Privacy policy

This policy explains what data Lucearia collects, why, where it is stored and what rights you have. Lucearia is a family organisation app: calendar, shopping list, meals, photos, location and chat, all in one place.

1. Who processes your data (data controller)

The data controller is [company name], [address], reachable at [privacy email].

2. Who this policy applies to

To anyone who creates a Lucearia account, is invited into a family, and visits the site lucearia.com. Lucearia is designed for family use and therefore also involves minors: section 9 explains how we process their data.

3. What data we collect and why

We collect only the data needed to run the service you have chosen to use.

**Account data.** Email address and password (stored in encrypted form, never in clear text), family name, display name and colour of each member. They are used to sign you in, to keep your family together and to distinguish who does what. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

**Content you and your family enter.** Calendar events, shopping lists, meals and recipes, tasks, reminders, birthdays, budget items and expenses, documents, contacts, inventory and information you decide to save. They are used to provide the app's functions. Legal basis: performance of the contract.

**Photos and videos.** The images and videos you upload to the family gallery. They are stored in Europe in a private space and reachable only through a signed link that expires; they have no public address. See section 6. Legal basis: performance of the contract.

**Chat messages.** Messages are end-to-end encrypted: they travel encrypted and are read only by your family's devices. We cannot read their content. We process the technical data needed to deliver the messages (for example which rooms you belong to and the delivery metadata), but not the text. Legal basis: performance of the contract.

**Location data.** If you turn on location sharing, we process the device's approximate or precise location to show it to the family and for alerts when entering/leaving an area (geofence). Sharing is optional and each member can switch their own off at any time. Movement history is deleted after 14 days. Legal basis: consent (Art. 6(1)(a) GDPR), revocable at any time.

**Payment data.** Once the subscription is active, payment will be handled by Stripe and, for in-app purchases, by Apple and Google. We will not store the full number of your card: the payment provider will handle it. We will receive the outcome of the transaction and the data needed for billing. This feature is not active yet. Legal basis: performance of the contract and legal obligations (Art. 6(1)(b) and (c) GDPR).

**Calendar synchronisation (optional).** If you connect Google Calendar or Outlook, with your consent we access the events needed to show them in the family calendar, through the OAuth authorisation you grant. You can revoke the connection whenever you want. Legal basis: consent.

**Technical and security data.** To run and protect the service, we process technical data such as device type and access logs. Traffic passes through Cloudflare's proxy: today the application records Cloudflare's IP address, not your real IP address. The application logs rotate by size (10 MB per file, three files kept), not by time, so we do not promise a fixed number of retention days. Legal basis: legitimate interest in ensuring security and continuity (Art. 6(1)(f) GDPR).

**Site statistics (optional).** On the site lucearia.com, only with your consent, we measure which pages are read. We do not use any analytics tool yet. No advertising and no advertising profiling. Legal basis: consent.

4. What we do NOT do

We do not show advertising in any plan. We do not sell your data and do not share it with advertising partners. We do not use your family's content to train models or for purposes other than those described here.

5. Who processes data for us (processors and providers)

We rely on providers that process data on our behalf, as processors, only to run the service: Contabo GmbH — application servers, in Germany (EU). Cloudflare — proxy in front of all the application's traffic: it terminates the encrypted connection (TLS) and forwards every request to the server, so it processes on our behalf all the data that passes through the service, not only the static files. It also hosts the storage of the photos and videos in Europe (space under EU jurisdiction). Stripe — subscription payments on the web. Not yet active in production: it will be used when the subscription is available. Apple / Google — in-app purchases on iOS and Android. Not yet active in production: they will be used when the subscription is available. Infomaniak — sending of service emails (welcome, receipts, password reset); a provider based in Switzerland (outside the EU). See section 6. Google / Microsoft — only if you connect calendar synchronisation yourself.

6. Where the data is stored

The application servers are in Europe, in Germany. The photos and videos are stored in Europe. The sending of service emails (welcome, receipts, password reset) is an exception: it goes through a provider based in Switzerland, therefore outside the European Union, and these emails contain your email address.

7. How long we keep the data

Account data and family content: as long as the account is active. If you delete the account, we remove them immediately, except as the law requires us to keep. Location history: deleted after 14 days. Billing data: kept for the period required by tax law the period required by applicable tax law. Backups: 14 daily, 8 weekly, 6 monthly copies.

8. Your rights

You can at any time ask to: access your data, correct it, delete it, restrict its processing, object to the processing, receive your data in a portable format, and withdraw a consent already given (for example for location or statistics). Many of these actions you do directly from the app, including deletion of the account and of the family's data.

To exercise your rights, write to [privacy email]. You also have the right to lodge a complaint with the supervisory authority: for the EU, the supervisory authority of your country; for Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

9. Minors' data

Lucearia is a family app and minors take part in it on the invitation of an adult of the household. The main account is created by an adult, who invites the other members.

For minors below the age set out in Art. 8 GDPR 16 years, or the lower age set by the State (14 in Italy); for Switzerland the nLPD applies, the processing is based on the consent or authorisation of the person exercising parental responsibility.

Minors' data receive the same protections as everyone else's (no advertising, no resale, location optional and switchable off).

10. Security

We protect the data with encryption of traffic in transit, with end-to-end encryption of chat messages and with private storage of photos reachable only through signed links that expire.

11. Changes to this policy

If we change this policy, we update the date at the top and, if the changes are significant, we let you know in the app or by email.

12. Contacts

For any question about privacy, write to [privacy email] or to [postal address].