Lucy by PeerBie — Privacy Policy

Effective date: November 1, 2026

This Privacy Policy explains how PeerBie Inc. (5214F Diamond Heights Blvd #3649, San Francisco, CA 94131, United States — “PeerBie”, “we”) processes personal data when you use Lucy by PeerBie, our personal AI assistant app for iOS and Android (“Lucy”). It complies with the Turkish Personal Data Protection Law (KVKK), the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). For the PeerBie team platform, see the general PeerBie privacy policy.

1. What we collect

  • Account data — name, email address, password (stored hashed) and, if you use them, your Apple or Google sign-in identity.
  • Content you create — tasks, reminders, chat messages with Lucy, audio recordings you choose to make or import and, if you ask Lucy to join an online meeting for you, the recording of that meeting — together with the transcripts, summaries and action items generated from them.
  • Connected accounts (optional) — if you connect Google or Microsoft, we store access and refresh tokens, encrypted, to work with the parts you turn on: your calendar (read and add events), your mail (read, and send only on your instruction) and your files in Google Drive or OneDrive (find and read files when you ask Lucy about them). We do not read your mail or files unless you turn that on, and we never send email without your instruction.
  • Purchases — your subscription status, product and renewal dates, processed by Apple or Google and by RevenueCat, our subscription provider. We never receive your payment card details.
  • Usage and device data — which features you use (for example that a recording was made), app version, platform, crash reports and a push-notification token. We do not use advertising identifiers and we do not track you across other apps or websites.

2. Why we process it

  • To provide the service you asked for: transcribing recordings, keeping your tasks, sending your daily brief, answering your questions (performance of a contract).
  • To remember your preferences so Lucy is useful to you specifically (legitimate interest; you can delete memories at any time).
  • To bill subscriptions and prevent abuse (contract and legal obligation).
  • To understand which features are used and improve the app, using aggregated usage data (legitimate interest).

3. AI processing

Transcription, summaries and Lucy’s answers are produced by AI services from Google (Gemini) and OpenAI (Whisper), acting as our processors under contract. Audio is sent to these services for transcription. Recordings are kept for 30 days so you can listen back, then deleted; the text stays in your account until you delete it. When Lucy joins an online meeting for you, the meeting is recorded and transcribed by Recall.ai and Deepgram, also acting as our processors; that recording is deleted within 30 days. Your data is used only to provide the service to you. It is never used to train AI models, and it is never sold.

4. Who else receives data

Only providers we need to run the service, each bound by a data processing agreement: Google (AI, sign-in, calendar, mail and Drive if connected, push notifications via Firebase), Microsoft (calendar, mail and OneDrive if connected), OpenAI (transcription), Recall.ai and Deepgram (meetings Lucy joins for you), RevenueCat (subscriptions), Apple and Google Play (payments), Hetzner (hosting, Germany). We do not share personal data with advertisers or data brokers.

5. Where data is stored

Your account, content and transcripts are stored in the European Union (Hetzner, Germany). AI processors may process data in the United States under standard contractual clauses.

6. Retention and deletion

You can delete any recording, transcript, task or chat in the app. Chats with Lucy are kept for a limited time unless you save them. Deleting your account (More → Account → Delete account) permanently removes your personal workspace, recordings, transcripts, tasks, memories and connected-account tokens within 30 days, except billing records we must keep by law.

7. Your rights

You may access, correct, export or delete your data, object to processing, and withdraw consent at any time. Write to [email protected]; we answer within 30 days. EU residents may complain to their supervisory authority; Turkish residents to the KVKK Board; California residents have the rights described in the CCPA, and we do not sell or share personal information as defined there.

8. Children

Lucy is for adults. We do not knowingly collect data from anyone under 18.

9. Security

Data is encrypted in transit (TLS) and at rest; access is limited to staff who need it; sign-in tokens are stored securely on your device.

10. Changes

We will post changes here and, for material changes, notify you in the app. Questions: [email protected].

11. Google and Microsoft user data — Limited Use

Lucy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, when you connect a Google or Microsoft account we use that data only to provide the features you asked for — reading and adding calendar events, and, where you enable them, working with your mail and your files. We do not sell it, we do not use it for advertising, and we do not use it to train generalised artificial-intelligence models. No human reads it except with your explicit permission, where it is necessary for security purposes, or where the law requires it. You can disconnect at any time in the app, and deleting your account deletes the tokens and the data derived from them.

Your files. If you turn on Files, Lucy searches and reads files in your Google Drive or OneDrive only when you ask her about them, and only the files needed to answer you. Lucy does not scan or copy your whole Drive in the background. Anything Lucy keeps from a file is deleted when you turn Files off or disconnect the account, and in any case after at most 90 days.

12. Connecting AI assistants (Claude, ChatGPT)

You can connect Lucy to an AI assistant such as Claude (Anthropic) or ChatGPT (OpenAI). This is optional. A guide is at peerbie.com/lucy-claude-chatgpt.

How it works. You sign in with your Lucy account and choose “read only” or “read and change”. The assistant receives an access token that works for one hour and only for the Lucy connector, and a refresh token to renew it; a refresh token that is not used for 30 days stops working. Every request runs as you and reaches only your own Lucy space.

What the assistant receives. Only the answers to the requests it makes on your behalf: your tasks, the notes and action items from your recordings (the transcript only when asked, never the audio), your notes pad, your routines and your connected calendar’s events. With “read and change” it can also create or update tasks, add notes and set up or pause routines; it cannot delete anything. What the assistant does with this information is governed by its provider’s terms and privacy policy.

What we keep. For each request we log which tool was used, its inputs, the start of the answer, the time and whether it worked, to run the service securely and show you the activity. These records are deleted after 90 days, and with your account. We do not receive your conversation with the assistant, and we do not use these requests to train AI models.

Disconnecting. In the Lucy app, open More → Connections and choose Disconnect. The connection stops working within a minute. Removing Lucy inside Claude or ChatGPT removes it only on their side.