Privacy Policy

About This Marketing Website

Cloudflare hosts this marketing website and processes requests needed to deliver and protect it. The static site does not include analytics or advertising scripts. Your light or dark theme preference is saved in your browser’s local storage. Tasks entered in the interactive product tour remain on the page and are cleared when you reload it.

Joining the waitlist takes you to our account service, operated by Clerk. The sections below describe the Lucira application and its service providers, including services that are separate from this marketing website. See Cloudflare’s privacy policy for information about its processing.

Introduction

Lucira (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our task management application.

Our Core Principle: Privacy is a top priority. We collect only the data necessary to provide our service, never sell your data, and give you control over your information.

Who We Are

Lucira is operated by Zumi Studios, located at:

Contact: support@zumistudios.com

Account Creation

Lucira requires an account to use the service. When you create an account, we collect:

• Your email address
• Your name (if provided)
• Profile information from your authentication provider

Account authentication is handled by Clerk, our identity provider. If you sign in using a third-party service (such as Google or GitHub), we receive basic profile information from that provider in accordance with its privacy policy.

Data We Collect

1. Your Task Data

To provide the service, we store your tasks, projects, and preferences in our secure cloud database. This data includes:

• Task titles, descriptions, due dates, and priorities
• Project names and settings
• Your preferences and settings
• Timestamps for when items were created or modified

Your data is stored securely and is accessible only to you through your authenticated account. We do not access, read, or analyze the content of your tasks except as necessary to provide the service.

2. AI-Processed Data

If you use our AI-powered standup report feature, your task data is processed by our AI provider to generate summaries. This data:

• Is sent only when you explicitly request a standup summary
• Includes only task titles and project names necessary for generating the report
• Is not stored by the AI provider after processing
• Is not used to train AI models

3. Link Preview Service

When you add URLs to your tasks, we use a first-party service called Metarabbit (metarabbit.dev) to generate link previews. This service:

• Stores only the URLs you submit (not your task content)
• Caches metadata about those URLs (titles, descriptions, and images)
• Can be completely disabled in app settings if you prefer

When link previews are disabled, no URLs from your tasks are sent to any external service.

4. Payment Information

Lucira is a paid service. Payment processing is handled by Polar. We do not store your full credit card details. Polar may collect payment information in accordance with its privacy policy.

Cookies and Session Data

We use cookies and similar technologies for essential functionality:

• Authentication cookies: To keep you signed in and secure your session
• Session cookies: To remember your preferences during your visit

We do not use cookies for advertising or cross-site tracking. The cookies we use are strictly necessary for the operation of the service.

Service Providers

We use the following services to provide Lucira:

• Clerk: Authentication and account management. Privacy Policy
• Supabase: Secure cloud database for storing your tasks and data. Privacy Policy
• Vercel: Application hosting. Privacy Policy
• Vercel AI Gateway: AI processing for standup report generation. Task data is processed but not stored.
• Polar: Payment processing. Privacy Policy
• Metarabbit: Optional link preview generation that can be disabled. Privacy Policy

Each service has its own privacy policy. We have carefully selected services that respect user privacy and comply with applicable data protection regulations.

Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS/HTTPS
• Data at rest is encrypted in our database
• Row-level security ensures you can only access your own data
• Regular security audits and updates to our infrastructure

Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Export your data in a machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing of your data

To exercise these rights, contact us at support@zumistudios.com. We will respond to your request within 30 days.

Data Export: You can export your data at any time through the app settings.

Data Deletion: When you delete a task or project, it is permanently removed from our database. We do not use soft deletes; deleted means deleted.

Children’s Privacy

Lucira is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information.

International Data Transfers

Your data may be processed in countries outside your country of residence. Our service providers operate in the following locations:

• Supabase: Data is stored in the European Union (eu-west-1, Ireland)
• Clerk: United States
• Vercel: Global edge network with primary infrastructure in the United States
• Polar: European Union

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or reliance on providers’ compliance with recognized frameworks.

Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your task data will be permanently deleted within 30 days
• We may retain certain data as required by law or for legitimate business purposes

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the “Last updated” date at the top of this page
• Notify users through the app if there are material changes
• Maintain our commitment to privacy-first design

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: