Privacy Policy
Last updated: 3 July 2026
RHISE AI Technologies, Inc. (“RHISE,” “we,” “our,” or “us”) values the privacy of individuals who use our website (getlucie.ai) and our mobile application, Lucie, and related services (collectively, our “Services”). This Privacy Policy explains how we collect, use, and disclose personal data from users of our Services (“you” or “your”). As used in this Privacy Policy, “personal data” means any information relating to an identified or identifiable individual. Beyond this Privacy Policy, your use of our Services is also subject to our Terms of Service.
Data Controller. RHISE AI Technologies, Inc., 221 W 10th Street 3rd Floor, #151, Wilmington, Delaware 19801, USA. Contact: contact@getlucie.ai.
1. Personal Data We Collect
We may collect the following categories of personal data:
A. Data You Provide to Us
- Account Data. When you set up an account, we collect account data such as your name, email address, and phone number.
- Profile Data. When you set up a profile, we collect information such as your date of birth, gender, and any other information you choose to include in your profile.
- Payment Data. When you make a purchase, our payments processor will collect payment-related information such as your name, address, payment card details, in order to process the purchase.
- Communications Data. When you contact us, such as for customer support, we collect your name, email address, and the contents of your message.
B. Data We Collect Automatically
- Device and Technical Data. Device type, operating system, application and SDK version, and device or installation identifiers.
- Network Data. IP address and approximate location derived from it.
- Usage Data and Diagnostic Data. API request logs, sync run summaries, sync events, error and performance logs, and timestamps of activity.
C. Data From Third-Party Integrations
- Google Calendar Data. When you integrate your Google Calendar, we collect event details and schedule information from your connected Google Calendar, and we use them to create, edit, and manage events you ask Lucie to handle, and to generate daily schedule overviews.
- Google Contacts Data. When you integrate your Google Contacts, we collect the contact information you have stored, and we use it to identify the email address that corresponds to the names that you mention, send calendar invites or emails to those contacts at your request, or manage contacts through Lucie.
- Gmail Data. When you integrate Gmail, we collect limited Gmail metadata (such as unread count, search results, and thread details) to provide an inbox overview, and, if you enable it, the ability to draft, send, and label emails on your behalf.
- Fitness and Wellness Data. If you choose to connect a supported fitness tracker (such as Oura or Whoop), Lucie may receive data collected by that tracker, which may include information such as your sleep patterns, activity levels, and general wellness indicators (for example, steps taken, workout sessions, and sleep duration).
We use this data to provide wellness-related features within Lucie, such as suggesting a breathing exercise, recommending a break, or adjusting your schedule based on your activity or sleep patterns. We do not use this data to diagnose, treat, or provide medical advice regarding any disease or medical condition. This data is not sold to third parties and is not used for advertising or profiling unrelated to the wellness features described above.
You may disconnect a fitness tracker integration at any time from within the app, which will stop further data collection from that source.
Our use of data obtained through Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use this data to provide or improve the user-facing features described above. For details on how Google itself handles your data, see Google’s Privacy Policy at https://policies.google.com/privacy.
Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide your personal data when requested, you may not be able to use our Services if that personal data is necessary to provide you with our Services or if we are legally required to collect it.
3. How We Use Your Personal Data and Legal Bases (Europe)
If you are located in the European Economic Area, the United Kingdom, or Switzerland (“Europe”), we only process your personal data where we have a valid legal basis, as set out below:
| Purpose | Description | Legal Basis |
|---|---|---|
| Providing the Services | We process personal data including your account and profile data in order to provide and maintain our Services. | The processing is necessary for entering into, or performance of a contract to which you are a party |
| Billing and accounting | We process personal data including payment details to facilitate transactions and payments and to handle the payments you initiate and for accounting purposes, including keeping a record of your payments. | The processing is necessary for entering into, or performance of a contract to which you are a party |
| Customer support | We process personal data to respond to your inquiries and provide customer support. | The processing is necessary for entering into, or performance of a contract to which you are a party |
| Providing third-party integrations as part of the Services | We process personal data from the third-party apps and services that you choose to connect, including calendar and email data, contact data, and fitness and wellness data, to provide the features you request as part of our Services. | The processing is necessary for entering into, or performance of a contract to which you are a party |
| Understanding usage and improving the Services | We process personal data that we collect through the Services to understand and analyze how you use our Services and develop new products, services, features, and functionality. | We, or a third party, have a legitimate interest in using your personal data for the purpose of evaluating and improving our products or Services |
| Marketing | We process personal data for marketing purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you. | We, or a third party, have a legitimate interest in using your personal data for the purpose of delivering marketing and advertising materials |
| Safety | We process personal data for safety purposes, including to find and prevent fraud and abuse, and respond to trust and safety issues that may arise. | We, or a third party, have a legitimate interest in using your personal data for the purpose of protecting against and preventing fraud |
| Administrative purposes | We process personal data for compliance purposes, including enforcing our Terms of Service or other legal rights. | We, or a third party, have a legitimate interest in using personal data for the purpose of addressing administrative and legal issues |
| Legal compliance | We process personal data as required by applicable laws and regulations, or requested by any judicial process or governmental agency. | We need it to comply with a legal obligation, for instance to comply with a court order |
4. How We Disclose Your Personal Data
Your personal data may be disclosed to the following categories of recipients, each acting under appropriate confidentiality and security obligations:
- Third-party integration providers. You can take certain actions on the third-party apps you choose to integrate, such as creating calendar invites or sending emails. In this case, we share personal data to execute these actions.
