Privacy Policy

1. Who we are

Lucenta ("we", "us"), based in Osun State, Nigeria, is the data controller for the personal data described here. We process personal data in line with the Nigeria Data Protection Act 2023 and, where it applies to you, the EU/UK GDPR. Contact: adebayoquoreeb@gmail.com.

2. Information we collect

Account information

Your name, email address, date of birth and password when you sign up. Passwords are hashed by our authentication provider, so we never see them. If you choose Google sign-in, we receive your name, email and profile picture from Google, and ask for your date of birth separately. We use your date of birth only to confirm you meet the minimum age of 16; it's never shown publicly and can't be changed once saved.

Onboarding answers

After you sign up we ask for your occupation (for example student, teacher, writer or developer) and how you heard about Lucenta (for example Cursor, X, Instagram, Facebook, ChatGPT, Claude, an ad, or a source you describe yourself). Your occupation decides which tools are available to you. Your answers are never shown publicly, and you can update them in Settings (occupation at most once every 30 days).

Device and network records

Each person may have one Lucenta account and one set of free daily limits per device. To enforce this, when you sign up or log in we record a random device identifier stored in your browser, a device fingerprint (a summary of technical characteristics such as screen size, graphics hardware, timezone and how your browser draws text), and your IP address. We store all of them only as keyed one-way hashes, not in readable form, and use them solely to prevent duplicate accounts and abuse. If a new account's fingerprint matches an existing account, the two accounts share one set of daily limits. These records are kept after an account is deleted so the rules can't be bypassed by deleting and re-creating accounts. We also reject disposable email addresses and variations of an email that already has an account.

Profile information (optional)

Username, bio, company, job title, website, location and profile photo, if you add them.

Freelancer profiles (optional, public)

If you create a developer or writer profile, we store what you put on it: name, headline, photo, bio, location, experience, languages, rates, specialties, skills, services, portfolio images and captions, contact details (email, WhatsApp, phone) and social links. This profile is public while it's switched on, so anyone can see it and contact you. We check your saved date of birth to confirm you're 18 or older, but it's never shown. You can hide or delete the profile at any time, and deleting it also deletes the images you uploaded for it.

Content you submit

• Website audits: the URLs you scan and the reports we generate. These are saved to your history so you can view them again.
• Text for the AI Detector and Rewriter: the text you paste and the results (scores, writing suggestions or rewrites). These are saved to your history only if "Save history" is on in Settings. With it off, your text is processed and then discarded.
• Uploaded documents: when you upload a .docx, .pdf or .txt file, we read the text out of it in memory and never store the file itself. The extracted text is then treated exactly like pasted text, including the "Save history" setting above.

Usage records

To enforce the free daily limits we record how many audits and texts you've used each day. For texts we store a one-way fingerprint (a SHA-256 hash) rather than the text itself. It can't be turned back into your words.

Technical information

Like most websites, our hosting and database providers log basic technical data such as IP address, browser type and request times, used for security, abuse prevention and fixing errors.

Site statistics

We count page visits with our own first-party analytics to see how the site is used and how fast it loads. For each visit we record the page, the site you came from, your country, device type and browser, and loading-speed measurements. Visitors are counted with an anonymous ID that changes every day and can't be traced back to your IP address or account. No cookies are used for this and nothing is shared with third parties.

3. Cookies and local storage

We keep this minimal:

• Essential cookies keep you signed in securely and hold a random device identifier used to enforce one account per person. The Service can't work without them.
• Browser storage remembers your theme (dark/light), keeps a copy of the device identifier, and briefly holds text you send from the Detector to the Rewriter. It also remembers if you've closed an announcement banner.

We don't use advertising cookies, and we don't use third-party analytics or tracking pixels. Our own site statistics (above) don't use cookies.

