Back to Home

LUCI for Windows — Privacy Policy

Memories.ai Platforms, Inc. · Last Updated: 16 July 2026

Memories.ai Platforms, Inc. ("Memories.ai," "we," "our," and/or "us") values the privacy of individuals who use LUCI for Windows and related services (collectively, our "Services"). This privacy policy (the "Privacy Policy") explains how we collect, use, and disclose information from users of our Services ("Users").

Unlike traditional cloud-based applications, LUCI for Windows is a local-first application. The content it captures — screenshots, audio, transcripts, and other on-device activity — is stored, processed, and searched entirely on your device. We do not transmit or store this captured content on our servers.

By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond the Privacy Policy, your use of our Services is also subject to our Terms of Service. We are the data controller of the Personal Data (defined below) we collect to provide the Services to you.

1. Personal Data We Collect

In this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person. Because LUCI for Windows is a local-first application, the categories of Personal Data we, Memories.ai, receive are significantly narrower than in a typical cloud service. This section describes what is captured on your device (and stays there), and what limited information we may receive from your use of the Services.

A. Information You Provide to Us

Registration and Account Information. When you sign up for an account or use certain features (such as connecting an external agent via MCP or receiving product updates), we may ask you for your name and email address. If you sign up using a third-party service (e.g., through Google, Apple, or Microsoft), we may also receive information from those services such as your name, email address, and profile photo.

Communications. If you contact us directly (for example, via customer support, email, or a contact form), we may receive additional information about you, such as your name, email address, the contents of a message or attachments that you send to us, and other information you choose to provide.

B. Information Captured Locally on Your Device (Not Transmitted to Us)

The following categories of information are captured, stored, and processed exclusively on your local device by the LUCI application. Memories.ai does not receive, transmit, or store this information on our servers.

  • Screen Capture Content. When you enable screen capture, LUCI periodically records screenshots of your device's display. You can start or pause screen capture at any time from within the application.
  • Audio Content. When you enable audio capture, LUCI records audio from your device's microphone and/or system audio for the purposes of transcription and later recall.
  • Derived Content (OCR, Transcripts, Embeddings, and Summaries). LUCI uses on-device artificial intelligence models to extract text from screenshots (OCR), transcribe audio (ASR), generate summaries, and produce semantic embeddings. All of this derived content is generated locally and stored locally.
  • Application Activity Metadata. LUCI records metadata such as the name of the foreground application, window titles (subject to your redaction settings), and timestamps in order to organize your captured content by app, time, and context. This metadata is stored locally.
  • User-Configured Exclusion Lists (Blacklist). You may designate specific applications as excluded from capture. When LUCI detects that an excluded application is in focus, it will suspend capture for that session. Your exclusion list is stored locally.
  • On-Device AI Models and Preferences. LUCI downloads and runs on-device AI models (for example, models delivered through Microsoft Foundry Local SDK) to power local inference. Your choice of models, hardware preferences, and related settings are stored locally.

C. Information We Receive When You Use Our Services

Device and Environment Information. We may receive limited technical information about the device and software you use to run LUCI, including operating system version, device architecture (x64 / ARM64), available AI accelerators (such as NPU, GPU, and CPU capabilities), application version, and locale. This information is used to select appropriate on-device models and to diagnose compatibility issues.

Product Analytics Events (PostHog). We use a third-party analytics service, PostHog, to collect a limited set of pre-defined product usage events to help us understand how the Services are used and to improve them. Examples of events we collect include:

  • Application lifecycle events (for example, first install, application heartbeat).
  • Onboarding milestones (for example, which onboarding steps you view, whether you complete onboarding, and — if you provide it — your self-reported primary use case).
  • Feature usage counts (for example, that a search was performed, that a summary was generated, that a recording was started or stopped) and coarse metadata about those actions (for example, the number of search results returned, the duration of a recording, or whether a filter was applied).
  • Navigation between screens and settings changes (limited to fixed, pre-defined option values).
  • Client-side error reports, with file paths sanitized to remove personal identifiers.

We deliberately do not send the contents of your screenshots, audio, transcripts, search queries, chat messages, window titles, or other user-generated content to PostHog. Session recording and automatic event capture are disabled. Only events explicitly defined in our code are transmitted.

If you provide an email address during onboarding, we associate your PostHog events with that email as your distinct identifier so we can better understand feature adoption. If you do not provide an email, events are associated with an anonymous device identifier only.

You can disable analytics at any time from Local Settings → Privacy, or opt out during the initial onboarding flow. When analytics are disabled, no events are transmitted, and the analytics module is effectively inactive.

Model Downloads. When LUCI downloads on-device AI models from Microsoft Foundry Local or other providers, the third party providing the model may receive standard network information such as your IP address. Please refer to the applicable provider's privacy policy for details.

2. How Captured Content Stays Local

LUCI for Windows is designed so that content captured from your device stays on your device. In particular:

  • No cloud upload of captured content. Screenshots, audio, transcripts, OCR text, embeddings, and summaries generated by LUCI are not uploaded to Memories.ai's servers.
  • Local encryption. Captured screenshots and the search index are encrypted at rest on your device. The encryption key is protected by the operating system's built-in key store (Windows DPAPI), bound to your user account.
  • User controls. You may pause and resume capture at any time, exclude specific applications from capture via the blacklist, and configure retention policies for captured content.
  • Sensitive information redaction. LUCI applies on-device redaction to reduce the visibility of certain categories of sensitive information in captured screenshots (for example, credit card numbers validated by the Luhn algorithm, email addresses, government identification numbers, and API keys). This redaction is performed on-device on a best-effort basis and depends on the accuracy of the underlying OCR and detection heuristics; it is not guaranteed to identify every instance of sensitive information.
  • Local search. When you search your memory, the search and any AI-generated answers are computed on your device using local AI models.

3. MCP Integration and Optional Third-Party Agents

LUCI includes an optional integration based on the Model Context Protocol ("MCP"). When you choose to connect an external AI agent (for example, Claude, ChatGPT, or another MCP-compatible client) to LUCI, that external agent may query your local LUCI memory through the MCP interface.

When you connect an external agent:

  • The external agent runs as a separate application under your control.
  • LUCI provides responses to that agent's queries using content stored locally by LUCI.
  • Depending on how the external agent is configured, portions of the responses LUCI provides may be transmitted from your device to the servers operated by the external agent's provider (for example, Anthropic for Claude, or OpenAI for ChatGPT). This transfer is initiated by the external agent, not by LUCI.
  • Each external agent has its own privacy policy governing how it handles the data it receives. You are responsible for reviewing and agreeing to the applicable policy before connecting an agent.
  • You may disconnect any external agent at any time from LUCI's settings.

Memories.ai does not receive a copy of the queries you or your external agent send, nor a copy of the responses returned. All MCP traffic runs between LUCI on your device and the external agent under your control.

4. How We Use the Information We Collect

We process the limited Personal Data we do receive (as described in Section 1.A and Section 1.C) for the following purposes:

  • To provide, maintain, improve, and enhance our Services;
  • To communicate with you, respond to your inquiries, and provide customer support;
  • To understand and analyze how our Services are used, and to develop new product features, in each case using aggregated or event-level product analytics data;
  • To diagnose and fix errors and to improve the reliability and performance of the Services;
  • For compliance purposes, including enforcing our Terms of Service, protecting our legal rights, or as may be required by applicable laws or requested by any judicial process or governmental agency;
  • To generate anonymized or aggregated data that no longer identifies you, which we may use for any lawful purpose; and
  • For other purposes for which we provide specific notice at the time the information is collected.

We do not use content captured locally on your device (Section 1.B) to train or improve our AI models. On-device AI models used by LUCI are developed and trained separately, and any training we perform occurs using data we lawfully control, not your local memory.

5. Our Lawful Basis to Process Personal Data

If you are located in the European Economic Area, Switzerland, or the United Kingdom ("Europe"), we only process your Personal Data where we have a lawful basis to do so. The lawful bases we rely on include:

  • Contract. If you decide to use our Services, we will process your Personal Data to perform our contract with you.
  • Legitimate interests. We may rely on our legitimate interests where they are not overridden by your privacy rights, such as our interest in improving the Services, diagnosing errors, and preventing abuse.
  • Legal obligations. We may process Personal Data to comply with our legal obligations, including tax, accounting, and regulatory obligations.
  • Consent. Where required, we rely on your consent — for example, for optional product analytics collected via PostHog. You may withdraw this consent at any time by disabling analytics in Local Settings.

6. Disclosure of Personal Data

We disclose Personal Data to the categories of recipients described below. As noted above, content captured locally by LUCI (screenshots, audio, transcripts, and related derived content) is not disclosed by us because we do not receive it.

  • Affiliates. We may disclose information we receive to our current or future affiliates for any of the purposes described in this Privacy Policy.
  • Vendors and Service Providers. We may disclose information we receive to vendors and service providers retained in connection with the provision of our Services, including our product analytics provider (PostHog), email and communications providers, and cloud infrastructure providers used for our website and account services.
  • Third-Party Model Providers. Where LUCI downloads on-device AI models from third parties (such as Microsoft Foundry Local), those providers may collect standard network information related to the model download itself.
  • External AI Agents (User-Initiated Only). As described in Section 3, if you choose to connect an external AI agent via MCP, portions of LUCI's local content responses may be transmitted from your device to that agent's provider. This transfer is initiated by you and by the external agent, and Memories.ai does not receive that traffic.
  • As Required by Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety.
  • Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
  • Consent. We may also disclose your information with your permission.

