Lucy AI Privacy Policy

Effective Date: July 5, 2025

This Privacy Policy ("Policy") applies to the Lucy AI service ("Service"), developed and operated by BLUE BOX AI LIMITED ("Company," "we," or "us"). We respect and protect your privacy and comply with applicable laws and regulations in the United States and the European Economic Area (EEA), including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

Registration Data:

Username, email address.

Profile & Preferences:

Basic information you provide to enhance your experience.

Usage Data:

Device & Technical Data:

IP address, device identifiers, operating system, browser type and version.

Cookies & Similar Technologies:

Used to remember your preferences and maintain session state.

2. How We Use Your Data

We use your information to:

Provide, maintain, and improve Lucy AI and personalized recommendations.
Analyze usage patterns to optimize user experience and features.
Prevent fraud, monitor security, and ensure compliance.
Send account notifications, updates, or marketing communications (with your consent).

3. Data Sharing & Third Parties

Service Providers:

We may share data with third parties (e.g., cloud services, analytics, payment processors, email providers) solely to deliver the Service.

Legal Requirements:

We may disclose data to comply with laws, regulations, court orders, or government requests.

Business Transfers:

In the event of a merger, acquisition, or asset sale, personal data may be transferred as business assets.

4. Your Rights

For users in the EEA (GDPR rights) and California (CCPA rights), you have the right to:

Access: Obtain a copy of your personal data.
Rectification: Correct or update inaccurate data.
Deletion: Request deletion of personal data, where permitted by law.
Restriction: Limit processing of your data in certain cases.
Data Portability: Receive your data in a structured, commonly used format.
Object: Object to data processing for specific purposes (e.g., marketing).
Withdraw Consent: Withdraw consent for data processing at any time.

To exercise these rights, contact us via the details in Section 11. We will respond within legal timeframes.

5. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined or as required by law. After retention periods expire, we securely delete or anonymize data.

6. International Data Transfers

To operate the Service, we may transfer and store data globally. For EEA users, we implement appropriate safeguards (e.g., Standard Contractual Clauses) to ensure lawful transfers.

7. Security Measures

We employ industry-standard technical and organizational measures, including encryption, access controls, and regular security audits, to protect your data against unauthorized access, disclosure, or alteration.

8. Minors

Our Service is intended for users aged 16 and older. We do not knowingly collect personal data from minors under 16. If we learn we have collected such data, we will promptly delete it.

9. Cookies & Tracking

We use cookies and similar technologies to improve your experience. You can manage or disable cookies via your browser or device settings, though this may affect functionality.

10. Policy Updates

We may update this Policy from time to time. Significant changes will be communicated at least 30 days before they take effect via in-app notifications or email.

11. Contact Us

For questions or to exercise your rights, please contact us:

Email: support@lucyai.io

Thank you for trusting Lucy AI. We are committed to safeguarding your privacy and data security.