Your dreams stay on your device.

1. Who this policy is from

PixelNova LLC ("Lucid Lock", "we", "us") makes the Lucid Lock app for iPhone. This policy explains what happens to your information when you use the app or visit lucidlock.co. You can reach us at [email protected].

PixelNova LLC is the data controller for the purposes of the EU and UK GDPR, and its postal address is 7901 4th St N, Ste 300, St. Petersburg, FL 33702.

We wrote this to be checkable rather than reassuring. Every statement below describes what the app actually does today. If we change what the app does, we change this page. See section 18.

2. What we collect

From the app, nothing. Lucid Lock does not collect personal information from you, and does not transmit your content to us. There is no Lucid Lock account, no Lucid Lock login, and no Lucid Lock server that receives your dream journal or anything else you enter.

Specifically, the app does not collect your name, email address, phone number, contacts, photos, location, device identifiers, advertising identifier, health data, or any usage or behavioral analytics.

This is why Lucid Lock's App Store privacy label declares Data Not Collected. Everything the app records lives on your device. See section 3.

From this website, one thing, and it is not about you.

lucidlock.co has no forms. Before launch it offered a waitlist that took an email address; that form is gone, and the handful of addresses it collected are covered in section 13.

What remains is a visit count. These pages load a cookieless measurement script from Cloudflare, our own hosting provider, that records which page was viewed, roughly when, what referred you, your browser and device type, and a country estimated from your IP address. It stores nothing on your device and assigns you no identifier, so nothing in it links this visit to your last one or to any other site. The output we see is a chart of totals. Section 17 sets out exactly what is and is not collected, and how to opt out.

The visit count rests on our legitimate interest, under Article 6(1)(f) of the GDPR: knowing whether anyone is reading this site is a real need, and counting page views without cookies, without profiling and without an identifier is about the least intrusive way to meet it. You can object to that processing at any time — section 17 explains how, and it does not require writing to us. It is never combined with anything from the app.

Because the script stores and reads nothing on your device, it is not a cookie and does not require consent under the ePrivacy Directive. That is the reason this site has no cookie banner, and it is a deliberate choice: a banner you have to dismiss would be worse for you and would not make the measurement any more private than it already is.

This website and the app are entirely separate. Reading this site tells us nothing about your dreams, and installing the app tells us nothing about you. There is no way for us to connect the two.

3. What Lucid Lock stores, and where

The app stores what you create so it can show it back to you and adapt your training. All of it is written to the app's own local database on your iPhone.

Patterns and insights, such as a recurring place, a returning face or your recall trend, are computed on your device from your own entries. Your dream text is never sent to an AI service, or to any other service, for analysis.

4. Syncing and backup

This version of Lucid Lock does not sync. Your journal is stored on your iPhone and nowhere else. There is no setting that sends it to iCloud, because the feature is not in this release.

The practical consequence is worth stating plainly: if you lose the phone, or delete the app, the journal goes with it. We hold no copy and cannot restore one. Use Export if you want a backup.

We may add optional iCloud sync in a future version, so that a journal can survive a lost phone. If we do, it will be off until you choose it, it will use the private database of your own Apple Account rather than any server of ours, and this policy will be updated before that version ships. See section 18.

5. Voice capture and transcription

On the morning capture screen you can speak a dream instead of typing it. Lucid Lock asks for microphone and speech recognition permission the first time you tap record, and not before.

Transcription happens on your iPhone. Lucid Lock uses Apple's on-device speech recognition and explicitly requires it. If a device cannot transcribe locally, the app does not fall back to sending your audio to Apple's servers. It tells you so and offers you the keyboard instead. Your voice is not uploaded to Apple, to us, or to any transcription or AI service.

The recording is not kept. Audio is written to a temporary file on your phone while you speak, so that a dropped transcription can be retried without losing what you said. The moment the text exists, that file is deleted. What is saved to your journal is the transcript, plus the length of the recording it came from, and nothing else. There is no way to play a dream back, because there is nothing left to play.

You can revoke either permission at any time in iOS Settings › Lucid Lock. Typing continues to work exactly as before, and no part of the app requires the microphone.

6. Face ID and App Lock

You can require Face ID, Touch ID or your device passcode before Lucid Lock will open. It is optional and off by default.

