Privacy Policy

Last updated: October 3, 2026

This Privacy Policy explains how Digital Solutions Group, LLC ("Lucid," "we," "us," or "our"), a company registered in the Sharjah Media City Free Zone (Shams), United Arab Emirates, collects, uses, and protects your information when you use the Lucid mobile application and our website at https://www.asklucid.app (together, the "Service").

Lucid is an AI-powered content-analysis tool that estimates the credibility of online content, whether an image appears to be AI-generated or manipulated, and whether a message or offer shows signs of being a scam. We care about clarity and treat your data with the same care we apply to the content you ask us to analyse.

1. Information We Collect

Account information. When you create an account, we collect your email address and authentication details. If you sign in with Google or Apple, we receive basic profile information (such as your name and email) from that provider. We do not receive your Google or Apple password.

Content you submit for analysis. When you use Lucid, you may submit URLs, screenshots or images, video links, and free-form questions. We process this content to produce your analysis — for example a credibility estimate, an assessment of whether an image appears to be AI-generated or manipulated, or an assessment of whether a message or offer shows signs of being a scam. Where you submit an image for AI-generation or manipulation detection, the image is also analysed by a third-party detection provider (see "AI Processing"), and that analysis may examine any faces the image contains in order to estimate whether it is a deepfake. You choose what to submit; please do not upload images of other people unless you have a lawful basis to do so.

Instagram sign-in (optional). Some Instagram posts, such as age-restricted posts or posts from private accounts, are only shown to people signed in to Instagram. If you choose to sign in to Instagram inside Lucid so we can check posts like these, you do so on Instagram's own login page, shown inside the app. Your password goes to Instagram, not to us, and we never see it. Instagram's sign-in session is stored only on your device and is never sent to our servers. When you ask Lucid to check an Instagram post, the app uses that session on your device to request that one post from Instagram, and sends us only what is needed to analyse it: the post's image or video (as a link to Instagram's servers), its caption, the author's name, and its duration. We do not read your messages, feed, followers, or anything else in your Instagram account. The app keeps your Instagram username on your device to show which account is signed in. You can sign out at any time in Account settings. Instagram is operated by Meta, and your use of it is governed by Instagram's own terms and privacy policy. Lucid is not affiliated with or endorsed by Meta.

Instagram username on your account (optional). You can add your Instagram username to your Lucid account. We store it with your account so we can recognise when you mention Lucid on Instagram and apply the replies your plan includes. Each username can be linked to only one Lucid account. You can change or remove it in Account settings (changes are limited to once every 30 days), or ask us to remove it at any time.

If you mention us on social media. If you tag or mention Lucid in a public post or comment, we may check the content you mentioned us under and reply publicly with the result. To do this we process the public post, the comment, and the usernames involved, and we keep a count of replies per username so that free replies can be limited.

Analysis history. Your past analyses may be stored on your device and, where enabled, synced to our cloud so you can access your history across sessions.

Subscription and purchase information. If you subscribe to Lucid Unlimited or buy a credit pack, your purchase is processed by the Apple App Store or Google Play and our subscription provider. We receive your subscription status but do not receive or store your full payment-card details.

Usage and device information. We may collect limited technical information such as app version, device type, operating system, and basic, aggregated usage events to keep the Service reliable and improve it.

Website information. If you contact us through our website, we collect the email address and any message you provide.

Website analytics. Our website uses PostHog to count visits and to see which pages, links, and store buttons are used and which site or link brought you here. We use PostHog only to understand and improve the website. Until you make a choice in the cookie banner, and if you choose "Reject", it runs in cookieless mode: it sets no cookies, stores nothing on your device, and counts visitors with a non-reversible hash of your IP address and browser that changes daily. If you choose "Accept", PostHog stores a random identifier in a cookie and in your browser's local storage so that return visits are recognised, and records your approximate location (country and city) from your IP address; the IP address itself is not kept. Your choice is stored on your device so we do not ask again, and you can change it at any time from the "Cookie settings" link in the website footer.

Website advertising. If you choose "Accept" in the cookie banner, our website also loads the Meta Pixel (provided by Meta Platforms, Inc.) and the TikTok Pixel (provided by TikTok). They tell Meta and TikTok that you visited our website, which pages you viewed, and whether you tapped a button to get the app, so we can measure our ads on Facebook, Instagram and TikTok and show our ads to people who have visited the site. Meta and TikTok set their own cookies to do this and may link this information to your account with them under their own privacy policies. If you have not made a choice, or you choose "Reject", neither pixel is loaded and nothing is shared with Meta or TikTok. If you change your answer to "Reject" later, both pixels stop sending information and their cookies are removed.

