Terms

Lucid · last updated 6 September 2026

These terms describe how Lucid actually works today. They have not been reviewed by a lawyer, and one blank — who, legally, this agreement is with — is a decision nobody has made yet and is marked in yellow below. Everything else outstanding is listed in one place at the foot of the page: before these terms are published.

What Lucid is

A personal life vault and assistant. It brings your mail, calendar, contacts, tasks, messages, reading, watching, kitchen, travel, money and health data into one place, keeps its own searchable copy of some of it, and can act on your behalf when you ask it to. It is operated by [OPERATOR — TO BE NAMED], and "we" below means that party.

Using Lucid means agreeing to these terms. If you do not agree to them, do not use it — and if you have already started, your data page will give you everything back and then remove it.

Who may use it

Anyone we have given access to, who is old enough to enter a contract where they live. Use Lucid for your own personal or business affairs. Do not use it to break the law, to send mail at volume that the people receiving it did not ask for, to reach data belonging to anyone else using it, or to work around the limits described below.

You are responsible for what happens under your sign-in, so keep it to yourself.

Your accounts elsewhere

Lucid acts on mail, calendar, task, music, Instagram and bank accounts that you connect yourself, and can read texts and health data from devices you pair yourself. You remain bound by the terms of those services — Microsoft's, Google's, Spotify's, Meta's and SimpleFIN's among them — and you can disconnect any of them at any time in Settings, which stops Lucid reading them immediately.

Mail Lucid sends goes out through your own connected mailbox using your own permission. There is no shared sending address, which means what you send is yours in every sense — including the responsibility for it.

Your data

Yours, and described in full on the privacy page. It is not sold, not shared for anybody else's purposes, and not used to train anything.

You can take a copy of everything, or have all of it deleted, whenever you like and without asking anybody — both are on your data page. The deletion tells you, before and after, exactly what went and what did not; the small number of things it does not remove are named on that page and explained on the privacy page. The copy has limits of its own, and they are named where it is described rather than discovered on the day you need it: it carries your records and not the files behind them, and it says so.

Lucid also keeps a slice of your recent mail on the device you are using, so that searching it is instant. Signing out deletes it from that device. What is in it is set out on the privacy page.

Nothing is ever deleted because of money. Not on cancellation, not after a failed payment, not on a timer. An account that has lapsed is locked, not erased, and everything in it can still be read and exported. Erasure is yours to perform, by hand, when you decide to.

Money — the subscription, the trial, and what a lapse does

Lucid is a paid subscription. There is no payment processing in Lucid today: nothing in it talks to a card processor, no card details are held anywhere in it, and no price has been set — so nobody can be charged and nothing below can take effect until both of those change. What follows is the arrangement that applies once they do, written now because it is decided, and because terms that arrive with the first invoice are terms nobody agreed to.

• Plans and price. A plan has a name, a price, a period — monthly unless it says otherwise — and an amount of assistant use included. No price has been set for any plan, and every screen says so in those words rather than showing a guess. You will be told the price before you are ever asked to pay it.
• Trial. A plan may include a free trial of a stated length. During a trial nothing is taken away, and nothing is charged. When a trial ends without a subscription starting, the account locks — see below — and nothing in it is deleted.
• Renewal. A subscription runs in periods and renews at the end of each one until you cancel.
• A failed payment. For fourteen days after a payment fails, nothing at all is taken away. You are late, not gone, and Lucid says so plainly rather than degrading quietly. If it is still unpaid after those fourteen days, the account locks.
• What "locked" means, exactly. Two things, and they are the only two: the assistant stops answering, and Lucid becomes read-only — you can read, search, export and erase everything, and nothing new can be saved. That is the whole of it.
• What never stops, in any state. Your mail, texts and calendar go on syncing, because a message that arrived while an account was locked is one no later payment brings back. Reading everything you already have, exporting all of it, deleting all of it, revoking anything you have shared or connected, and getting back in — none of those is ever taken away for money.
• Cancelling. You can cancel at any time. You keep everything until the end of the period you have already paid for; after that the account locks, and — again — nothing is deleted. Your export stays available.
• Refunds. Whatever cancellation, cooling-off or refund rights the law where you live gives you, you keep: nothing here is written to work around them, and if a term below conflicts with such a right, the right wins. Beyond those, no refund policy has been set, and one will be published here before anything is charged.
• Changes to price. A price change is told to you before it takes effect, in time to cancel first.

Limits on use

Lucid limits how fast any one account may call the parts of it that are expensive to run, and how much AI spending an account may do in a month. When a limit is reached, Lucid says so and says when to try again. These are there to keep one runaway loop from degrading the service for everybody else, not to ration ordinary use — you should never meet one.

Not medical advice, and not financial advice

Lucid holds health figures, workouts, medicines, bank balances and transactions, and it can put an assistant on top of them. None of what it shows you or says to you is medical, clinical, legal, tax, investment or financial advice, and none of it is a diagnosis, a treatment plan or a recommendation to buy or sell anything.

The medicine cabinet and the health screens are a place to keep your own records — they are not a clinical system, they do not check interactions, and nothing in Lucid is a substitute for a doctor or a pharmacist. In an emergency, or about anything that matters to your health, ask a professional and not a computer.

The money screens read your accounts through SimpleFIN and can only ever read them; Lucid cannot move money. Balances and transactions can arrive late, arrive wrong, or not arrive at all, and your bank's own record is the true one. Do not make a financial decision on what Lucid shows you without checking it there.

