Privacy Policy
EFFECTIVE 5 JULY 2026
Lure is a focus app. This policy describes exactly what data the app handles — no more, no less. We wrote it to match what the software actually does.
The short version
- Lure works without an account. Everything then lives only on your phone.
- An account exists for one purpose: backing up your progress to our own server.
- We run our own server. No advertising, no trackers, no analytics SDKs, no data sales.
- You can delete your account and all its server data from inside the app, instantly.
What lives on your phone
Your focus session history, earned rewards, mosaic progress, and streak are stored in a local database on your device. If you never create an account, this data never leaves your phone. Deleting the app deletes it.
What we store if you create an account
- Your email address and, if you choose to give one, a display name.
- Your password, stored only as a cryptographic hash — we cannot read it.
- Focus session records: when a session started and ended, its length, and the timezone offset used to compute your streak day.
- Rewards and progress: the rarity results of your sessions and the streak/consistency records derived from them.
- Sync metadata: timestamps that let your devices stay in step.
That is the full list. The app has no access to your contacts, photos, location, microphone, health data, or anything else on your device.
What we don't do
- No third-party advertising or ad tracking of any kind.
- No third-party analytics SDKs.
- No selling, renting, or sharing of your data with anyone.
- No payment processing by us — if you bought Lure, the purchase was handled entirely by Apple, and we never see your payment details.
Where your data lives
Account data is stored on a private server we operate ourselves — not on a third-party data platform. Requests to it travel over HTTPS. Standard, short-lived server logs (which include IP addresses) exist for security and abuse prevention.
The one third party: email delivery
When you request a password reset, we send the code through Resend, an email delivery service. Your email address is shared with them for that delivery and nothing else. That is the only third-party service the app's data ever touches.
Deleting your account and data
In the app: Account → Delete account. This permanently erases your account and every piece of server-side data tied to it — immediately, with no recovery. The data on your own phone stays yours; delete the app to remove it too.
You can also request deletion by email at support@getlure.xyz and we will complete it within 30 days.
Children
Lure is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes, the new version will be posted here with a new effective date. Material changes will be noted in the app.
Contact
Questions about your data: support@getlure.xyz