Privacy Policy
Last updated: February 20, 2026
1. Data Controller
Sinisa Milojevic
Birkbuschstr. 11, Berlin, Germany
Email: hello@lucid-oracle.com
2. Data We Collect
| Category | Details |
|---|---|
| Account data | Email address, hashed password |
| User content | Dream descriptions, card readings, palm images, voice recordings |
| Usage data | Feature usage counts, subscription tier (collected via cookie-free Plausible analytics) |
| Payment data | Processed by Stripe; we store only your Stripe customer ID and subscription status |
3. Purpose of Processing
- Account management — creating and maintaining your account
- AI interpretation — sending your content to AI providers to generate dream interpretations, card readings, and palm readings
- Subscription billing — processing payments and managing your subscription tier
- Service improvement — aggregate, anonymized analytics to improve the platform
4. Third-Party Processors
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, storage, email delivery | EU (eu-west-1) |
| OpenAI | AI-powered interpretations | USA |
| Anthropic | AI-powered interpretations | USA |
| Stripe | Payment processing | USA |
| Plausible Analytics | Cookie-free website analytics | EU |
5. Data Retention
- Account & content data — retained as long as your account is active
- Voice recordings — automatically deleted within 24 hours after processing
- Deleted account email hash — retained for 90 days to prevent free-tier abuse, then permanently deleted
6. Your Rights Under GDPR
You have the right to:
- Access — request a copy of your personal data (data export)
- Rectification — correct inaccurate personal data
- Erasure — delete your account and all associated data
- Portability — receive your data in a machine-readable format
- Object — object to processing of your personal data
- Lodge a complaint — with a supervisory authority (e.g., Berliner Beauftragte für Datenschutz und Informationsfreiheit)
To exercise any of these rights, email hello@lucid-oracle.com.
7. Cookies
Lucid Oracle uses only a minimal, essential cookie to store your authentication token (JWT). We do not use any tracking cookies, advertising cookies, or third-party cookie-based analytics. Plausible Analytics operates entirely without cookies.
8. International Data Transfers
Your data is primarily hosted in the EU (AWS eu-west-1, Ireland). When content is sent to US-based AI providers (OpenAI, Anthropic) or Stripe for processing, these transfers are governed by the EU–US Data Privacy Framework and standard contractual clauses.
9. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the website. The "last updated" date at the top reflects the most recent revision.
10. Contact
For privacy-related questions or concerns, contact us at hello@lucid-oracle.com.