7. Your Choices and Controls

LUCI is designed to give you meaningful control over what is captured, how long it is retained, and what is shared. Your key controls include:

  • Pause and resume capture. You can pause or resume screen and audio capture at any time from within the application.
  • Application exclusion (blacklist). You can designate specific applications for which LUCI will not capture content while they are in focus.
  • Retention policy. You can configure how long LUCI retains captured content before automatic deletion, or choose to retain content indefinitely ("Keep forever").
  • Delete captured content. You can delete captured content — either individual items or in bulk — from within the application.
  • Analytics opt-out. You can disable product analytics (PostHog) in Local Settings → Privacy. When disabled, no analytics events are transmitted.
  • External agent management. You can connect or disconnect external agents via MCP at any time.

Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

Rights in Relation to Your Personal Data. Depending on where you reside, you may have the following legal rights with respect to the Personal Data we hold about you (which, for LUCI for Windows, is limited to the categories described in Sections 1.A and 1.C):

  • Access and portability. You may ask us to provide you with a copy of the Personal Data we maintain about you, including in a machine-readable format, and to explain how it is processed.
  • Rectification and deletion. You may ask us to correct inaccurate Personal Data, or to delete or anonymize it, subject to legal exceptions.
  • Restriction and objection. You may ask us to restrict the processing of your Personal Data, or object to such processing.
  • Consent withdrawal. You may withdraw any consent you previously provided, at any time and free of charge. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Complaint. You may lodge a complaint with a supervisory authority. We would, however, appreciate the chance to address your concerns first, so please contact us in the first instance.

Note that content stored locally on your device is under your direct control. You can view, edit, or delete this content at any time using LUCI's in-app controls, without needing to make a request to us.

8. Data Retention

Content captured locally by LUCI is retained on your device for as long as you choose. LUCI provides retention controls that let you set an automatic deletion window or choose to retain content indefinitely ("Keep forever"); you may also delete captured content at any time from within the application.

For the limited Personal Data we do receive (such as your email address, communications with us, and product analytics events), we take measures to delete such Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law or for other legitimate business purposes.

9. Security

We make reasonable efforts to protect information under our control by using physical, technical, and organizational safeguards. For LUCI for Windows in particular:

  • Local encryption at rest. Captured screenshots and the search index are encrypted at rest on your device. The encryption key is protected by the operating system's built-in key store (Windows DPAPI), bound to your user account.
  • On-device processing. AI processing (OCR, transcription, summarization, search) is performed locally on your device using on-device models.
  • Sensitive information redaction. LUCI applies on-device redaction to reduce the visibility of certain categories of sensitive information in captured screenshots on a best-effort basis, as described in Section 2.

No electronic transmission or storage of information can be entirely secure. While we take reasonable steps to protect information under our control, we cannot make guarantees as to the security or privacy of information.

10. Children's Privacy

We do not knowingly collect, maintain, or use personal information from children under 18 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you may alert us at privacy@memories.ai.

11. Cross-Border Data Transfers

The limited Personal Data we do receive (Sections 1.A and 1.C) is transmitted to and stored on servers operated by us or our vendors, primarily located in the United States. Our product analytics provider, PostHog, stores data in the United States by default. If you choose to use the Services from outside the U.S., you should know that this information is being transferred outside your region and into the U.S. for storage and processing.

If you are located in Europe, we will comply with applicable data protection laws where we transfer data outside Europe to a jurisdiction where the level of protection of Personal Data may be different. In particular, we will rely on (i) an adequacy decision or determination, (ii) contractual protections for the transfer of your Personal Data, or (iii) another valid data transfer mechanism.

You may contact us as specified below to obtain a copy of the safeguards we use to transfer Personal Data outside of the EEA, UK, and Switzerland.

12. Third Parties

Our Services may contain links to, or integrate with, other websites, products, or services that we do not own or operate — including third-party AI agents, model providers, and analytics services. We are not responsible for the privacy practices of these third parties. This Privacy Policy does not apply to your activities on these third-party services or any information you disclose to them. We encourage you to read their privacy policies before providing any information to them.

13. Changes to This Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or disclose personal information previously collected from you through the Services, we will notify you through the Services, by email, or by other communication.

14. Contact Information

Memories.ai is responsible for processing your information. If you have any questions, comments, or concerns about our processing activities, or if you wish to exercise any of the rights described in this Privacy Policy, please email us at privacy@memories.ai.

Last Updated: 16 July 2026