Trust & Security

Your life is personal.
Your data should be too.

Lucie connects your life to understand what matters, with privacy, security and control encoded into its architecture.

  • Health
  • Calendar
  • Reflections
  • Screen Time
  • Sleep
  • Relationships
Scroll

Built around you.
Not around your data.

Your data is never the product.

Lucie is built to serve you, not advertisers. We do not build an advertising business around your personal life.

You stay in control.

You choose what you connect to Lucie and can manage or disconnect those connections as your life changes.

Silence is the default.

Lucie does not compete for your attention. It speaks when there is something genuinely worth your attention.

Built in Europe

European technology.
Built around human life.

Lucie is being built in Europe around a simple belief: the most personal technology in your life should also be among the most private.

We believe intelligence should strengthen human agency, not extract attention from it. Privacy, safety and data sovereignty should be foundations of the system, not features added later.

Built in Europe

Created by a European team with a human centred philosophy.

European infrastructure

Lucie’s European infrastructure is designed around strong privacy, security, data residency and sovereignty principles.

Sovereign by design

Privacy, security and data sovereignty are considered at the architectural level, not added as an afterthought.

European cloud infrastructure

Lucie runs on European cloud infrastructure from a leading provider. Where applicable, our infrastructure strategy is designed to support strong data residency and sovereignty requirements.

Infrastructure certifications and attestations apply to eligible services of our provider within their respective certification scope.

Protection at every layer.

Encrypted

Your personal data is protected with industry standard encryption in transit and encrypted at rest. It cannot be read by the Lucie team, including for support purposes.

Controlled access

Access to production systems and personal information is technically restricted and controlled through technical and organisational controls.

You control connections

You decide which services and which information you connect to Lucie. Each connection has its own scoped permissions and can be disconnected at any time.

European infrastructure

Lucie uses European cloud infrastructure designed around rigorous security, privacy and compliance controls.

Connections you control

  • Apple Health
  • WHOOP
  • Oura
  • Garmin
  • Fitbit
  • Suunto
  • Polar
  • Screen Time
  • Apple Calendar
  • Google Calendar
  • Gmail
  • Outlook
Responsible intelligence

The right intelligence for the right moment.

Lucie is designed to use the right level of intelligence for each task, avoiding unnecessary compute while reducing the energy, water and infrastructure resources required to run AI. We believe responsible intelligence means using only what is needed, when it is needed.

  • “What time is my first meeting tomorrow?”Efficient modelA simple lookup
  • “Remind me to call Mum tonight.”Efficient modelA small task
  • “Why has my sleep changed this month?”Capable modelContext across body, calendar and reflections

Trust should be verifiable.

Lucie is built on cloud infrastructure certified and independently assessed against leading security and privacy standards.

Hover or tap a standard to see what it covers.

Intelligence without extraction.
Personalisation without surveillance.
Technology without surrendering control.

This is the European technology we believe in.

Andy Loy, CEO and Co-Founder of RHISE AI Technologies

Andy LoyCEO & Co-FounderRHISE AI Technologies

Why we built Lucie this way

“We deeply believe Europe can build a different kind of technology. Technology that is extraordinarily intelligent, but remains deeply human.

For Lucie, privacy, safety and data sovereignty aren’t compliance boxes. They’re part of the architecture and part of our responsibility.

If we’re asking people to trust Lucie with some of the most personal parts of their lives, then we have to build technology worthy of that trust.

We believe Europe can lead the next generation of human centred technology, and Lucie is our contribution to that future.”

Your intelligence should
move closer to you.

Today, Lucie relies on European cloud infrastructure. As devices become more capable, we envision more of Lucie running directly on your devices, with more of your personal data never needing to leave them.

A few things you might be wondering.

Why should I trust Lucie with my data?

Because the architecture, the incentives and the experience behind Lucie all point the same way. Your personal data is encrypted at rest and cannot be read by the Lucie team, including for support purposes. Access to production systems is restricted through technical and organisational controls. There is no advertising business model, so nothing is gained from your attention or your data. And the founders of RHISE AI have spent decades building data and AI systems for critical government infrastructure around the world. We use Lucie every day ourselves.

Is my personal data private, and can the Lucie team read it?

Your personal data is encrypted at rest and cannot be read by the Lucie team, including for support purposes. Access to production systems is restricted through technical and organisational controls, and you decide what you connect in the first place.

Does Lucie sell my data or show me ads?

No. Lucie has no advertising business model and no feed designed to keep you scrolling. Your data is used to serve you, not to sell to you, advertise to you or turn your attention into a product.

What can I connect, and can I disconnect it later?

You choose what you connect: wearables such as Apple Health, WHOOP, Oura, Garmin and Fitbit, your calendars, your mail and Screen Time. Each connection has its own scoped permissions, and you can disconnect any of them at any time.

Can I delete my data?

Yes. You can disconnect any connection at any time and request the deletion of your account and personal data, as described in our Privacy Policy.

Where is my data hosted?

Lucie runs on European cloud infrastructure from a leading provider. Where applicable, our infrastructure strategy is designed to support strong data residency and sovereignty requirements. Infrastructure certifications and attestations apply to eligible services of our provider within their scope, not to Lucie itself.

Which AI models does Lucie use?

Lucie routes each request to the model the task actually requires: smaller, more efficient models for simple requests, and more capable systems only when genuinely necessary. Any processing by model providers is governed by our Privacy Policy.

Does Lucie run on my device?

Not entirely, yet. Today Lucie relies on European cloud infrastructure with encryption, controlled access and sovereignty principles. As devices become capable of running increasingly capable intelligence locally, we are building toward more of Lucie running directly on your devices, with more of your personal data never needing to leave them.

For security & compliance teams

Infrastructure

Lucie runs on European cloud infrastructure from a leading provider. Where applicable, our infrastructure strategy is designed to keep applicable European user data within European infrastructure. Provider and region details are not published.

Encryption

Industry standard encryption in transit and at rest where applicable. Personal data is encrypted at rest and cannot be read by the Lucie team, including for support purposes.

Access

Access to production systems and personal data is restricted through technical and organisational controls.

Authentication and connected services

Established authentication and authorisation technologies protect account access. Connected services such as Google Calendar and Gmail are authorised through OAuth 2.0 with permissions scoped to what the experience requires, and each connection can be removed by the user.

Intelligence

Requests are routed to models according to what the task requires: smaller, more efficient models for simple requests, more capable systems only when genuinely necessary. Lucie is being built toward increasingly local, on device processing as technology makes it possible.

Infrastructure certifications and attestations

ISO/IEC 27001, 27017, 27018 and 27701, SOC 2 and BSI C5 are held by our infrastructure provider for in-scope services and regions. They are not certifications issued to Lucie or RHISE AI.

Data processing and subprocessors

How personal data is processed is described in our Privacy Policy. For questions about data processing agreements, subprocessors or security practices, contact us through the details in our Impressum.

Your life.
Protected by design.