App Store

Privacy Policy

Last updated: June 3, 2026

The Short Version

Lucid Notes is a note-taking app that stores your notes locally on your Mac. Your notes never leave your device unless you turn on iCloud sync, in which case they sync through your personal iCloud account — we still can't read them. We don't collect names, emails, locations, ad identifiers, or note content. Limited diagnostic and performance data goes through Sentry, and subscription entitlement data through RevenueCat — both detailed below. The lucidnotes.app website also has anonymous feature-request and feedback pages — see "Website Data" below. Your notes are yours.

What We Store

Your notes and app content stay on your device or in your own iCloud account:

  • Your notes — titles, content, formatting, tags, and folder structure are stored locally on your Mac. Pro subscribers can optionally sync to iCloud.
  • App-attached note metadata — for notes you attach to a specific Mac app, the note may include the app's bundle identifier (e.g., com.apple.dt.Xcode) and display name, plus any image or voice attachment you add. These are stored on your device and, for Pro subscribers with iCloud sync enabled, synced via your own iCloud account. We don't see them.
  • Your preferences — settings like font size, theme, and window options are stored locally on your Mac.

That's it. We don't have access to this app content.

What We Don't Collect

We do not collect, transmit, store, or have access to:

  • Your name, email, or personal information, unless you choose to include it in a feature request, feedback message, screenshot, or video despite our request not to
  • Payment details (Apple handles all purchases)
  • Usage analytics beyond the crash and performance data described below
  • Location data
  • Advertising identifiers
  • Your IP address (network providers may see it in transit, but we do not retain or log it)
  • Content from inside other apps (when you attach a note to an app, we record only the app's bundle identifier and display name — see "App-attached note metadata" above)

Third-Party Services

Apple Services

  • App Store / StoreKit — processes purchases. Apple handles payments; we never see your payment info.
  • iCloud / CloudKit — syncs notes (Pro feature). Your data is in your private iCloud, encrypted by Apple.

For Apple's privacy practices, see apple.com/legal/privacy.

Crash Reporting and Performance Monitoring (Sentry)

We use Sentry to collect crash reports and monitor app performance in production builds only. This helps us find and fix bugs.

Sentry collects:

  • Error messages, stack traces, and crash data
  • App version, device type, and macOS version
  • Release/session health data
  • Startup and performance diagnostic tags when captured
  • An anonymous installation ID (a random identifier not linked to you)
  • Subscription tier, sync status, and note-count range (e.g., "1-10" or "11-50")

Sentry is configured with default personal information collection disabled. We do not intentionally send your notes, name, email, or location to Sentry.

Sentry is configured to use Sentry's EU ingestion endpoint.

See Sentry's Privacy Policy.

Feature Board (Supabase)

The App includes an in-app Feature Board where you can read community feature requests and vote on them. The Feature Board is powered by Supabase (hosted in the EU, Ireland).

Supabase receives, on each request from the App:

  • An anonymous read of the approved feature list (no user or device identifier sent)
  • When you vote: the selected feature request ID and a stateless vote or unvote request (no user ID or device ID)
  • Standard network metadata visible to any internet service (e.g., your IP address in transit). We do not log, retain, or correlate IPs ourselves.

Whether you have voted is tracked only on your Mac, in the app's local storage. It is never sent to Supabase or to us. Clearing the app's data lets you vote again — by design, we have intentionally weak per-user de-duplication in exchange for collecting zero user or device identifiers.

Supabase does not receive your notes, name, email, location, device identifier, or any other personal content through in-app browsing or voting.

See Supabase's Privacy Policy.

Subscription Management (RevenueCat)

We use RevenueCat to manage in-app subscriptions and verify purchase entitlements. RevenueCat acts as an intermediary between the App and the App Store.

RevenueCat receives:

  • Purchase and transaction data (product purchased, price, transaction ID, purchase and expiration dates)
  • Subscription status (active, expired, auto-renewal state)
  • An anonymous app user ID (generated automatically, not linked to your identity)
  • Device metadata (app version, OS version)
  • Cancellation reason — if you cancel and select a reason from the in-app picker (e.g., "too expensive," "missing a feature"), that selection is sent to RevenueCat as an anonymous attribute. We use it only to understand why people churn and prioritize improvements.

RevenueCat does not receive your name, email, notes, or any personal content.

See RevenueCat's Privacy Policy.

We do not use advertising or user tracking services.

Website Data (lucidnotes.app)

The lucidnotes.app website is a static marketing site with two interactive submission pages: /features, where visitors can submit feature requests, and /feedback, where visitors can send feedback with optional screenshots or short videos. Browsing and upvoting feature ideas happens inside the Lucid Notes macOS app.

What you submit

When you submit a feature request, we receive the title and description you type. No account, email, or name is required, and we ask you not to include personal information (yours or anyone else's) in the text. Submissions are reviewed before they appear in the app — we don't approve every submission.