- Other service providers. We share personal data with vendors and service providers engaged to provide, operate, maintain, and secure the Services, including to provide cloud storage services, process payments, provide IT support, etc.
- As required by law, or where we believe disclosure is necessary to comply with legal process, respond to your requests, or protect the rights, property, or safety of RHISE, our users, or others.
- Affiliates and subsidiaries. We may share personal data with our corporate affiliates and subsidiaries for the purposes described in this Privacy Policy.
- In connection with a merger, acquisition, or sale of assets, subject to the terms of this Privacy Policy.
- With your consent. We may also disclose your personal data in other cases with your permission.
5. Data Transfers
We are based in the United States. Personal data we collect may be transferred to, and stored at, any of our affiliates, partners, or service providers, which may be inside or outside the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, including in the US. We may transfer personal data from the EEA, the UK, or Switzerland to countries that have been found to provide adequate protection by the European Commission or other competent authorities (e.g., see list of countries for which the European Commission has issued an adequacy decision here), use contractual protections for the transfer of personal data, transfer to recipients who have adopted Binding Corporate Rules, or otherwise in accordance with applicable data protection laws.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website to operate our Services and understand how they are used. A cookie is a small text file placed on your device by your browser. A session cookie is deleted when you close your browser, while a persistent cookie remains and may be read on later visits.
The information collected via cookies may include personal data, such as unique identifiers, system information, your IP address, web browser, device type, and the web pages that you visit just before or just after you use the Services, as well as information about your interactions with the Services, such as the date and time of your visit, and where you have clicked.
- Strictly necessary cookies. Some cookies are strictly necessary to make our Services available to you, for example, to provide login functionality. We cannot provide you with the Services without this type of cookie.
- Analytics cookies. We also use cookies for website and app analytics purposes in order to operate, maintain, and improve our Services. We may use our own analytics cookies or use third-party analytics providers to collect and process certain analytics data on our behalf. In particular, we use Google Analytics to collect and process certain analytics data on our behalf. Google Analytics helps us understand how you engage with our Services. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/.
Where these technologies are not strictly necessary for the website to function, we ask for your consent before they are used, through the cookie banner shown when you first visit our website. If you do not consent to certain cookies, some features of the website may not work as intended.
7. Retention
We take measures to delete your personal data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law, including to comply with tax requirements, or for as long as is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse or enforce our terms and conditions. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations.
8. Your Rights
If you are located in Europe, you have the following rights regarding your personal data, to the extent permitted by law:
- Withdraw consent. Where processing is based on your consent, you have the right to withdraw it at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
- Object to processing. You have the right to object, on grounds relating to your particular situation, to processing carried out on the basis of our legitimate interests. Where your data is processed for direct marketing, you may object at any time, free of charge, without needing to provide any justification.
- Access. You have the right to obtain confirmation as to whether we process your data, and, if so, to access that data along with information about the purposes of processing, the categories of data concerned, and the recipients to whom it has been or will be disclosed.
- Rectification. You have the right to have inaccurate personal data corrected, and incomplete personal data completed.
- Restriction of processing. You have the right to obtain restriction of processing in certain circumstances, such as while we verify the accuracy of your data or assess an objection you have raised. Where processing is restricted, we will only store your data and not otherwise process it.
- Erasure. You have the right to obtain deletion of your personal data in certain circumstances, such as where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
- Data portability. You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller, where technically feasible.
- Lodge a complaint. You have the right to lodge a complaint with a supervisory authority including in your country of residence or where an incident took place.
To exercise these rights, contact us using the details below. Before fulfilling a request, we may ask you to verify your identity.
9. Security
We take appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children’s Privacy
Our Services are not directed to or intended for use by children under the age of 17. We do not knowingly collect personal data from anyone under the age of 17. If you believe a child has provided us with personal data without appropriate consent, please contact us at contact@getlucie.ai, and we will take steps to delete that information.
11. Third Parties
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. This Privacy Policy does not apply to your activities on third-party services or any information you disclose to them. We encourage you to review their privacy policies before providing any information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and, where required, notify you through the Services or by other means.
13. Contact Us
RHISE AI Technologies, Inc. is the data controller responsible for your personal data. If you have questions, comments, or concerns about this Privacy Policy or our data practices, or wish to exercise any of the rights described above, please contact us at:
RHISE AI Technologies, Inc.
221 W 10th Street 3rd Floor, #151
Wilmington, DE 19801
United States
contact@getlucie.ai