Biometric authentication is performed entirely by iOS. Lucid Lock never receives, stores or has access to your face or fingerprint data. The system only tells the app whether authentication succeeded.

7. Notifications

If you allow notifications, Lucid Lock schedules local reminders on your device: a morning prompt to record what you remember, an evening prompt to set your intention, and, if you turn them on, a few daytime reality-check prompts. They are scheduled by iOS on your phone. There is no push server, and no reminder content is sent anywhere. You can turn them off in the app or in iOS Settings.

8. Subscriptions and payments

Lucid Lock is free to use. An auto-renewing subscription covers the later phases of the training program and Insights; the journal, dream signs, reminders, Face ID lock and export never require one.

Purchases are processed by Apple through the App Store. We never receive or see your payment card, Apple Account credentials or billing address. The app asks StoreKit on your device whether a subscription is currently active, and that is the entire extent of what we learn. Apple's handling of your purchase is covered by Apple's own privacy policy and the App Store terms.

9. Diagnostics and crash reports

The Lucid Lock app contains no third-party crash-reporting or analytics SDK. (The visit counting on this website is a separate thing, described in section 17, and it receives nothing from the app.)

If you have opted in to Share iPhone Analytics and Share with App Developers in iOS Settings, Apple may send us crash and performance diagnostics from your device. Those reports come from Apple, are aggregated by Apple, and contain technical information such as the crash location, device model and OS version. They never contain your dream text or other content you have written: Lucid Lock is built so that user content is excluded from logs and diagnostics in both development and production. You can turn this off at any time in iOS Settings → Privacy & Security → Analytics & Improvements.

10. Tracking and advertising

Lucid Lock does not track you, as "tracking" is defined by Apple's App Tracking Transparency framework. We do not link data about you to data from other companies' apps or websites, and we do not share data with data brokers.

There is no advertising SDK in the app. We do not access the advertising identifier (IDFA), we do not build advertising profiles, and we do not sell or rent any information, because we do not hold any to sell.

11. Third parties

The complete list of third parties involved in Lucid Lock is two companies, and only one of them has anything to do with the app:

• Apple, as the operator of the App Store (purchase processing and subscription management), and the optional analytics-sharing described in section 9.
• Cloudflare, as the host of this website. Serving these pages necessarily means Cloudflare handles the request, and so the IP address it came from. It also provides the cookieless visit counting described in section 17. Cloudflare processes both as our processor and does not use them to build a profile of you or to advertise to you. It has no involvement in the app whatsoever. Their policy is at cloudflare.com/privacypolicy.

Cloudflare processes data for us on servers that include ones in the United States, as does Google for the pre-launch waitlist addresses still held under section 13. We hold each account under that company's standard data processing addendum, which is our processor contract with them and carries the European Commission's standard contractual clauses; Cloudflare, Inc. and Google LLC are each also certified under the EU-US Data Privacy Framework and its UK Extension. Between them those are the mechanisms covering those transfers out of the EEA and the UK.

We do not use any processor, analytics vendor, advertising network, AI provider or CRM in connection with your use of the app. Apple is the only company involved there, and only for the purposes above.

12. Your controls

Export everything

Settings → Export writes everything you have recorded to JSON and Markdown and hands it to the standard iOS share sheet. It's your data; take it wherever you like.

Delete everything

Settings → Delete All Data permanently removes every dream, marker and training day from your device. There is no other copy, so that is the end of it.

Lock the app

Settings → App Lock requires Face ID or your passcode to open Lucid Lock.

Turn off reminders

In the app's reminder settings, or in iOS Settings → Notifications.

13. Retention and deletion

Your dreams: we retain nothing, because we receive nothing. Your content is retained on your device for exactly as long as you keep it there.

A pre-launch waitlist address, if you gave us one: the waitlist form has been removed. Addresses it collected are held in a spreadsheet in our own Google account, which stores them for us as a processor, until we have sent the one launch email they were collected for, and are deleted afterwards. Ask us before then and we will delete yours sooner. Write to [email protected] and it goes the same day. We do not copy those addresses into any other system, and they are never associated with anything from the app.

Website visit counts: Cloudflare retains the underlying measurement for up to 6 months and then deletes it. There is no per-visitor record inside it to retain in the first place: it is aggregate from the moment it is collected, so what survives is a number of page views, not a history of yours.

