Privacy Policy
1. Who we are
Luce Foundation (“Luce,” “we,” “us”) is an independent research and development organization operating an experimental platform for cognitive practice, skill acquisition, and mental model exploration. This policy explains what information we collect through our websites, web applications, telemetry tools, and any associated devices (together, the “platform”), how we use it, and the choices you have.
2. What we collect
Information you give us
- Account details such as your name, email address, and sign-in credentials, and the invitation you used to join.
- Notes and reflections you write in the platform, settings and preferences, and messages you send us.
Training and activity data
- Your answers and choices, accuracy, and response times.
- Session dates and length, courses and ideas you have completed, and your progress over time.
Device and technical data
- Device type, browser, operating system, language, app version, and diagnostic or crash logs.
- Your IP address and the approximate location it implies.
Sensor and physiological data
If you choose to use a Luce sensor or another connected device, we may also collect the signals and measurements it records. We treat this as sensitive information and only collect it when you connect a device.
3. How we use information
- To provide, operate, secure, and support the platform.
- To adapt challenges to your level and show you your own progress.
- To communicate with you about your account, invitations, and important updates.
- To detect misuse, fix problems, and meet legal obligations.
- For research and to further our mission, as described next.
4. Research and our mission
To protect your privacy in this work:
- We use de-identified or aggregated data wherever practical, and we do not use your name or email address in research outputs.
- We may publish or share aggregated findings and de-identified datasets with research collaborators under agreements that prohibit attempts to re-identify anyone.
- We do not sell your personal information, and we do not use it for third-party advertising.
- Our platform is not a medical service, and we do not use research data to make medical decisions about you.
- As our research grows, some studies may involve health-related information, for example from people recovering from an injury or living with a condition. Those studies will have their own clear consent and appropriate oversight before we collect such information.
Using the platform includes taking part in this research. Where the law of your region requires a separate consent or an opt-out, we will ask for it or provide it.
5. How we share information
- Service providers that host, secure, and help us operate the platform, under confidentiality and data-protection terms.
- Research collaborators, using de-identified or aggregated data as described above.
- Legal and safety requests, where we believe disclosure is required by law or needed to protect people or the platform.
- Organizational changes, such as a merger or transfer of our programs, with notice to you where required.
- At your direction, for example if you ask us to share your data.
6. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain uses. You can update much of your information in your profile. To make a request, or to close your account, contact us using the details below. We will verify your identity and respond within the time required by law.
If you delete your account, we remove or de-identify your personal information. De-identified or aggregated data already included in research analyses or published results may not be removable.
7. Retention
We keep personal information while your account is active and as long as needed for the purposes above, to meet legal duties, and to resolve disputes. We keep de-identified research data for as long as it remains useful for research.
8. Security
We use technical and organizational safeguards designed to protect your information, including encryption in transit and access controls. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us right away if you suspect unauthorized access.
9. Eligibility and international use
The platform is available by invitation to adults aged 18 and over and is not directed to children. If we learn we have collected a child’s information, we will delete it. Your information may be processed in countries other than your own, and we use appropriate safeguards for those transfers where required.
10. Changes and contact
We may update this policy as our work evolves. If we make material changes, we will notify you through the platform or by email. Questions or requests: [privacy contact email].