Privacy Policy
Last updated: July 2026
1. Controller
Nine to Zero UG (haftungsbeschränkt)
Malzer Chaussee 173, 16515 Oranienburg, Germany
Email: mail@ninetozero.de
2. Overview
Go Lucid is a web app (PWA) for learning lucid dreaming. We process personal data only as far as necessary to provide the app. The app is local-first: without an account, your entries (dreams, settings) are stored exclusively on your device and are not transmitted to us.
3. Website Access / Server Logs
When you access the site, the hosting server automatically processes access data (IP address, date/time, page requested, browser type). The legal basis is our legitimate interest in secure, functional operation (Art. 6(1)(f) GDPR).
Hosting
The website and app are hosted on a server located in Germany.
4. Local Storage in the Browser
We use technologies such as IndexedDB and localStorage to store app data (dream entries, settings, language and theme choice) locally on your device. This data stays on your device until you delete it and is not transmitted to servers without an account. Legal basis: Art. 6(1)(f) GDPR (technically necessary).
5. User Account & Cloud Sync (optional)
If you choose to register, we process your email address and your app data (dream entries, settings) for account management and cross-device synchronization. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Processor: Supabase
For authentication and data storage we use Supabase (Supabase Inc.). Data is hosted in the EU (Frankfurt) region. A data processing agreement (Art. 28 GDPR) is in place.
6. Email Delivery (Verification)
To confirm your registration and for account-related emails, we send emails via the provider Resend (Resend, Inc.), processed in the EU (Ireland). Your email address is processed. Legal basis: Art. 6(1)(b) GDPR.
7. Push Notifications (optional)
If you enable reminders, the app requests notification permission. You can revoke this at any time in your device settings.
8. Your Rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may also lodge a complaint with a supervisory authority. To exercise your rights, an email to mail@ninetozero.de is sufficient.
You can have your account and associated data deleted at any time. Local data can be removed by you via your browser.
9. Retention
Account and cloud data are stored as long as your account exists and removed upon deletion. Server logs are deleted after a short period.