Privacy Policy
Your dreams stay on your device.
Effective 14 August 2026 · Last updated 14 August 2026 · Applies to the LucidLock iPhone app and lucidlock.app
The short version
- LucidLock has no account system, so we never learn who you are.
- Your dreams, dream signs and training history are stored on your iPhone.
- We operate no server that receives them. There is nothing on our side to hand over, sell or lose.
- No advertising, no third-party analytics, no tracking, no AI service reading your entries.
- If you turn on iCloud sync, your entries go to your own private iCloud database — Apple's storage, under your Apple Account, not ours.
- You can export everything, or delete everything, at any time, from inside the app.
- 1. Who this policy is from
- 2. What we collect
- 3. What LucidLock stores, and where
- 4. iCloud sync
- 5. Face ID and App Lock
- 6. Notifications
- 7. Subscriptions and payments
- 8. Diagnostics and crash reports
- 9. Tracking and advertising
- 10. Third parties
- 11. Your controls
- 12. Retention and deletion
- 13. Your legal rights
- 14. Children
- 15. Security
- 16. This website
- 17. Changes to this policy
- 18. Contact
1. Who this policy is from
LucidLock ("LucidLock", "we", "us") makes the LucidLock app for iPhone. This policy explains what happens to your information when you use the app or visit lucidlock.app. You can reach us at support@lucidlock.app.
We wrote this to be checkable rather than reassuring. Every statement below describes what the app actually does today. If we change what the app does, we change this page — see section 17.
2. What we collect
Nothing. LucidLock does not collect personal information from you, and does not transmit your content to us. There is no LucidLock account, no LucidLock login, and no LucidLock server that receives your dream journal or anything else you enter.
Specifically, we do not collect your name, email address, phone number, contacts, photos, location, device identifiers, advertising identifier, health data, or any usage or behavioural analytics.
This is why LucidLock's App Store privacy label declares Data Not Collected. Everything the app records lives on your device — see section 3.
3. What LucidLock stores, and where
The app stores what you create so it can show it back to you and adapt your training. All of it is written to the app's own local database on your iPhone.
| What | Where it lives | Who can read it |
|---|---|---|
| Dream entries — the text you write, wake time, recall clarity, whether you recalled anything at all | Local database on your iPhone. Also your private iCloud database if you turn on sync. | You. Apple stores the encrypted iCloud copy if sync is on. Never us. |
| Dream signs and markers — the recurring people, places, themes and emotions you tag | Local database on your iPhone (and your iCloud, if sync is on). | You. Never us. |
| Training history — which technique you practiced, when, and how it went | Local database on your iPhone (and your iCloud, if sync is on). | You. Never us. |
| Preferences — wake schedule, reminder times, App Lock on/off, sync on/off, onboarding answers | Local app settings on your iPhone. | You. Never us. |
| Subscription status — whether an active subscription exists | Determined by Apple's StoreKit on your device. | You and Apple. We learn only whether the subscription is active, and never your payment details. |
Patterns and insights — a recurring place, a returning face, your recall trend — are computed on your device from your own entries. Your dream text is never sent to an AI service, or to any other service, for analysis.
4. iCloud sync
iCloud sync is off by default. Nothing you write leaves your phone unless you turn it on in Settings.
When you turn it on, LucidLock uses Apple's CloudKit to sync your entries, markers and training history to the private database of your own Apple Account. That data is stored by Apple, under your account, and is governed by Apple's Privacy Policy. We have no access to it: LucidLock's developer account cannot read the contents of any user's private CloudKit database, and no LucidLock server ever receives it.
Sync exists so your journal survives a lost phone and follows you to your other devices. Turning it off in Settings returns the app to this-device-only storage.
5. Face ID and App Lock
You can require Face ID, Touch ID or your device passcode before LucidLock will open. It is optional and off by default.
Biometric authentication is performed entirely by iOS. LucidLock never receives, stores or has access to your face or fingerprint data — the system only tells the app whether authentication succeeded.
6. Notifications
If you allow notifications, LucidLock schedules local reminders on your device — a morning prompt to record what you remember, and an evening prompt to set your intention. They are scheduled by iOS on your phone. There is no push server, and no reminder content is sent anywhere. You can turn them off in the app or in iOS Settings.
7. Subscriptions and payments
Recording and training are offered through an auto-renewing subscription; reading and exporting what you have already written do not require one.
