App Store

Privacy Policy

Last updated: September 6, 2026

The Short Version

Lucid Notes is a note-taking app that stores your notes locally on your Mac. Your notes never leave your device unless you turn on iCloud sync, in which case they sync through your personal iCloud account — we still can't read them. We don't collect names, emails, locations, ad identifiers, or note content. Limited diagnostic and performance data goes through Sentry (you can turn this off in Lucid Notes 2.2.2 and later via Settings → General), and subscription entitlement data through RevenueCat — both detailed below. The lucidnotes.app website also has anonymous feature-request and feedback pages — see "Website Data" below. Your notes are yours.

What We Store

Your notes and app content stay on your device or in your own iCloud account:

  • Your notes — titles, content, formatting, tags, and folder structure are stored locally on your Mac. Pro subscribers can optionally sync to iCloud.
  • App-attached note metadata — for notes you attach to a specific Mac app, the note may include the app's bundle identifier (e.g., com.apple.dt.Xcode) and display name, plus any image or voice attachment you add. These are stored on your device and, for Pro subscribers with iCloud sync enabled, synced via your own iCloud account. We don't see them.
  • Your preferences — settings like font size, theme, and window options are stored locally on your Mac.

That's it. We don't have access to this app content.

What We Don't Collect

We do not collect, transmit, store, or have access to:

  • Your name or email address, unless you choose to provide them (for example in a feature request, feedback message, screenshot, or video)
  • Payment details (Apple handles all purchases)
  • Usage analytics beyond the crash and performance data described below
  • Location data
  • Advertising identifiers
  • Your IP address (network providers may see it in transit, but we do not retain or log it)
  • Content from inside other apps (when you attach a note to an app, we record only the app's bundle identifier and display name — see "App-attached note metadata" above)

Third-Party Services

Apple Services

  • App Store / StoreKit — processes purchases. Apple handles payments; we never see your payment info.
  • iCloud / CloudKit — syncs notes (Pro feature). Your data is in your private iCloud, encrypted by Apple.

For Apple's privacy practices, see apple.com/legal/privacy.

Crash Reporting and Performance Monitoring (Sentry)

We use Sentry to collect crash reports and monitor app performance in production builds only. This helps us find and fix bugs.

Crash and diagnostic reporting is on by default. In Lucid Notes 2.2.2 and later, you can turn it off at any time in Settings → General (at the bottom of the tab). Turning it off disables Sentry crash and diagnostic reporting; a report already queued may still be delivered. We cannot locate a specific person's past reports from a name or contact details alone.

Sentry collects:

  • Error messages, stack traces, and crash data
  • App version, device type, and macOS version
  • Release/session health data (app versions before 2.2.2 only; version 2.2.2 and later do not send this)
  • Startup and performance diagnostic tags when captured
  • Free-memory and time-since-launch ranges at the time of a report, as diagnostic context
  • A random installation identifier (not linked to your name, email, or any account)
  • Subscription tier, sync status, and note-count range (e.g., "1-10" or "11-50")

Sentry is configured with default personal information collection disabled. We do not intentionally send your notes, name, email, or location to Sentry.

Sentry is configured to use Sentry's EU ingestion endpoint.

See Sentry's Privacy Policy.

Feature Board (Supabase)

The App includes an in-app Feature Board where you can read community feature requests and vote on them. The Feature Board is powered by Supabase (hosted in the EU, Ireland).

Supabase receives, on each request from the App:

  • An anonymous read of the approved feature list (no user or device identifier sent)
  • When you vote: the selected feature request ID and a stateless vote or unvote request (no user ID or device ID)
  • Standard network metadata visible to any internet service (e.g., your IP address in transit). We do not log, retain, or correlate IPs ourselves.

Whether you have voted is tracked only on your Mac, in the app's local storage. It is never sent to Supabase or to us. Clearing the app's data lets you vote again — by design, we have intentionally weak per-user de-duplication in exchange for collecting zero user or device identifiers.

Supabase does not receive your notes, name, email, location, device identifier, or any other personal content through in-app browsing or voting.

See Supabase's Privacy Policy.

Subscription Management (RevenueCat)

We use RevenueCat to manage in-app subscriptions and verify purchase entitlements. RevenueCat acts as an intermediary between the App and the App Store.

RevenueCat receives:

  • Purchase and transaction data (product purchased, price, transaction ID, purchase and expiration dates)
  • Subscription status (active, expired, auto-renewal state)
  • An automatically generated app user ID
  • Device metadata (app version, OS version)
  • Cancellation reason — if you cancel and select a reason from the in-app picker (e.g., "too expensive," "missing a feature"), that selection is sent to RevenueCat as an attribute. We use it only to understand why people churn and prioritize improvements.

RevenueCat does not receive your name, email, notes, or any personal content.

See RevenueCat's Privacy Policy.

We do not use advertising or user tracking services.

Website Data (lucidnotes.app)

The lucidnotes.app website is a static marketing site with two interactive submission pages: /features, where visitors can submit feature requests, and /feedback, where visitors can send feedback with optional screenshots or short videos. Browsing and upvoting feature ideas happens inside the Lucid Notes macOS app.

What you submit

When you submit a feature request, we receive the title and description you type. No account, email, or name is required, and we ask you not to include personal information (yours or anyone else's) in the text. Submissions are reviewed before they appear in the app — we don't approve every submission.

