Your data is never the product.
Lucie is built to serve you, not advertisers. We do not build an advertising business around your personal life.
Trust & Security
Lucie connects your life to understand what matters, with privacy, security and control encoded into its architecture.
Lucie is built to serve you, not advertisers. We do not build an advertising business around your personal life.
You choose what you connect to Lucie and can manage or disconnect those connections as your life changes.
Lucie does not compete for your attention. It speaks when there is something genuinely worth your attention.
Lucie is being built in Europe around a simple belief: the most personal technology in your life should also be among the most private.
We believe intelligence should strengthen human agency, not extract attention from it. Privacy, safety and data sovereignty should be foundations of the system, not features added later.
Created by a European team with a human centred philosophy.
Lucie’s European infrastructure is designed around strong privacy, security, data residency and sovereignty principles.
Privacy, security and data sovereignty are considered at the architectural level, not added as an afterthought.
Lucie runs on European cloud infrastructure from a leading provider. Where applicable, our infrastructure strategy is designed to support strong data residency and sovereignty requirements.
Infrastructure certifications and attestations apply to eligible services of our provider within their respective certification scope.
Your personal data is protected with industry standard encryption in transit and encrypted at rest. It cannot be read by the Lucie team, including for support purposes.
Access to production systems and personal information is technically restricted and controlled through technical and organisational controls.
You decide which services and which information you connect to Lucie. Each connection has its own scoped permissions and can be disconnected at any time.
Lucie uses European cloud infrastructure designed around rigorous security, privacy and compliance controls.
Connections you control
Lucie is designed to use the right level of intelligence for each task, avoiding unnecessary compute while reducing the energy, water and infrastructure resources required to run AI. We believe responsible intelligence means using only what is needed, when it is needed.
Lucie is built on cloud infrastructure certified and independently assessed against leading security and privacy standards.
Hover or tap a standard to see what it covers.
Intelligence without extraction.
Personalisation without surveillance.
Technology without surrendering control.
This is the European technology we believe in.
Andy LoyCEO & Co-FounderRHISE AI Technologies
Why we built Lucie this way“We deeply believe Europe can build a different kind of technology. Technology that is extraordinarily intelligent, but remains deeply human.
For Lucie, privacy, safety and data sovereignty aren’t compliance boxes. They’re part of the architecture and part of our responsibility.
If we’re asking people to trust Lucie with some of the most personal parts of their lives, then we have to build technology worthy of that trust.
We believe Europe can lead the next generation of human centred technology, and Lucie is our contribution to that future.”
Today, Lucie relies on European cloud infrastructure. As devices become more capable, we envision more of Lucie running directly on your devices, with more of your personal data never needing to leave them.
Because the architecture, the incentives and the experience behind Lucie all point the same way. Your personal data is encrypted at rest and cannot be read by the Lucie team, including for support purposes. Access to production systems is restricted through technical and organisational controls. There is no advertising business model, so nothing is gained from your attention or your data. And the founders of RHISE AI have spent decades building data and AI systems for critical government infrastructure around the world. We use Lucie every day ourselves.
Your personal data is encrypted at rest and cannot be read by the Lucie team, including for support purposes. Access to production systems is restricted through technical and organisational controls, and you decide what you connect in the first place.
No. Lucie has no advertising business model and no feed designed to keep you scrolling. Your data is used to serve you, not to sell to you, advertise to you or turn your attention into a product.
You choose what you connect: wearables such as Apple Health, WHOOP, Oura, Garmin and Fitbit, your calendars, your mail and Screen Time. Each connection has its own scoped permissions, and you can disconnect any of them at any time.
Yes. You can disconnect any connection at any time and request the deletion of your account and personal data, as described in our Privacy Policy.
Lucie runs on European cloud infrastructure from a leading provider. Where applicable, our infrastructure strategy is designed to support strong data residency and sovereignty requirements. Infrastructure certifications and attestations apply to eligible services of our provider within their scope, not to Lucie itself.
Lucie routes each request to the model the task actually requires: smaller, more efficient models for simple requests, and more capable systems only when genuinely necessary. Any processing by model providers is governed by our Privacy Policy.
Not entirely, yet. Today Lucie relies on European cloud infrastructure with encryption, controlled access and sovereignty principles. As devices become capable of running increasingly capable intelligence locally, we are building toward more of Lucie running directly on your devices, with more of your personal data never needing to leave them.
Lucie runs on European cloud infrastructure from a leading provider. Where applicable, our infrastructure strategy is designed to keep applicable European user data within European infrastructure. Provider and region details are not published.
Industry standard encryption in transit and at rest where applicable. Personal data is encrypted at rest and cannot be read by the Lucie team, including for support purposes.
Access to production systems and personal data is restricted through technical and organisational controls.
Established authentication and authorisation technologies protect account access. Connected services such as Google Calendar and Gmail are authorised through OAuth 2.0 with permissions scoped to what the experience requires, and each connection can be removed by the user.
Requests are routed to models according to what the task requires: smaller, more efficient models for simple requests, more capable systems only when genuinely necessary. Lucie is being built toward increasingly local, on device processing as technology makes it possible.
ISO/IEC 27001, 27017, 27018 and 27701, SOC 2 and BSI C5 are held by our infrastructure provider for in-scope services and regions. They are not certifications issued to Lucie or RHISE AI.
How personal data is processed is described in our Privacy Policy. For questions about data processing agreements, subprocessors or security practices, contact us through the details in our Impressum.