PRIVACY POLICY

Last Updated: February 24, 2026

This Privacy Policy describes how Vincent LEGARDIEN, Sole Proprietor (SIRET: 98377742600013), hereinafter "we" or "the Editor", collects and processes your personal data regarding the waitlist for the Lucy service, accessible at yourfriendlucy.com. This policy will be updated upon the official launch of the application to cover all processing related to its use.

1. DATA CONTROLLER

Vincent LEGARDIEN Sole Proprietor (Auto-entrepreneur)
SIRET: 98377742600013
Address: 8 AVENUE des Dix Acres 14112 Biéville-Beuville FRANCE
Contact: legardienvincent@gmail.com

2. DATA COLLECTED AND PURPOSE

For the waitlist, we only collect your email address. This collection has a unique and limited purpose: to inform you about the opening and launch of the Lucy service. Your email will not be used for any other purpose without your prior consent.

3. LEGAL BASIS FOR PROCESSING

The processing of your email is based on your consent, pursuant to Article 6.1.a of the GDPR. You may withdraw this consent at any time by clicking the unsubscribe link in our emails or by contacting us at legardienvincent@gmail.com.

4. DATA RETENTION

Your email is kept until the launch of the Lucy application or until you withdraw your consent. In the absence of a launch within 3 years of your registration, your data will be automatically deleted.

5. DATA RECIPIENTS AND TRANSFERS

Your email is transmitted to our email service provider, Resend, Inc. (USA). For technical and security reasons, browsing data (IP addresses) are also processed by our infrastructure providers, Cloudflare, Inc. and Vercel, