Lūsis

Privacy Policy

Last updated: 2026-10-14

Lūsis ("we", "our", "the app") is a private location-sharing app operated by STODR LLC, a Washington State (USA) limited liability company ("STODR", "the operator"). This policy explains what data Lūsis collects, how it's used, who it's shared with, and the choices you have.

Plain-English summary

The short version, in plain language, is:

The rest of this document is the full legal version of the above.

Data we collect

Account data

When you sign up, we collect:

Location data

When you enable location sharing, Lūsis collects:

Usage data

Technical data

Activity and motion data

To save battery, Lūsis uses your phone's motion sensors to tell whether you're still, walking, cycling or driving. We don't store the sensor readings themselves. With each location point we store only the result: an activity label such as walking or driving and, on some phones, your step rate.

Crash and diagnostic reports

When the app crashes or hits an unexpected error, we collect a diagnostic report containing:

We do not deliberately include personal information in crash reports. Crash reports are handled by a crash-reporting service; see "Service providers" below.

In-app feedback

When you submit feedback through the in-app form, we store the text you typed, your user ID, and a timestamp. You can also choose to attach a screenshot. Screenshots get tighter handling than the text: any hidden information in the image, such as the place where a photo was taken, is removed before upload; the image is stored in a private area only the Lūsis team can access, and it is deleted within 7 days — or, if it's attached to a bug we are actively fixing, within 30 days at most. Before deleting a screenshot we may keep a short text note of the technical details it shows (an error message, a layout problem), written so it never includes members' names or locations.

We read feedback manually to triage bugs and improve the app. You can request deletion of any feedback you've submitted by emailing [email protected].

Diagnostic and product telemetry

Lūsis logs a small set of diagnostic events on its own servers to find problems and improve reliability and battery use. These are first-party events — none of them are sent to any third-party analytics service. They cover things like the app starting and stopping, whether location sharing is working, permission settings, and errors.

Each event is stored with your user ID, the event name, a timestamp, and a small set of technical fields (typically: device state, an error message, or a coarse-rounded location). We do not include the contents of check-in messages, the names of saved places, or your email in these events.

Beta waitlist signups (website)

If you request a beta invite through the form on lusis.app, we store the email address you enter, the platform you pick (iPhone or Android), your answer to the beta-diagnostics consent checkbox, and a timestamp. If the link that brought you to the form carried campaign tags, we store those too, so we can tell which of our links or ads worked — nothing else about your visit is recorded. If you later reply to our invite email, we may add your answers (for example, how you plan to use Lūsis) to the same record.

We use this information to run the closed beta and to keep you in the loop: deciding who to invite and when, setting you up on the right platform, and sharing occasional Lūsis news, like the public launch. We don't use it for anything else. It is never shared with or sold to anyone, and it is stored on our EU-hosted servers, separate from app accounts.

We keep your entry until you tell us to stop. You can unsubscribe or ask to be removed at any time by emailing [email protected] and we will delete it.

Permissions we request

How we use your data

We use the data above only to:

  1. Show your location to members of your shared circle you've explicitly invited and who have accepted the invitation.
  2. Deliver check-in messages from one circle member to another.
  3. Trigger geofence notifications when you arrive at or leave a saved place.
  4. Operate the app — authentication, data sync, crash diagnostics, and minimal server-side logs required for service operation. We use a third-party crash reporter to be told when the app fails, but we do not use any analytics SDK, advertising SDK, attribution SDK, or behavioral tracker.

We do not use your data for:

Legal basis (EEA, UK and Switzerland)

We process your data on these legal bases:

Where your data is stored

Account data, location history, check-ins, saved places, profile photos, push tokens, user-submitted feedback, and diagnostic event logs are stored by our hosting provider in data centers in the European Union. Data is encrypted at rest and in transit. Our hosting provider is our data processor: it processes data only on our instructions and does not use it for its own purposes.

Crash reports are stored separately by our crash-reporting service (see Service providers below).

Transfers outside the European Union

Your data is stored in the European Union. STODR LLC is a US company, and some of the services we use (for example, to deliver push notifications and app updates, and to host our website) may process data in the United States or other countries outside the EU. When data leaves the EU, it is protected by the safeguards the law provides: the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Service providers

Lūsis relies on a small set of third-party services to operate. Below we describe what each category of service receives.

We do not use any analytics, advertising, attribution, fingerprinting, or A/B-testing services.

Who can see your location

Your location is visible only to:

  1. Members of the shared circle you created or joined, and only while you have location sharing enabled.
  2. The operator, when investigating account-specific issues you've reported to us, and only with your explicit consent.

Your device may also receive a silent request to share a fresh location. This happens only while you are sharing your location with a circle, and nothing is shown on your screen.

Your location stream is never sent to:

Location history retention

Location points are retained while your account is active. You can delete your entire account and all associated data at any time using Settings → Delete account in the app (see "Account deletion" below).

Your rights

You have the right to:

To exercise any right that isn't already self-service in the app, email [email protected]. We respond within 30 days.

If you are in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

If you are a California resident, you have the additional right to know what personal information we collect and how we use it (covered above), the right to delete it, the right to correct it, and the right to opt out of sale. We do not sell personal information to any third party. There is nothing to opt out of, but if this ever changes we will provide a clear opt-out mechanism.

Account deletion

You can delete your account and all associated data directly in the app via Settings → Delete account. Live account data is deleted immediately; encrypted database backups may persist for up to 30 days before they are purged. If you can no longer sign in, email [email protected] with the subject line "Delete my Lūsis account" from the email address associated with your account, and we will complete the deletion within 7 days.

Upon deletion, we will remove:

Changes to this policy

We will post any changes to this page and update the "Last updated" date above. If the changes are material, we will notify active users in-app before the changes take effect.

Contact

Questions or requests: [email protected]

Operator: STODR LLC, Washington State, USA