Privacy Policy

Who is responsible

Lucid Dungeon is run by an individual based in India, who decides how the information described here is used. For anything about your data, use Report an issue in Settings.

What we collect

Your account

• Your name, email address, and whether that address has been verified. If you sign in with Google, Google gives us your name, email address and profile picture. We do not keep the sign-in tokens Google issues, because we ask Google nothing after you have signed in.
• For each signed-in session: when it started and expires, and the IP address and browser details it was created from.
• If you sign in by email, a one-way hash of the one-time code we sent — not the code itself — until it is used or expires.
• Short-lived counts that limit how often sign-in codes can be asked for: how many requests have come from each IP address in the last minute, and how many codes each email address has been sent this hour — kept as a one-way hash of the address, not the address itself.
• If you delete an account after using some of the Free plan’s messages: how many you used, under a one-way hash of your email address, so that signing up again with the same address does not start the free allowance over. It holds no other detail, and it is removed when an account with that address is made again, which then carries on from that count.
• If you connect Telegram: your Telegram user ID and username, which of your chats the bot is talking in, and when you connected. While a link is waiting to be used, a one-way hash of its code. For a day, the numbers Telegram gives each message it delivers, so that no message is answered twice.

What you create

• Characters — their names, descriptions, instructions, greetings and settings — and the pictures you upload or link to.
• Your conversations: every message, and for each reply the model that wrote it, how many tokens it used, how long it took and what it cost the app.
• Shared chats you start or are added to: who is in each one, the characters each person brought, every message, who wrote it, and which replies each person asked for.
• Collections and the cover pictures you upload for them, share links, and the email addresses you share things with or send friend requests to.
• Reports you send us, with technical details attached automatically: the app version, the page you were on, your browser, screen size, language and time zone.
• When you report a collection in the library: which collection, the character you reported it from, the reason you picked and anything you added.
• How many messages you have used from your plan’s allowance, and how many replies you have had read aloud, each counted per day while you have Pro.

Payments

Pro is paid by UPI from your own UPI app, so we never see your bank or card details. When you tell us you have paid, we keep: the verified email address the payment note named, how many months you bought and the amount, the UPI transaction ID you entered, whether we approved it, and the dates your Pro starts and ends. Our bank statement shows us what any UPI payment shows its payee: the amount, the note, and the sender’s name and UPI details.

If you delete your account, we keep a one-way hash of each transaction ID you entered, and nothing else, so that the same payment cannot be claimed for Pro a second time.

On your device

A cookie keeps you signed in, and another remembers whether the sidebar is collapsed. If you sign in to more than one account in the same browser, each one has a cookie of its own so that you can switch between them. Your typeface and colour theme are kept in your browser’s local storage, and the app stores an offline page so it can tell you when you have no connection. We use no analytics, advertising or tracking cookies.

How we use it

• To run the app: sign you in, store your work, and show it back to you.
• To generate replies and read them aloud, when you ask.
• To send the emails you cause: sign-in codes, the notifications that tell someone you shared something with them or sent them a friend request, and the ones about a Pro payment — to tell you whether it was approved or rejected, and to tell us that it is waiting to be checked. If we take a collection of yours out of the library, we email you to say so.
• To keep the app safe: limiting how fast messages can be sent, enforcing the Terms of Service, and looking into reports.
• To answer the reports and questions you send us.

We do not sell your information, use it for advertising, or use your conversations to train AI models.

Who else receives it

We use a small number of services to run the app. Each receives only what its job needs:

• OpenRouter and the AI provider it routes each request to receive the conversation, the characters’ instructions, and the text to be read aloud, in order to write a reply or produce speech. We do not send your account’s name or email address — only what is in the conversation and the characters’ settings, including what a character calls you, if you have set it. How long a provider keeps a request depends on that provider’s own policy.
• Vercel hosts the app.
• Supabase hosts the database everything above is kept in, and stores uploaded pictures. While a shared chat is open, your browser also keeps a connection to Supabase so it hears at once that something in the chat changed. That signal carries no messages, names or other content; your browser then asks us for what changed. Like any web request, the connection carries your IP address and browser details.
• Resend sends our emails, so it receives each recipient’s address and the email’s contents.
• Google, if you choose to sign in with it.
• Telegram, if you connect it. What you send the bot and the characters’ replies pass through Telegram and are kept in your Telegram chat under Telegram’s own policy. Chats with a bot are not end-to-end encrypted. We do not send Telegram your email address.
• Sentry receives a report when something fails on our side: which part of the app failed, where in our code, and technical codes such as which database rule was broken. We remove the error’s own message before it is sent, because it could quote what you wrote, and no name, email address or IP address goes with it. Separately, if a page tries to load something our security policy does not expect, your browser may send Sentry a short report naming the page’s address and what was blocked; like any web request, it carries your IP address and browser details.
• Your bank and ours, and the UPI apps involved, which process a Pro payment as they would any UPI transfer.

Other people see only what you choose to show them:

• People you share a character or collection with can see it, and the name you use in the app.
• A published collection can be seen by anyone signed in to the library, with your name on it unless you publish anonymously.
• If you report a collection, its author is not told who reported it.
• Someone you send a friend request to is emailed your name and email address. Friends, and people with a request waiting, can see each other’s names and email addresses.
• Everyone in a shared chat sees the name you use in the app, every message in it, and the names, pictures and descriptions of the characters you bring, and their replies. They do not see your email address or your characters’ instructions.

We will also disclose information when Indian law requires it, or when it is needed to protect someone from serious harm.

Where it is kept

The app and its database run in Mumbai, India, so for people outside India your information is stored and processed outside the country they are in. Uploaded pictures are stored with Supabase in Mumbai and delivered from its network around the world, AI providers may process a request in other countries again, and Sentry keeps error reports outside India.

How long we keep it, and deleting it

We keep your information for as long as you have an account. You can delete individual characters, chats and collections whenever you like, and you can delete your whole account from Settings. Deleting your account removes, straight away:

• your characters, their pictures, and your conversations;
• your collections and their covers, share links, and who you shared them with;
• your friendships and friend requests;
• the shared chats you started, for everybody in them, and your own messages and characters in other people’s shared chats;
• the reports you sent, including reports about collections;
• your Telegram connection;
• your Pro, the payments you told us about, and your message counts, except as below;
• your account itself, which signs you out everywhere.

Some things are outside what deleting an account can reach:

• Copies other people made by starting a chat with something you shared or published belong to them, and stay.
• In other people’s shared chats, the characters’ replies to things you asked stay, because everyone there was part of that conversation. Nothing in them is linked to you any more.
• Emails that have already been sent cannot be recalled.
• Messages already in your Telegram chat with the bot stay in Telegram until you delete them there.
• Our database provider keeps short-term backups, which age out on their own.
• Error reports in Sentry are not linked to your account, so deleting it cannot find them; they expire on Sentry’s own schedule.
• The payment itself stays on our bank statement, and on yours, as banks are required to keep it.
• How many of the Free plan’s messages you used stays, under a one-way hash of your email address and nothing else, so that signing up again does not reset the free allowance (see above).
• The UPI transaction IDs of the payments you told us about stay, as a one-way hash of each and nothing else, so that a payment cannot buy Pro twice (see above).

Your rights

You can see and correct almost everything we hold about you in the app itself, export any conversation as JSON, Excel or PDF, and delete your account at any time. You can also ask us for a summary of what we hold, to correct or delete it, or to withdraw your consent to our using it — withdrawing consent means closing your account, because the app cannot run without it. To do any of these, use Report an issue in Settings.

If you are unhappy with our answer, you can complain to the Data Protection Board of India, or to the data protection authority where you live.

Children

Lucid Dungeon is not for anyone under 18. We do not knowingly keep information about children, and we delete an account when we learn it belongs to one.

Security

Everything travels over encrypted connections, we never handle bank or card details, and there are no passwords to leak. No system is perfectly secure; if a breach affected your information, we would tell you and the authorities as the law requires.

Changes to this policy

When this policy changes, the date at the top changes with it. When a change affects how your information is used, we will tell you in the app or by email before it takes effect.