HORUSNeuroTechnologies

Privacy Policy

LUCID by HORUS NeuroTechnologies
Effective date: October 6, 2026

This Privacy Policy explains how HORUS NeuroTechnologies LLC ("HORUS", "we", "us" or "our") collects, uses, shares and protects personal information when you use LUCID, including the LUCID website at https://lucid.horusneuro.com, the LUCID application and related services (together, "LUCID"). It also explains the choices and rights you have. Capitalized terms not defined here have the meanings given in our Terms of Use.

1. Summary

LUCID is built to work without patient identities. Names, record numbers, dates and other identifiers are removed from notes in your browser before any text is sent, and the clinical details of the cases you enter are used only to produce your results during your session. They are not saved to your account, not used to train models and not sold. We keep the information needed to run your account, such as your name, email address and settings, and we use trusted service providers to host LUCID, process payments and send email. We do not sell personal information and we do not use it for targeted advertising.

2. Information we collect

Account information. When you create an account we collect your name, username, email address and a password. We store only a salted, one-way hash of your password, never the password itself. If you sign in with Google, we receive your name, email address and Google account identifier from Google.

Professional information. You may tell us your role, specialty, institution and a note signature. To confirm your professional status we ask for your National Provider Identifier (NPI), which we check against the public NPI Registry run by the U.S. Centers for Medicare & Medicaid Services, or, outside the United States, your license details.

Settings and preferences. We store your preferences, such as your display name, theme, units and default care setting.

Plan and payment information. We keep your plan, free-trial dates and subscription status. Payments are handled by Stripe, Inc. You enter your card details on Stripe's pages, and Stripe stores them. We receive limited information from Stripe, such as whether a payment method is on file, your subscription status and billing history, but never your full card number.

Clinical information you enter. To show recommendations, LUCID processes the clinical details you enter or paste, such as times, examination findings, imaging results and medicines. LUCID removes identifiers from text in your browser before it is sent. This clinical information is processed during your session to produce results, is not stored in your account or in our database, and is discarded when your session ends. Our Terms of Use do not permit you to enter patient identifiers, and the safeguards described above are not a guarantee that none will ever be received. If identifiers are entered despite these safeguards, they are handled in the same transient way.

Feedback and communications. If you send feedback or contact support, we collect what you send and your contact details. Please do not include patient information.

Technical and usage information. Like most online services, our hosting provider records technical information when you use LUCID, such as your IP address, browser and device type, the pages and features requested, times, and error details. We use this information to operate, secure and improve LUCID. LUCID's pages load typefaces from Google Fonts, so your browser also connects to Google's servers, which receive your IP address and browser details. We do not use third-party analytics or advertising trackers.

Cookies and similar technologies. LUCID uses only cookies and similar technologies that are needed to run the service, such as cookies that keep you signed in and protect sign-in, and the connection LUCID needs to work in your browser. Google and Stripe may set their own cookies on their own pages when you use them. We do not use advertising or cross-site tracking cookies, so LUCID does not offer a cookie preference banner. You can block or delete cookies in your browser, but LUCID may not work without them. Our Cookie Notice gives the details.

3. How we use information

We use personal information to:

  • create and manage your account, sign you in and keep your account secure;
  • provide LUCID, including showing recommendations during your session;
  • start and manage your free trial and plan, process payments and send receipts through Stripe;
  • send service messages, such as password reset links, security notices, and notices about changes to LUCID or our terms;
  • respond to questions and requests, and provide support;
  • confirm professional status where required;
  • monitor, protect and fix LUCID, and prevent fraud, abuse and misuse;
  • understand how features are used, in aggregated or de-identified form, so that we can improve LUCID;
  • comply with legal obligations, enforce our terms, and establish or defend legal claims.

We do not use clinical information you enter to build profiles about you or about patients. We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics about you.