4. How we use your information

• To provide the Service: run audits, detect and rewrite text, show your history and manage your account (performance of our contract with you).
• To tailor tool access: we use your occupation to decide which tools you can use. To support academic integrity, student accounts get the Rewriter's Suggestions mode but not its Rewrite mode, while the AI Detector and Website Analyzer are fully available. Student accounts also aren't shown suggestions to hire writers (performance of our contract with you).
• To suggest freelancers: we match website reports to developers by the issues found, and match text you check or improve to writers by the kind of content it looks like. This matching happens without sending your text to freelancers or storing it for this purpose (our legitimate interests).
• To understand how people find us: we look at how-you-heard answers in aggregate to decide where to share Lucenta. We don't pass them to the platforms you name (our legitimate interests).
• To keep Lucenta safe and fair: enforce daily limits, prevent abuse and misuse described in our Responsible Use Policy, and secure accounts (our legitimate interests).
• To communicate with you: service emails such as sign-up confirmation and password resets, and important changes to our terms. Optional emails only if you've turned them on in Settings (consent).
• To improve Lucenta: using aggregated, non-identifying statistics such as how many scans run each day.
• To meet legal obligations: for example responding to lawful requests from authorities.

5. How AI processing works

The AI Detector's scoring runs on our own servers. To give writing suggestions, rewrite text, check meaning, and review websites, we send the relevant text or page content to AI models through OpenRouter, which routes requests to model providers (currently models such as Meta Llama and Google Gemini). They process it only to return your result.

We don't use your content to train AI models, and we don't send your name or email with these requests. AI providers process data under their own terms and privacy policies. Please don't submit sensitive personal data (such as health, financial or identity details) in text you check or rewrite.

6. Who we share it with

We never sell your personal data and we don't share it for advertising. We share it only with providers who help us run Lucenta, under agreements that limit how they can use it:

• Supabase: database, authentication and file storage.
• OpenRouter and its AI model providers: to generate writing suggestions, rewrites, meaning checks and website reviews.
• Our hosting provider: to serve the website and run the Service.
• Google: only if you choose to sign in with Google.

We may also disclose information if required by law, to protect people's safety or rights, or as part of a merger or sale of the business (in which case this policy would continue to protect your data). When you contact a developer or writer via WhatsApp, phone or email, that conversation happens in those apps, and we don't see it.

7. International transfers

Some of our providers store or process data outside Nigeria, including in the United States and the European Union. When that happens we rely on appropriate safeguards recognised under the Nigeria Data Protection Act and GDPR, such as contractual protections offered by those providers.

8. How long we keep it

• Account and profile data: until you delete your account.
• History (scans, text checks): until you delete individual items, clear your history in Settings, or delete your account.
• Text with history off: not stored after processing. We keep only the usage fingerprint described above.
• Hashed device and network records: for as long as the Service runs, so the one-account rule keeps working. They can't be used to identify you on their own.
• Usage records and security logs: only as long as needed to enforce limits, prevent abuse and keep the Service secure.

9. How we protect it

All traffic is encrypted with HTTPS. Our database uses row-level security so each account can only access its own data, passwords are hashed, and access to production systems is restricted. No system is perfectly secure, but if a breach affecting your data ever happens, we'll notify you and the relevant authority as the law requires.

10. Your rights and choices

You can:

• Access and correct your information on your Profile page, and your occupation and how-you-heard answer in Settings. Your date of birth can't be edited; if it's wrong, email us.
• Turn off history or delete all history in Settings.
• Delete your account and associated data from Profile → Danger zone.
• Request a copy of your data, or ask us to restrict or stop certain processing, by emailing adebayoquoreeb@gmail.com.
• Withdraw consent for optional emails at any time in Settings.

We respond to requests within 30 days. If you're unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC) or your local data protection authority.

11. Children

Lucenta is not intended for children under 16. Sign-ups with a date of birth under 16 are rejected and we don't knowingly collect their personal data. If you believe a child has created an account, contact us and we'll delete it.

12. Links to other sites

Reports, freelancer profiles and our footer link to other websites and apps (such as the sites you audit, portfolios, WhatsApp, X, Facebook and Instagram). Their privacy practices are their own, so please review their policies.

13. Changes to this policy

We'll update this policy when our practices change, for example if we add analytics or paid plans. For significant changes we'll notify you by email or in the app, and the date at the top will always show the latest version.