When you submit feedback, we receive the message you type and any optional PNG, JPEG, WebP, MP4, MOV, or WebM attachments you include. Feedback submissions are private and are used to understand bugs, confusion, product gaps, and improvement opportunities. No account, email, or name is required. Please do not include private notes, names, emails, or other sensitive information in your feedback message, screenshots, or videos.

Sub-processors for the website

  • Supabase (Ireland, EU) — stores feature requests, private feedback submissions, and private feedback media uploads; same provider described under "Feature Board (Supabase)" above. Feature-request submissions are inserted from the website; reads and votes happen inside the Mac app. Approved feature requests are readable from the public Supabase API. Feedback submissions and feedback attachments are not publicly readable.
  • Netlify — hosts the website and serves it via CDN.

These providers may transiently see your IP address as part of normal network traffic. We do not log, retain, or correlate IPs ourselves.

Removing a submission

Since submissions are anonymous, we can't look yours up by account. To have a submission removed, email support@lucidnotes.app with the submission text (or an excerpt), approximate date, and whether it was a feature request or feedback submission, and we'll remove it where we can identify it.

Your Control

You have full control over your data:

  • Export all your notes anytime in multiple formats (JSON, Markdown, PDF, and more)
  • Delete individual notes or all notes within the app
  • Uninstall the app and delete your local data folder
  • Manage iCloud data through Apple's privacy settings

Data Security

Your local data is protected by your device's built-in security features, including passcode, Touch ID, and disk encryption. iCloud data is encrypted by Apple both in transit and at rest. Third-party service providers maintain their own security measures as described in their respective privacy policies.

While we implement reasonable measures to protect your information, no method of electronic storage is 100% secure.

International Data Transfers

Data handled by our third-party providers — Sentry (EU endpoint), RevenueCat (USA), Supabase (Ireland), and Netlify (USA/global CDN) — may be processed outside your country of residence. These transfers are necessary for the provision of the App and website.

For limited technical data processed outside the EEA, United Kingdom, or Switzerland, we rely on the providers' published transfer safeguards — including the European Commission's Standard Contractual Clauses, UK transfer safeguards, adequacy decisions, and/or the EU-US Data Privacy Framework as applicable. These safeguards are made available in the providers' published data-protection terms: RevenueCat Data Processing Addendum and Netlify's Privacy Policy / GDPR/CCPA page.

These countries may have data protection laws different from those in your country of residence.

Legal Bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

  • Your notes (local + iCloud sync): contract performance — processing is necessary to provide the App you installed and paid for.
  • Sentry (crash and diagnostic data): legitimate interest in detecting and fixing bugs and improving app stability.
  • RevenueCat (purchase and subscription data, anonymous app user ID): contract performance — necessary to provide the paid Pro service and verify entitlements.
  • RevenueCat (cancellation reason): legitimate interest in understanding why people churn and prioritizing product improvements.
  • Supabase (feature submissions, feedback submissions, optional feedback media attachments, anonymous reads and aggregate votes):legitimate interest in collecting user feedback to guide the product roadmap and fix problems.
  • Netlify (website hosting, transient request handling):legitimate interest in operating the website.

You may object to any processing carried out on a legitimate-interest basis at any time using the contact below.

Data Retention

  • Your notes remain on your device and in your iCloud account until you delete them.
  • Crash and diagnostic data is retained by Sentry per Sentry's retention policy.
  • Purchase and subscription data is retained by RevenueCat per RevenueCat's retention policy.
  • Feature requests and feedback submissions are retained on Supabase until removed by you or by us.
  • Website request logs are handled by Netlify per its standard CDN log retention.

We do not independently retain your personal data outside these providers.

Children's Privacy

Lucid Notes is not directed at children under 13. We do not knowingly collect any personal information from children. If you believe a child has provided us with personal information, please contact us.

Your Privacy Rights

EU/EEA Residents (GDPR)

See "Legal Bases (GDPR / UK GDPR)" above for the lawful basis we rely on for each processing activity.

Where the GDPR or UK GDPR applies, you may have rights to access, rectification, erasure, restriction of processing, data portability, and objection, subject to the conditions and limits in those laws. You may also lodge a complaint with your local data protection authority.

Lucid Notes does not use accounts, and we do not receive your notes. You can manage note data directly in the App, on your Mac, and in your own iCloud account. For technical records held by third-party providers, we can act on your request only where you provide enough information to identify the relevant record, such as a Sentry event or anonymous installation ID, RevenueCat app user ID or transaction context, or the text, approximate date, and submission type for a feature request or feedback submission.

California Residents (CCPA/CPRA)

We do not sell your personal information. We do not use or disclose sensitive personal information for purposes other than providing the App. Under the CCPA, you have the right to know, delete, opt out of sales (not applicable), and non-discrimination.

To exercise any rights, contact us.

Changes to This Policy

We may update this Privacy Policy occasionally. We will update the "Last updated" date, and where appropriate, provide notice in the App or App Store update notes.

Contact

Questions about this policy? Contact via email