Privacy Policy

Blue Ocean Digital Private Limited ("Blue Ocean Digital", "we", "us", "our"), a private limited company incorporated under the Companies Act, 2013 (India), with its registered office at Blue Ocean Building, No.12, 2, Sajjan Rao Rd, Parvathipuram, Vishweshwarapura, Shankarapura, Bengaluru, Karnataka 560004, India, operates the LUCY mobile application and the LUCY website (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information we collect

1.1 Account information. When you register, we collect the information provided through Firebase Authentication: your email address, and, if you sign in with Google or Apple, the basic profile information those providers share with us (name, email, profile photo). We also store a LUCY-specific profile you create, which may include a display name, avatar, bio, and your specialty/field and interests captured during onboarding — and, separately from your verified account identity, an in-room anonymous identity used while participating in Rooms (see Section 2.2).

1.2 Content you provide.Room, meeting, and live-session audio and video is transmitted in real time via our own self-hosted conferencing infrastructure (NATS + LiveKit) for the duration of a session; we do not permanently record or store this audio/video unless a feature explicitly states that a session is being recorded (e.g., certain Pro LUCY training sessions). Chat messages you send — direct 1-on-1 messages, group chat messages (including the group name, group avatar, and membership list for any group you create or join), and Room/session chat — are stored via Firebase Realtime Database and Firestore respectively so they can be delivered and displayed to intended recipients. Any files, images, or media you upload — profile photos, avatar "story" posts, room thumbnails, learning materials, achievement/certificate uploads — are stored via Firebase Storage. Where you use voice-to-text features (e.g., live captions or transcription in Rooms, meetings, or chat), your speech is processed by on-device or cloud speech-recognition services (Apple/Google speech frameworks on your device; Google Cloud Speech-to-Text for Room/meeting infrastructure) to produce text.

1.3 Usage and engagement data.We collect data about how you use the Service in order to power core features: rooms, meetings, and sessions you create, join, or host; hours of conversation and participation and daily activity streaks (used to calculate Levels, Avatars, and progression); ASK framework signals (Attitude, Skill, Knowledge) derived from your activity and any self-assessment you submit within the Service; likes, comments, follows, friend requests, blocked users, and bookmarks/"Interested" marks; skill/knowledge entries and any verification requests you submit for them; achievements, rewards, and certificates you record or are issued; and LMS activity such as courses, batches, lessons, assignments, quizzes, attendance, and certifications if you use Pro LUCY features, including — if you join an organization/business account on Pro LUCY — your membership, role, and progress data visible to that organization's administrators.

1.4 Device, technical, and permission-based information. Standard technical data collected automatically: device type and operating system, app version, IP address, general (non-precise) location inferred from IP, basic crash and diagnostic logs, and a Firebase Cloud Messaging device token used to deliver push notifications (you may disable push notifications in your device settings at any time). Where you grant the relevant device permission, the app also accesses: your microphone, to let you speak in Rooms, meetings, and live sessions; your camera, to let you use video in meetings or capture photos for a story post; your photo library, to let you choose an existing photo for your avatar or a story post; and speech recognition, to power voice-to-text features described in Section 1.2. None of these are accessed unless you take an action that requires them, and you can revoke any of these permissions at any time in your device settings.

1.5 Payment information. The Service does not currently offer any paid subscriptions, in-app purchases, or other payment features — all tiers and features currently available (LUCY, Pro LUCY, Super LUCY) are free to use, and we do not collect or process any payment or billing information today. If we introduce paid subscriptions or in-app purchases in the future, any such purchases would be processed by Apple App Store or Google Play Billing; we would not directly receive or store your payment card details, only purchase-verification data from Apple or Google (e.g., product ID, purchase token, subscription status) used to verify entitlements server-side — and we will update this Privacy Policy before any such feature becomes available.

2. How we use information

We use the information above to: provide, operate, and maintain the Service; match you into Rooms and facilitate live audio/video sessions and meetings; calculate and display your Level, Avatar, Stage, activity streaks, and ASK profile; deliver LMS content, track progress, and issue certificates (Pro LUCY); operate the social graph (follows, friend requests, blocking) and content interactions (likes, comments, bookmarks); send transactional and reminder notifications (e.g., a Room you follow is about to start); moderate Rooms and content for safety and enforce our Terms and Conditions; personalize content and, where AI features are used (e.g., voice-to-text), improve recommendations and learning support; and analyze aggregate usage to improve the Service. We do not currently use your information to process any payments (see Section 1.5).

We do not sell your personal information. LUCY is not an advertising-driven platform, and we do not share your personal information with third parties for their own advertising purposes.

2.1 Legal bases (where applicable, e.g. for users in jurisdictions requiring a stated basis). We process your information on the basis of: performance of the contract between you and us (to provide the Service you signed up for), your consent (e.g., optional notification preferences, optional profile fields), our legitimate interests (e.g., safety/moderation, service improvement), and compliance with legal obligations.

2.2 Anonymity within Rooms.LUCY's core design lets you participate in Rooms under an in-Room display identity that is distinct from your verified account. This is a product feature to reduce the psychological barrier to speaking up and learning — it is not a guarantee of full anonymity. Your account is still tied to a verified identity (email, or Google/Apple sign-in) for safety, moderation, and legal-compliance purposes, and we can associate in-Room activity with your account internally (e.g., to act on abuse reports). You can block another user — in a Room, a 1-on-1 chat, or a group chat — at any time to stop further contact from them, and group admins can remove a disruptive member from a group. You can report a message, a user, or a room directly within the app by tapping Report and selecting a reason, or by emailing us at contact@blueoceandigital.info, and we review and act on reports, including removing content or suspending accounts where warranted.

3. How we share information

We share information with the following categories of service providers, only as needed to operate the Service:

• Google Firebase (Authentication, Firestore, Realtime Database, Cloud Storage, Cloud Messaging) — infrastructure for accounts, chat, file storage, and push notifications.
• Google Cloud Platform (Cloud Run, Cloud SQL) — application hosting and the primary database.
• Google Cloud Speech-to-Text/Text-to-Speech — used to power optional voice-to-text and captioning features in Rooms, meetings, and live sessions.
• Apple Inc. and Google LLC — sign-in via "Sign in with Apple"/"Sign in with Google" where you choose to use it, and device-level speech-recognition APIs.
• If you join a Pro LUCY organization/business account, your membership, role, and course/session progress are visible to that organization's administrators.

We do not currently share any information with payment processors, since the Service does not yet support in-app purchases or subscriptions (see Section 1.5).

We may also disclose information if required by law, to protect the rights, safety, or property of Blue Ocean Digital or our users, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

4. Data storage and security

Your data is stored on Google Cloud Platform infrastructure (Cloud SQL, Firestore, Firebase Realtime Database, Firebase Storage), in the regions those services are provisioned in. We apply industry-standard safeguards including encrypted transport (HTTPS/TLS), Firebase Authentication token-based access control, and server-side verification of all client requests. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data retention

We retain account and profile data for as long as your account is active. Chat messages, room participation history, and ASK/progression data are retained to support the Service's core purpose (your longitudinal growth profile). You may request deletion of your account and associated personal data at any time (see Section 7).

6. Children's privacy

The Service is not directed to children under 13 (or the minimum age required by your local law, if higher), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at contact@blueoceandigital.info and we will take steps to delete it.

7. Your rights and choices

Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion of your account and associated data; object to or restrict certain processing; and receive a copy of your data in a portable format. You may exercise these rights by contacting us at contact@blueoceandigital.info, or by using in-app account deletion where available. We will respond within a reasonable time and in accordance with applicable law, including India's Digital Personal Data Protection Act, 2023, where it applies.

8. International data transfers

Blue Ocean Digital Private Limited is based in India. Depending on where our infrastructure providers (Google Firebase / Google Cloud) operate their services, your information may be processed in countries other than your own. Where required, we take steps to ensure such transfers are subject to appropriate safeguards.

9. Cookies and similar technologies (web)

The LUCY website may use strictly necessary cookies/local storage to maintain your session (e.g., Firebase Authentication on the admin panel) and, where applicable, basic analytics cookies to understand aggregate site usage. We do not use third-party advertising cookies.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the Service or by other means before the change takes effect. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

11. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact:

Blue Ocean Digital Private Limited
Blue Ocean Building, No.12, 2, Sajjan Rao Rd, Parvathipuram, Vishweshwarapura, Shankarapura, Bengaluru, Karnataka 560004, India
Email: contact@blueoceandigital.info
Phone: +91 80 3869 0777