Lucy by PeerBie — Privacy Policy

Effective date: September 11, 2026

This Privacy Policy explains how PeerBie Inc. (1800 Clayton Way, Sacramento, CA 95835, United States — “PeerBie”, “we”) processes personal data when you use Lucy by PeerBie, our personal AI assistant app for iOS and Android (“Lucy”). It complies with the Turkish Personal Data Protection Law (KVKK), the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). For the PeerBie team platform, see the general PeerBie privacy policy.

1. What we collect

  • Account data — name, email address, password (stored hashed) and, if you use them, your Apple or Google sign-in identity.
  • Content you create — tasks, reminders, chat messages with Lucy, and audio recordings you choose to make or import, together with the transcripts, summaries and action items generated from them.
  • Connected accounts (optional) — if you connect Google, we store access and refresh tokens to read and add calendar events on your behalf. We do not read your email unless you explicitly connect it, and we never send email without your instruction.
  • Purchases — your subscription status, product and renewal dates, processed by Apple or Google and by RevenueCat, our subscription provider. We never receive your payment card details.
  • Usage and device data — which features you use (for example that a recording was made), app version, platform, crash reports and a push-notification token. We do not use advertising identifiers and we do not track you across other apps or websites.

2. Why we process it

  • To provide the service you asked for: transcribing recordings, keeping your tasks, sending your daily brief, answering your questions (performance of a contract).
  • To remember your preferences so Lucy is useful to you specifically (legitimate interest; you can delete memories at any time).
  • To bill subscriptions and prevent abuse (contract and legal obligation).
  • To understand which features are used and improve the app, using aggregated usage data (legitimate interest).

3. AI processing

Transcription, summaries and Lucy’s answers are produced by AI services from Google (Gemini) and OpenAI (Whisper), acting as our processors under contract. Audio is sent to these services for transcription and deleted from our servers once the transcript exists; the text stays in your account until you delete it. Your data is used only to provide the service to you. It is never used to train AI models, and it is never sold.

4. Who else receives data

Only providers we need to run the service, each bound by a data processing agreement: Google (AI, sign-in, calendar if connected, push notifications via Firebase), OpenAI (transcription), RevenueCat (subscriptions), Apple and Google Play (payments), Hetzner (hosting, Germany). We do not share personal data with advertisers or data brokers.

5. Where data is stored

Your account, content and transcripts are stored in the European Union (Hetzner, Germany). AI processors may process data in the United States under standard contractual clauses.

6. Retention and deletion

You can delete any recording, transcript, task or chat in the app. Chats with Lucy are kept for a limited time unless you save them. Deleting your account (More → Account → Delete account) permanently removes your personal workspace, recordings, transcripts, tasks, memories and connected-account tokens within 30 days, except billing records we must keep by law.

7. Your rights

You may access, correct, export or delete your data, object to processing, and withdraw consent at any time. Write to [email protected]; we answer within 30 days. EU residents may complain to their supervisory authority; Turkish residents to the KVKK Board; California residents have the rights described in the CCPA, and we do not sell or share personal information as defined there.

8. Children

Lucy is for adults. We do not knowingly collect data from anyone under 18.

9. Security

Data is encrypted in transit (TLS) and at rest; access is limited to staff who need it; sign-in tokens are stored securely on your device.

10. Changes

We will post changes here and, for material changes, notify you in the app. Questions: [email protected].

11. Google user data — Limited Use

Lucy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, when you connect a Google account we use that data only to provide the features you asked for — reading and adding calendar events, and, where you enable it, working with your mail. We do not sell it, we do not use it for advertising, and we do not use it to train generalised artificial-intelligence models. No human reads it except with your explicit permission, where it is necessary for security purposes, or where the law requires it. You can disconnect Google at any time in the app, and deleting your account deletes the tokens and the data derived from them.