Purchases are processed by Apple through the App Store. We never receive or see your payment card, Apple Account credentials or billing address. The app asks StoreKit on your device whether a subscription is currently active, and that is the entire extent of what we learn. Apple's handling of your purchase is covered by Apple's own privacy policy and the App Store terms.
8. Diagnostics and crash reports
LucidLock contains no third-party crash-reporting or analytics SDK.
If you have opted in to Share iPhone Analytics and Share with App Developers in iOS Settings, Apple may send us crash and performance diagnostics from your device. Those reports come from Apple, are aggregated by Apple, and contain technical information such as the crash location, device model and OS version. They never contain your dream text or other content you have written: LucidLock is built so that user content is excluded from logs and diagnostics in both development and production. You can turn this off at any time in iOS Settings → Privacy & Security → Analytics & Improvements.
9. Tracking and advertising
LucidLock does not track you, as "tracking" is defined by Apple's App Tracking Transparency framework. We do not link data about you to data from other companies' apps or websites, and we do not share data with data brokers.
There is no advertising SDK in the app. We do not access the advertising identifier (IDFA), we do not build advertising profiles, and we do not sell or rent any information — because we do not hold any to sell.
10. Third parties
The complete list of third parties involved in LucidLock is one company:
- Apple — as the operator of the App Store (purchase processing and subscription management), iCloud/CloudKit (only if you turn on sync), and the optional analytics-sharing described in section 8.
We do not use any other processor, hosting provider, analytics vendor, advertising network, AI provider or CRM in connection with your use of the app.
11. Your controls
Export everything
Settings → Export writes everything you have recorded to JSON and Markdown and hands it to the standard iOS share sheet. It's your data; take it wherever you like.
Delete everything
Settings → Delete All Data permanently removes every dream, marker and training day from your device. If iCloud sync is on, that deletion propagates to your iCloud database and to any other device signed in to the same Apple Account.
Turn sync off
Settings → iCloud Sync returns the app to storing your journal on this device only.
Lock the app
Settings → App Lock requires Face ID or your passcode to open LucidLock.
Turn off reminders
In the app's reminder settings, or in iOS Settings → Notifications.
12. Retention and deletion
We retain nothing, because we receive nothing. Your content is retained on your device for exactly as long as you keep it there.
Deleting the LucidLock app removes the app's local database along with it.
If iCloud sync is on, deleting the app does not delete your iCloud copy — it comes back when you reinstall and sign in. To be rid of it everywhere, use Delete All Data in Settings before deleting the app.
Because we hold no copy of your journal, we cannot restore it for you if you delete it. Export first if you want to keep it.
13. Your legal rights
Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act — to access, correct, delete, or receive a portable copy of your personal information, and to object to or restrict certain processing.
In LucidLock's case, those rights are satisfied directly in the app, because you hold the only copy: access and portability through Export, correction by editing an entry, erasure through Delete All Data. We cannot action a request against our own systems because there is no copy of your journal in them, and we hold no identifier that would let us find you.
We do not sell or share personal information as those terms are used under the CCPA, and we do not use your information for automated decision-making or profiling. If you believe your rights have been infringed, you may contact us at support@lucidlock.app, and in the EU/UK you may also lodge a complaint with your local data protection authority.
14. Children
LucidLock is not directed to children. The app is rated for users aged 13 and over, and is not intended for anyone younger. We do not knowingly collect personal information from children — in fact, we do not knowingly collect personal information from anyone. If you believe a child has provided us with personal information, contact us and we will look into it.
15. Security
Your journal is protected by the security of your own device: iOS file protection and device encryption, plus the optional Face ID lock described in section 5. If you enable iCloud sync, the copy in your private iCloud database is protected by Apple's encryption in transit and at rest.
Keeping your device passcode private, and your iPhone updated, is the most meaningful thing you can do to protect what you write here. We don't claim more than that — no product can promise perfect security, and one that holds none of your data doesn't need to.
16. This website
lucidlock.app is a set of static pages. It sets no cookies, runs no advertising or analytics scripts, and loads no third-party fonts, scripts or trackers. Our hosting provider processes standard server request logs (including IP address) for the ordinary purposes of delivering the site and preventing abuse; we do not use those logs to identify or profile visitors.
17. Changes to this policy
If we change how LucidLock handles your information, we will update this page and change the effective date at the top. Material changes — anything that would newly send your content off your device — will be surfaced in the app before they take effect, not buried here.
18. Contact
Questions about this policy, or about anything the app does with what you write: support@lucidlock.app.