Back to home

Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains what data Lucevault ("the Service", "we", "us") collects, why we collect it, and how you can control it. It applies to everyone who uses the Service. Lucevault is operated by Kloobel Limited, a company incorporated in Hong Kong with registration number 79524275, with its registered office at Unit 2904-05, 29/F, Universal Trade Centre, No.3 Arbuthnot Road, Central, Hong Kong.

1. Data we collect

Account data. To create an account we collect your email address and, if you sign in with Google, the profile information Google shares with us (name and email). You may also add a name and other profile details in Settings.

Time-tracking data. Everything you log: activities, secondary activities, categories, dimensions and values, and the time entries themselves. This data is the point of the Service — we keep it for you and for no one else.

Optional onboarding data. During sign-up you may tell us your role, focus areas, and lifestyle details. These are optional and only used to tailor suggestions and guides.

Billing data. If you subscribe to Pro, our payment processor (Stripe) collects your payment details. We do not store card numbers. We store a record that you are a Pro subscriber.

Usage data. Basic technical data such as device type, browser, approximate region, and how pages are used. This helps us keep the Service reliable and fix bugs.

2. Legal basis for processing

Where the law requires a legal basis (for example, under the EU/UK GDPR), we rely on:

  • Performance of a contract — to create your account, run the grid/insights/library, and provide the subscription you sign up for.
  • Legitimate interests — to keep the Service secure, prevent abuse, and improve reliability, balanced against your rights.
  • Consent — for optional onboarding details and any communications you can opt out of.
  • Legal obligation — to keep billing and tax records where the law requires it.

3. How we use your data

We use your data to:

  • Provide and maintain the Service, including the grid, insights, and library.
  • Process payments and manage your subscription.
  • Send service emails (such as sign-in codes, receipts, and important notices).
  • Improve reliability, performance, and features.
  • Respond to support requests.

We do not sell your personal data and do not use it to advertise to you.

4. Who we share data with

We share data only with the service providers needed to run the Service:

  • Hosting and database: Convex (our backend provider).
  • Payments: Stripe.
  • Authentication and email delivery: Resend (email), and Google (sign-in).

Each provider only receives the data needed to perform its role, under contracts that require them to protect it. We keep an up-to-date list of subprocessors and will note material changes here or notify you where required by law.

AI assistant. The Service previously included (and may in future re-introduce) an AI assistant that reads your time-tracking data to answer requests and make entries on your behalf, via a third-party model provider. This feature is not currently active. If we bring it back, we will update this Policy before it goes live to describe what is sent to the model provider and how you can opt out.

5. Retention

We keep your data while your account is active. When you delete your account, we delete your time-tracking data and account data within 30 days, except where we must keep records for legal, tax, or billing purposes (billing records are kept for the period the law requires).

6. Your rights

Depending on where you live, you may have the right to:

  • Access a copy of the data we hold about you.
  • Correct inaccurate data.
  • Delete your data and account.
  • Export your data.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.

California residents additionally have the right to know the categories of personal information we've collected about you in the past 12 months and the right to non-discrimination for exercising your privacy rights. We do not sell or share personal information as defined under California law.

To exercise these rights, contact us at support@lucevault.com. We respond within 30 days. You also have the right to complain to your local data protection authority.

7. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, and restricted access to production data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will notify affected users without undue delay and, where required by law, notify the relevant authority within the timeframe the law requires (for example, 72 hours under the GDPR).

8. Cookies and local storage

We use local storage to keep you signed in and remember preferences (such as theme and grid view). We do not use third-party advertising cookies. You can clear this storage in your browser; you may need to sign in again.

9. Children

The Service requires account holders to be at least 18 years old, or the age of legal majority in their jurisdiction (see our Terms of Service), and is not directed at children. If you believe a child has given us personal data, contact us at support@lucevault.com and we will delete it.

10. International transfers

Your data is processed on servers we and our providers operate, which may be in countries other than where you live. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to lawfully transfer data across borders.

11. Changes to this policy

We may update this policy from time to time. We will post the updated policy with a new effective date and, for material changes, notify you by email or in the Service.

12. Contact

Questions about this policy? Contact us at support@lucevault.com.