When you submit feedback, we receive the message you type and any optional PNG, JPEG, WebP, MP4, MOV, or WebM attachments you include. Feedback submissions are private and are used to understand bugs, confusion, product gaps, and improvement opportunities. No account, email, or name is required. Please do not include private notes, names, emails, or other sensitive information in your feedback message, screenshots, or videos.

Sub-processors for the website

  • Supabase (Ireland, EU) — stores feature requests, private feedback submissions, and private feedback media uploads; same provider described under "Feature Board (Supabase)" above. Feature-request submissions are inserted from the website; reads and votes happen inside the Mac app. Approved feature requests are readable from the public Supabase API. Feedback submissions and feedback attachments are not publicly readable.
  • Netlify — hosts the website and serves it via CDN.

These providers may transiently see your IP address as part of normal network traffic. We do not log, retain, or correlate IPs ourselves.

Removing a submission

Since submissions are anonymous, we can't look yours up by account. To request removal of a submission, email support@lucidnotes.app with the submission text (or an excerpt), approximate date, and whether it was a feature request or feedback submission.

Your Control

Your available controls include:

  • Export your notes anytime in the app's available formats (JSON, Markdown, PDF, and more)
  • Delete individual notes or all notes within the app
  • Uninstall the app and delete your local data folder
  • Manage iCloud data through Apple's privacy settings
  • Turn Sentry crash and diagnostic reporting off (or back on) at any time in Lucid Notes 2.2.2 and later via Settings → General

Data Security

Your local data is protected by your device's built-in security features, including passcode, Touch ID, and disk encryption. iCloud data is encrypted by Apple both in transit and at rest. Third parties that receive app data provide protection at least equal to that described in this policy, under their published data-protection terms.

While we implement reasonable measures to protect your information, no method of electronic storage is 100% secure.

International Data Transfers

Data handled by our third-party providers — Sentry (EU endpoint), RevenueCat (USA), Supabase (Ireland), and Netlify (USA/global CDN) — may be processed outside your country of residence. These transfers are necessary for the provision of the App and website.

For limited technical data processed outside the EEA, United Kingdom, or Switzerland, we rely on the providers' published transfer safeguards — including the European Commission's Standard Contractual Clauses, UK transfer safeguards, adequacy decisions, and/or the EU-US Data Privacy Framework as applicable. These safeguards are made available in the providers' published data-protection terms: RevenueCat Data Processing Addendum and Netlify's Privacy Policy / GDPR/CCPA page.

These countries may have data protection laws different from those in your country of residence.

Legal Bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

  • Your notes (local + iCloud sync): contract performance — processing is necessary to provide the App you installed and paid for.
  • Sentry (crash and diagnostic data): legitimate interest in detecting and fixing bugs and improving app stability.
  • RevenueCat (purchase and subscription data, app user ID): contract performance — necessary to provide the paid Pro service and verify entitlements.
  • RevenueCat (cancellation reason): legitimate interest in understanding why people churn and prioritizing product improvements.
  • Supabase (feature submissions, feedback submissions, optional feedback media attachments, anonymous reads and aggregate votes):legitimate interest in collecting user feedback to guide the product roadmap and fix problems.
  • Netlify (website hosting, transient request handling):legitimate interest in operating the website.

You may object to any processing carried out on a legitimate-interest basis at any time using the contact below.

Data Retention

  • Your notes remain on your device and in your iCloud account until you delete them.
  • Crash and diagnostic data — Sentry's report-retention period is currently 90 days from receipt.
  • Purchase and subscription data is retained by RevenueCat for the duration of our service relationship with RevenueCat — see RevenueCat's Privacy Policy.
  • Feature requests and feedback submissions are retained on Supabase until we remove them — for example after a removal request (see "Removing a submission") or moderation.
  • Website request logs exist at Netlify, our hosting provider; we do not access or retain them. Netlify does not currently publish a fixed log-retention period; its retention criteria are described in Netlify's Privacy Policy.

Diagnostic reports may be stored on your Mac pending delivery; deleting the app's local data removes those local copies.

Children's Privacy

Lucid Notes is not directed at children under 13. We do not knowingly collect any personal information from children. If you believe a child has provided us with personal information, please contact us.

Your Privacy Rights

EU/EEA Residents (GDPR)

See "Legal Bases (GDPR / UK GDPR)" above for the lawful basis we rely on for each processing activity.

Where the GDPR or UK GDPR applies, you may have rights to access, rectification, erasure, restriction of processing, data portability, and objection, subject to the conditions and limits in those laws. You may also lodge a complaint with your local data protection authority.

Lucid Notes does not use accounts, and we do not receive your notes. You can manage note data directly in the App, on your Mac, and in your own iCloud account. For technical records held by third-party providers, we can act on your request only where you provide enough information to identify the relevant record, such as a Sentry event or installation ID, RevenueCat app user ID or transaction context, or the text, approximate date, and submission type for a feature request or feedback submission.

California Residents (CCPA/CPRA)

We do not sell your personal information. We do not use or disclose sensitive personal information for purposes other than providing the App. Where the CCPA/CPRA applies, you may exercise applicable rights to know, correct, delete, and opt out of sale or sharing, subject to statutory conditions and without unlawful discrimination.

To exercise any rights, contact us.

Changes to This Policy

We may update this Privacy Policy occasionally. We will update the "Last updated" date and provide any additional notice required by applicable law.

Contact

Data controller: Sardorbek Rakhimov. Questions about this policy? Contact via email