Privacy Policy

Effective September 12, 2026

Recover with Lucid (“Lucid,” “we,” “us”) provides software for recovery residence operators. This policy explains what information we collect, how we use it, and the choices you have. It covers our marketing site (recoverwithlucid.com) and the application (app.recoverwithlucid.com).

1. Who this covers

• Operators (house owners and staff) who create accounts and run their houses in Lucid.
• Residents who use the resident app when an operator invites them.
• Visitors to our marketing site and people who start a demo or contact us.

Operators decide what resident information to enter. Lucid processes that information to provide the service they subscribe to.

2. Information we collect

Account and business information. Name, email, password (stored hashed), organization name, house details, billing contact, and similar account data.

Resident and house operations data that operators enter or that residents submit in the app, such as profiles, beds, program fees and payments, chores, meetings, messages, curfew check-ins, acknowledgments, drug-test records, incident notes, and related operational records.

Payment information. Card and bank details are handled by Stripe. We store Stripe customer and subscription identifiers, and related billing status. We do not store full card numbers on Lucid servers.

Demo and contact leads. When you start a demo or contact us, we collect the name, email, and business name you provide.

Technical data. IP address, device/browser type, approximate location derived from IP, cookies or similar technologies needed to keep you signed in and keep the service secure, and basic usage logs.

3. How we use information

• Provide, secure, and improve the Lucid product
• Authenticate users and manage access by organization
• Process subscriptions and program-fee payments (via Stripe)
• Send service emails (password reset, demo notices, and similar)
• Respond to support requests
• Detect abuse, fix bugs, and maintain uptime
• Comply with law and enforce our Terms of Service

We do not sell personal information. We do not use resident operational data for advertising.

4. Sharing

We share information only as needed to run the service:

• Stripe for subscription billing and, when an operator connects it, resident program-fee collection
• Google Cloud (hosting, database, and related infrastructure) and, when enabled, AI features that help staff with product and house questions
• Email delivery through our Google Workspace account for transactional messages
• Optional connections an operator turns on (for example QuickBooks Online sync), which send only the data needed for that connection
• Professional advisers or authorities when required by law or to protect rights and safety

Each operator’s data is separated from other operators. Lucid staff may access accounts only as needed for support, security, billing, or legal compliance.

5. Sensitive and health-related information

Recovery residences may store information that is sensitive (including substance-use and housing details). Lucid is a house-operations tool, not a clinical EHR. Operators are responsible for how they collect and share resident data under applicable law (including any 42 CFR Part 2 or HIPAA obligations that apply to them). We apply access controls, encryption in transit, and organization isolation to protect data we host.

6. Retention

We keep account and operational data while the organization uses Lucid and for a reasonable period afterward for backups, billing disputes, and legal requirements. Operators may request deletion of their organization data by contacting us. Some records may remain in backups for a limited time until those backups rotate.

7. Security

We use industry-standard measures such as encrypted connections, hashed passwords, role-based permissions inside each organization, and database controls that separate customer data. No method of transmission or storage is 100% secure. Tell us promptly at [email protected] if you believe an account was compromised.

8. Your choices

• Update profile and organization settings in the app
• Request access, correction, or deletion by emailing us
• Opt out of non-essential marketing emails (service emails still send)
• Residents should ask their house operator for most data requests about their file

9. Children

Lucid is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. International visitors

We operate in the United States. If you access Lucid from elsewhere, your information may be processed in the United States.

11. Changes

We may update this policy. We will post the new version on this page and update the effective date. Material changes may also be noted in the product or by email to account owners.

12. Contact

Questions about privacy: [email protected]