Ad measurement in the app (AppsFlyer). We advertise Lucid on platforms such as Meta (Facebook and Instagram), TikTok and Google. To find out which of those ads lead people to install Lucid and to subscribe, the app uses AppsFlyer, a mobile measurement company. AppsFlyer receives an ID it creates for your install of the app, your device model and operating system version, your device's IP address, and the ad or link that brought you to the app if there was one. On iPhone and iPad it also receives your device's identifier for vendors (IDFV), an identifier that is specific to Lucid and cannot be used to recognise you in other apps. When you sign in, your Lucid account ID is added so that your installs and purchases can be counted together. When you start a trial, subscribe, renew, buy credits or get a refund, our server tells AppsFlyer which product it was and how much we received for it. We never send your payment details.

We do not use Apple's advertising identifier (IDFA), and Lucid never shows the "Allow tracking" prompt. On iPhone and iPad, results are reported to the ad platforms only in aggregated form, through Apple's SKAdNetwork and AppsFlyer's aggregated reporting, which do not identify you. On Android, AppsFlyer may receive your device's advertising ID; you can reset or delete it at any time in your device's settings. Lucid shows no ads, and we do not sell your personal information. AppsFlyer's own privacy policy is at appsflyer.com/legal/privacy-policy.

2. How We Use Your Information

We use your information to:

Provide credibility analyses and return your results;
Create and manage your account and saved history;
Process and manage subscriptions;
Recognise your Instagram username when you mention Lucid, and reply to mentions of Lucid on social media;
Maintain, secure, and improve the Service;
Respond to your enquiries and send essential service communications;
Send occasional product updates and announcements about Lucid. You can switch these emails off at any time in the app under Settings, or with the unsubscribe link in any such email;
Measure which of our ads bring people to Lucid;
Comply with legal obligations.

We do not sell your personal information.

3. AI Processing

To produce your analysis, content you submit is sent to third-party AI providers for processing. Specifically:

Google Gemini (provided by Google LLC) analyses the content you submit — links, images, screenshots, questions, and video transcripts — to generate your result.
OpenAI (provided by OpenAI, L.L.C.) may process the same content in place of Google Gemini when Gemini is slow or unavailable, so that your result still arrives.
Sightengine (provided by Sightengine SAS) runs an automated forensic classifier when you ask us to check whether an image is AI-generated or manipulated. Hive AI (provided by Hive) runs the same check when Sightengine is unavailable.
Where you submit a video link, its audio may also be sent to a third-party transcription provider to generate a transcript for analysis.

Where an image you submit for AI-generation or manipulation detection contains faces, that classifier may analyse them to estimate whether the image is a deepfake. We do not use these results to identify or recognise any individual, and we do not build or retain a facial-recognition database.

These providers process the content solely to return a result to us, under contractual confidentiality and data-protection obligations that require protections equivalent to those described in this policy. Your content is not sold, and is not used to train their AI models.

This processing is necessary to deliver the core function of the Service. We send only what is needed to perform the analysis you requested. Before content is sent to these third-party AI providers, we ask for your permission within the app, and you can review this Privacy Policy at that point. Please avoid submitting sensitive personal information within content you ask Lucid to analyse.

Face Data. Lucid does not perform facial recognition and does not identify individuals. We do not create, store, or share face templates, faceprints, or other biometric identifiers, and we do not maintain a facial-recognition database. Images or screenshots you submit may incidentally contain faces; where you ask us to check whether an image is AI-generated or manipulated, the automated detection classifier may examine facial regions solely to estimate whether the image is a deepfake. These results are not used to identify, authenticate, track, or recognise any person, and no facial data is retained after your analysis is produced.

Lucid provides probabilistic estimates, not definitive verdicts. Analyses are generated by automated systems and may be incomplete or inaccurate, and detection results in particular may produce both false positives and false negatives.

4. How We Share Information

We share information only with service providers who help us operate the Service, under appropriate confidentiality and data-protection obligations. These include providers of:

authentication, database, and account and history storage;
AI analysis and automated content detection (including detection of AI-generated, manipulated, or deepfake imagery);
audio transcription for video-link analysis;
retrieving the public social media posts and web pages you ask us to check;
subscription billing (including the Apple App Store and Google Play);
mobile ad measurement (AppsFlyer), as described under "Ad measurement in the app" above;
other services strictly necessary to run the Service.

If you accept cookies on our website, Meta and TikTok receive the website information described under "Website advertising" above.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.

5. Data Retention

We retain your account information and saved analyses for as long as your account is active. You may delete individual analyses, and you may request deletion of your account at any time (see "Your Rights"). We retain limited records where required for legal, security, or legitimate business purposes.

Your Instagram sign-in session stays on your device until you sign out in Account settings or delete the app. We never hold it. An Instagram username added to your account is deleted with your account.

6. Data Security

We use technical and organisational measures, including access controls and encryption in transit, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at support@asklucid.app. You can also delete your account from within the app or by contacting us.

8. International Transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards for such transfers.

9. Children's Privacy

Lucid is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, where appropriate, provide additional notice.

11. Contact Us

If you have questions about this Privacy Policy or your information, contact us at:
Digital Solutions Group, LLC
support@asklucid.app