Privacy policy
Last updated 24 October 2026
1. Who is responsible for your data
Robin Klajzyngier, trading as Lucimo, a sole trader in the United Kingdom, is the controller of your personal data. Address: 66 Paul Street, London EC2A 4NA. Email: hello@lucimo.app.
2. What we collect
- Account details: your name and email address. You sign in with a one-time code we email to you.
- Your content: the tasks, notes, projects, goals, habits and calendar blocks you create.
- Calendar events: only if you connect Google Calendar. We read your events to show them in your day view. We never change or delete them.
- Planning data: time estimates against actual time, finished and skipped tasks, and moved blocks. We use it to plan your days more accurately.
- Technical data: IP address, browser and device type, and error logs, to keep the service secure and working.
- Payment details: handled by Stripe and Onelink, its merchant-of-record service. We see your plan, its status and the country of your card, never your full card number.
- Messages: what you write when you email us.
3. Why we use it
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running your account and the app, including your content and planning data | Contract |
| Billing and payment | Contract |
| Emails about your account, trial and billing | Contract |
| Keeping the service secure and fixing errors | Legitimate interests |
| Improving Lucimo from usage patterns, in aggregate | Legitimate interests |
| News about the product, only if you opt in | Consent |
| Keeping tax and accounting records | Legal obligation |
We do not sell your data. We do not use it for advertising. We do not use your content to train AI models.
4. Who processes it for us
- Supabase: database and sign-in.
- Vercel: hosting the app.
- Cloudflare: our domain name and network security.
- Stripe and Onelink (its merchant-of-record service): payments and tax.
- Google: only if you connect Google Calendar.
- Resend: account emails, such as sign-in codes.
- Hoxton Mix: our business address. It opens and scans post sent to us.
Each provider only processes your data on our instructions and under a written contract. When we add AI features, we will name the AI provider here and tell you before they process your content.
5. Where your data is stored
Your content is stored in the United Kingdom, in London. Some providers may process data outside the UK. When they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement to protect it.
6. How long we keep it
- Your account, content and planning data: while your account is open. When you delete your account, we delete them within 30 days, and from backups within 90 days.
- Billing records: 6 years, because UK tax law requires it.
- Statistics with nothing that identifies you, such as average planned against actual time across all users: may be kept after you leave. Your own planning data is deleted with your account.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, send it to you in a reusable format, or stop using it for a purpose based on legitimate interests. You can withdraw consent at any time. Most of this you can do yourself in your settings; for the rest, email hello@lucimo.app. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Cookies
Lucimo only uses the cookies it needs to keep you signed in and to keep the service secure. We do not use advertising or tracking cookies. If we ever add analytics, we will update this policy and ask for your consent first.
9. Security
Your data is encrypted in transit and at rest. Access to it is limited to what is needed to run and support the service.
10. Changes
If we change this policy in a way that matters, we will email you before the change takes effect.