what came back.
• Security signals: IP addresses, stored only as a salted one-way hash, kept 90 days, used to stop one person farming free credits from a hundred accounts.

What we do not hold

Call audio. Recordings. Transcripts. The contents of your prompts or the answers to them. None of it is stored on our servers.

Why we are allowed to

To provide what you asked for and to bill you for it; to meet obligations under tax law; and, for the security signals, our legitimate interest in not being defrauded.

Who else sees it

• AI providers — the text of a request, at the moment it is answered.
• The payment gateway — your email and the amount, to take the payment.
• Our email provider — your address, to send verification and receipts.

We do not sell your information and we do not share it for advertising.

How long

Account data until you delete your account. Financial records for eight years, because tax law requires it — after deletion these are kept without your name attached. Security signals 90 days. Sent email is kept 30 days as a record that it was sent, without its contents.

What you can do

• See it all: Settings → Account → Download my data, or GET /v1/me/export. It returns everything above.
• Correct it: change your name and email in the app.
• Delete it: Settings → Account → Delete account. Your subscription is cancelled first, your personal data is erased, and the invoices stay with your name removed.
• Complain: write to support@lucent.app, and if we do not resolve it, to the Data Protection Board of India.

Children

Lucent is not for anybody under 18 and we do not knowingly hold a child's data.

Contact

[set the legal entity name in Superadmin], [set the registered address in Superadmin]. Email support@lucent.app.