14. Your legal rights

Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act: to access, correct, delete, or receive a portable copy of your personal information, and to object to or restrict certain processing.

In Lucid Lock's case, those rights are satisfied directly in the app, because you hold the only copy: access and portability through Export, correction by editing an entry, erasure through Delete All Data. We cannot action a request against our own systems because there is no copy of your journal in them, and we hold no identifier that would let us find you.

Where we rely on consent, which means a pre-launch waitlist address (see section 13) and nothing else, you can withdraw that consent at any time by writing to [email protected]. We delete the address the same day. Withdrawing does not affect the lawfulness of anything we did with it beforehand. Where we rely on legitimate interest, which means the visit counting and nothing else, you have the right to object: section 17 explains how to stop it from your own browser, which is faster than asking us and works immediately.

We do not sell or share personal information as those terms are used under the CCPA, and we do not use your information for automated decision-making or profiling. If you believe your rights have been infringed, you may contact us at [email protected], and in the EU/UK you may also lodge a complaint with your local data protection authority.

15. Children

Lucid Lock is not directed to children. The app is rated for users aged 13 and over, and is not intended for anyone younger. We do not knowingly collect personal information from children. In fact, we do not knowingly collect personal information from anyone. If you believe a child has provided us with personal information, contact us and we will look into it.

16. Security

Your journal is protected by the security of your own device: iOS file protection and device encryption, plus the optional Face ID lock described in section 6. The app's database is marked for complete file protection, so it stays encrypted and unreadable while the device is locked.

Keeping your device passcode private, and your iPhone updated, is the most meaningful thing you can do to protect what you write here. We don't claim more than that. No product can promise perfect security, and one that holds none of your data doesn't need to.

17. This website

lucidlock.co is a set of static pages. It sets no cookies, carries no advertising, and loads no third-party fonts and no social, advertising or marketing trackers. There is no cookie banner on this site because there is nothing here that would need one.

How we count visits

We do want to know whether anyone is reading this, so these pages load one small measurement script: Cloudflare Web Analytics, from static.cloudflareinsights.com. Cloudflare is already our hosting provider, so this adds no new company to the list in section 11 — it is the company already serving you this page, counting the page it just served.

What it records, per page view:

• the page address, and the address that referred you to it
• your browser, operating system and device type
• a country estimated from your IP address, which is not itself stored
• how quickly the page loaded for you

And what it does not do, which is the part that matters: it stores nothing on your device. No cookie, no local storage, no device fingerprint, no identifier of any kind. Nothing it collects can link this visit to your previous one, to the app, or to your activity on any other website — not by us, and not by Cloudflare, because the material that would be needed to do it is never created.

The practical consequence is that our "visitor" numbers are an estimate rather than a headcount. Reading two pages in one sitting counts once; coming back tomorrow counts again, as a stranger. We would rather have an approximate number and no record of you than an exact one and a file on everybody. Nothing here is used for advertising, sold, shared, or combined with anything else we hold.

Turning it off

Because the script stores nothing on your device, there is no setting for us to remember and no switch we can offer that would not itself require storing something about you. Blocking it is done at your end, and any of these works completely:

• any content blocker or privacy extension — uBlock Origin, AdGuard, Ghostery and the rest all block static.cloudflareinsights.com by default
• Safari's built-in Prevent Cross-Site Tracking, Firefox's Enhanced Tracking Protection, or Brave's shields
• browsing with JavaScript disabled, which this site fully supports

We do not detect, discourage, or work around any of them, and every page here works identically with the script blocked. If you would rather object to us directly, write to [email protected].

Server logs

Separately from the above, Cloudflare processes standard server request logs, including IP address, for the ordinary purposes of delivering the site and preventing abuse. That happens for every request to every website in existence and cannot be switched off without switching off the site. We do not use those logs to identify or profile visitors.

Nothing else

No request leaves this site to anywhere other than our host. Reading it contacts nobody else. The pre-launch waitlist form that used to post to Google was removed at launch.

18. Changes to this policy

If we change how Lucid Lock handles your information, we will update this page and change the effective date at the top. Material changes, meaning anything that would newly send your content off your device, will be surfaced in the app before they take effect, not buried here.

19. Contact

Questions about this policy, or about anything the app does with what you write: [email protected].

← Back to Lucid Lock · Terms of Use