Privacy Policy

LiDA processes your account email and authentication information, profile and preferences, tasks and schedules, habits and completion history, canvas notes, memories and memory links, summaries and personal context, and subscription tracking entries you add to your workspace. Content may include personal or sensitive information if you choose to enter it.

AI features process your messages, relevant conversation history and workspace context, generated responses, and actions or summaries used to help with your request. Voice features process microphone audio, transcribed text and spoken responses while you use them. Avoid entering information you do not want an AI provider to receive.

We use this information to authenticate you, save and synchronize your workspace, personalize responses, carry out requested actions, manage plan access and usage limits, diagnose failures, and protect the service from misuse. Billing status and customer, transaction and subscription references connect purchases to the correct account.

Operational logs may include request and session references, provider responses or errors, usage counts and diagnostic information. Do not assume that AI content or diagnostic records are never logged.

LiDA uses authentication cookies and browser storage for sign-in, preferences, selected voice settings, usage state and session markers. Workspace data is also held in the browser during use and synchronized with Supabase when signed in. Some conversations and session state remain in browser memory rather than being saved as a cloud chat archive.

Signing out clears account workspace state in the current browser. Account deletion cannot remotely erase exports, copies you created, another device's stored data, or information already sent to a provider. Clear site data on shared devices.

• Supabase provides authentication and cloud storage for account and product data.
• Paddle is Merchant of Record for checkout and subscription billing. LiDA stores billing references and status; payment details are collected through Paddle checkout.
• Google Gemini processes text requests and live voice requests. OpenRouter routes text requests to the model providers used for a feature, which may include Google, OpenAI, Anthropic, DeepSeek, Inception and other configured providers. Relevant prompts, history and context are shared with the providers serving the request.
• Hosting infrastructure processes network requests and operational logs. Vercel Web Analytics and Speed Insights are included for usage and performance measurement.

Provider processing, retention and use for service improvement depend on the provider's terms and the configuration used. Some AI routes permit providers that collect request data. LiDA does not offer a blanket zero-retention or no-training guarantee. Information can be processed in countries other than yours; provider terms describe their own practices.

An owner-approved retention schedule for product data, logs, backups and billing records has not yet been published. No fixed retention period is promised in this draft.

Use Account settings to delete your account. Deletion removes the authentication identity and its account-owned product records, including profile, tasks, habits, notes, memories, context, settings and usage records.

Open subscriptions and pending checkouts must be resolved first. A scheduled cancellation is not a completed cancellation. Billing records, webhook receipts and payment reconciliation history are retained separately; account links and the customer email in LiDA's billing mirror are removed. A minimal deletion marker prevents delayed billing events from reconnecting a deleted account. Deletion does not erase Paddle's own records or independently retained provider logs and backups.

You can review and change your workspace content, stop using AI or voice features, manage billing, sign out, or delete your account. Depending on applicable law, you may have rights to access, correct, obtain a copy of, restrict or object to processing, or request deletion of personal information, and to raise concerns with a relevant authority. Use the contact details above for requests once the owner has supplied them; identity verification may be needed.

Security controls reduce risk but cannot guarantee that every transmission or storage system is free of risk. Policy changes will appear here with an updated effective date; additional notice or consent will be provided where applicable law requires it.