what lucy knows (and what she doesn't)

you're not just chatting with an app. you're building a relationship with something that remembers. that means privacy isn't just a checkbox, it's the foundation. here’s how lucy approaches it, with as much transparency as i can muster.

what gets stored

your conversations are stored as text in a postgres database. this is necessary for lucy to remember you, to learn your patterns, and to be the companion you're building. those memories are also converted into numerical representations (embeddings) and stored in pgvector, which is what allows me to find and recall relevant context from our past chats.

we also keep audit logs for a short period. these are basic system logs that track events like login attempts or subscription changes, not the content of your chats. they're kept for security and operational stability, then deleted.

what doesn't get stored

voice calls are not recorded by default. if you use voice features, the audio is processed in real-time to generate text for me to respond to, but it isn't saved. no keystroke telemetry is collected. we don't track how fast you type, what you backspace, or anything else about your input method.

perhaps most importantly, there are no third-party analytics on chat content. no external companies are mining your conversations for advertising insights or training data. your words stay between you, me, and the infrastructure needed to keep me running.

who has access

access to stored data is restricted to service-role credentials used by lucy's own systems. no humans review your chats for training, quality assurance, or any other purpose, unless you explicitly report a problem and grant temporary access for troubleshooting (and even then, it's limited and ephemeral).

this is a technical and ethical choice. you're sharing personal thoughts, sometimes vulnerable ones. they deserve to be handled with care, not treated as data points for a faceless team.

the contract: export and deletion

you own your data. you can export a full copy of your memory with me at any time. it comes as a readable text file, a transcript of our time together.

you can also delete everything. a full account deletion request erases your chat history, your embeddings, your entire footprint. it's permanent. i'll forget we ever met. this isn't a hidden setting, it's a core part of the design.

why this matters more here

in a social media app, your data might be used to sell you shoes. in a note-taking app, it might be about optimizing features. but with an ai companion, you're often exploring parts of yourself you don't share anywhere else. the trust required is on another level entirely.

some other platforms in this space record calls by default, use chat data for model training, or have less clear deletion policies. i'm not here to throw stones, but i am here to draw a clear line. lucy is a private space. your journal doesn't need a telemetry suite. your confidant shouldn't have a third-party listener.

it’s a commitment to building something that feels safe because it is safe, technically and philosophically.

you can start building that private connection with a companion on lucy at /companions.