If the law of the European Economic Area, the United Kingdom or Switzerland applies to you, we process personal information on these bases: to perform our contract with you, for example to provide LUCID and your plan; for our legitimate interests, for example to secure and improve LUCID, balanced against your rights; to comply with legal obligations; and with your consent where we ask for it, which you may withdraw at any time.

5. How we share information

We share personal information only as described here:

  • Service providers that process information for us under contracts that limit their use of it, including Google Cloud for hosting, database, storage and logging; Stripe for payment processing; Google for sign-in when you choose it; Google Fonts for the typefaces our pages display; and our email provider for account and password reset messages.
  • Professional advisers, such as lawyers, accountants and auditors, under duties of confidentiality.
  • Legal and safety reasons, when we believe in good faith that disclosure is required by law, regulation, legal process or a governmental request, or is needed to protect the rights, property or safety of HORUS, our users or others.
  • Business transfers, if HORUS is involved in a merger, acquisition, financing, reorganization or sale of assets, in which case personal information may be transferred under this Privacy Policy or a notice we give you.
  • With your consent or at your direction.

6. Health information and HIPAA

LUCID is designed not to receive protected health information. For LUCID Individual plans, HORUS does not act as a business associate of any covered entity, and Individual plans are not offered under a business associate agreement. Health care professionals remain responsible for complying with HIPAA and their institutions' policies when using LUCID. Organizations that need to use LUCID with protected health information should contact us about a separate agreement.

7. How long we keep information

We keep account information, professional information and settings for as long as your account is open. If you ask us to delete your account, we delete or de-identify this information within 30 days, except where we must keep it longer. Billing and transaction records are kept for as long as tax, accounting and other laws require, generally up to seven years. Technical logs are kept for a limited period, generally about 30 days, unless needed longer to investigate a security issue. Clinical information you enter is not stored after your session. Information in backups is deleted as backups are replaced on their normal schedule.

8. Security

We protect personal information with administrative, technical and physical safeguards suited to its sensitivity, including encryption in transit using HTTPS, encryption at rest by our hosting provider, salted one-way password hashing, limits on repeated sign-in attempts, single-use and time-limited password reset links, access controls that limit who can reach personal information, and removal of identifiers from notes in your browser before text is sent. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach that affects your personal information, we will notify you and the authorities as the law requires.

9. Your choices and rights

Account information. You can view and update your name, role, institution and settings in LUCID at any time, and change or reset your password.

Email. We send service messages that are part of providing LUCID. We do not send marketing email unless you have agreed to receive it, and you can opt out of any marketing email at any time.

Requests. Your Privacy Choices page explains how to use these rights. Depending on where you live, you may have the right to know what personal information we hold about you and how we use it; to get a copy of it in a portable format; to correct it; to delete it; to object to or restrict certain processing; and to withdraw consent. To make a request, email horusneurotechnologies@gmail.com from the address on your account. We will confirm your identity before acting and will respond within the time required by law, generally 30 to 45 days. You may use an authorized agent where the law allows, and we may ask the agent for proof of authority.

U.S. state privacy rights. Residents of California and other states with consumer privacy laws have the rights described above, including the right to know, delete and correct personal information, and the right to opt out of the sale or sharing of personal information and of targeted advertising. HORUS does not sell or share personal information for these purposes and has not done so in the past 12 months. We use sensitive personal information, such as account sign-in details, only to provide LUCID and as the law permits. We will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our decision, and if your appeal is denied you may contact your state attorney general.

Rights in the EEA, UK and Switzerland. You also have the right to lodge a complaint with your local data protection authority.

10. Children

LUCID is intended for health care professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. International users

HORUS is based in the United States, and LUCID is hosted in the United States. If you use LUCID from another country, your personal information will be transferred to, stored in and processed in the United States, where data protection laws may differ from those in your country. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in LUCID before they take effect. The effective date at the top shows when it was last updated.

13. Contact

For questions or requests about this Privacy Policy or your personal information, contact:

HORUS NeuroTechnologies LLC, United States
Email: horusneurotechnologies@gmail.com