What is not promised

Lucid is provided as it is, and as it is available. It may be unavailable, it may contain mistakes, and features may change or be removed. It is not a system of record.

Keep your own copies of anything you cannot afford to lose, and this is meant literally rather than as a formality. For your mail, calendar and tasks it is easy: Lucid reads those from Microsoft and Google, and those accounts remain the authoritative copy. For the files you upload — a passport scan, a policy document, the photographs on the frame — it is not. Those are held in file storage, and database backups do not cover file storage, so the copy inside Lucid is the only one there is. The privacy page says this in full. Do not let Lucid hold the only copy of a document you would have to replace.

The export exists for exactly this reason, and there are two of it. The quick one hands back every record Lucid holds for you, straight away, and it lists your files with their paths rather than containing them. The full one is a zip built in the background that contains those records and the files themselves — the vault documents, the photographs, the board pictures, your signature and the spoken audio — with a plain-text file inside it naming anything it could not carry and why. Both are in Settings, under “Take it all with you”. Neither ever reports itself finished while something is missing: what they left out is written down, every time.

Answers from the assistant can be wrong, including confidently wrong, and they should be checked before they are acted on. Lucid can act on your behalf when you ask it to — send a message, create an event, tick something off — and you are responsible for what you asked for.

When Lucid is not working, the status page says so.

Limitation of liability

This section is the ordinary shape of such a clause, written plainly. It has not been reviewed by a lawyer and it is first on the list at the foot of this page.

To the fullest extent the law allows:

• we are not liable for indirect, incidental, special or consequential loss; for lost profits, lost business or lost opportunity; or for loss or corruption of data you had another copy of, or could have exported and did not;
• our total liability to you for all claims arising out of or relating to Lucid, in any twelve-month period, is limited to the amount you actually paid for Lucid in that period;
• we are not liable for what the services Lucid connects to do or fail to do — a mailbox that loses a message, a bank feed that reports a wrong balance, an assistant provider that is unavailable — beyond our own part in it.

And the limits on those limits, which matter more. Nothing here excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else the law does not allow to be excluded. If you are a consumer, your statutory rights are unaffected — including any right to a remedy for a service that is not carried out with reasonable care and skill — and nothing in these terms takes them away.

Ending it

You can stop using Lucid whenever you like. Disconnecting your accounts stops all reading immediately, and your data page removes everything Lucid holds.

We may withdraw access — for a breach of the sections above, or if Lucid stops being offered. If it is going to stop being offered, you will be told in time to take your export out, and access to that export will outlast the notice.

Changes to these terms

The date at the top changes when this page does. Anything that materially changes what you get, or what you pay, will be told to you rather than left to be discovered here — and where a change needs your agreement, you will be asked rather than assumed.

Governing law

These terms, and any dispute arising out of them, are governed by the law of the place in which [OPERATOR — TO BE NAMED] is established, and the courts of that place have jurisdiction. If you are a consumer, this does not deprive you of the protection of the mandatory law of the country you live in, nor of the right to bring proceedings there.

Contact

Write to support@lucid.invalid — placeholder, a real support address has not been chosen yet. The privacy page sits beside this one.

Before these terms are published — for the lawyer reading them

Everything above this line describes the arrangement as the software actually implements it. Everything below is a decision nobody has made, and it is the whole of what is outstanding — printed here rather than left in a source file so that the review is an hour. This section comes out when these are answered, and while it is here these terms are not finished.

1. The limitation of liability, above, is written rather than left blank — because a hole where that clause goes is not the absence of risk, it is risk a court allocates. It is the ordinary shape: no indirect loss, a cap at fees paid in twelve months, carve-outs for death, personal injury and fraud, and consumer rights preserved. It needs a lawyer's eye on the cap in particular, which is not enforceable in the same form everywhere, and on whether the consumer carve-out is worded correctly for wherever the operator ends up.
2. The contracting party. Who, legally, the agreement is with. Marked in yellow above, twice. It is the same decision the privacy page calls the controller, and it is the one blank left in either page.
3. Governing law and forum. Written above as the law of the place the operator is established, which is the honest default once that blank is filled — but the consumer-protection sentence beside it is exactly the kind that has to be right for the jurisdiction rather than approximately right.
4. Consumer cancellation and cooling-off. Mandatory in several jurisdictions, and mandatory in particular for a subscription sold at a distance. The section above says such rights are preserved and does not attempt to describe them; somebody has to write the actual notice, including the withdrawal period and how to exercise it.
5. Refunds. No policy has been set. One is needed before a price is.
6. The billing terms against the code. The fourteen-day grace window, the two consequences of a lock and the promise that nothing is deleted for money are all read out of the billing code as it stands. They should be checked against it again on the day a processor is connected, because that is the day the words and the code can silently part.
7. The contact address. A real one, in place of the reserved placeholder.
8. Whether an age gate is required, which is a question about who this is sold to. There is none today.
9. What "keep your own copies" is worth as a term. The files a customer uploads are in object storage, which database backups do not cover, so Lucid holds the only copy of an uploaded passport scan. That is now said plainly above rather than left in an internal document, and the export does not close the gap because it carries records and not files. Whether disclosure plus a limitation of liability is a sufficient answer for a paid product that invites people to upload identity documents is a judgement about what is being sold, and it is the second thing on this list worth a lawyer's hour after the liability clause. The engineering answer, if the answer is that it is not, is a backup of the buckets rather than a clause.

The privacy page carries its own list, and the two are meant to be read in one sitting: before that page is published.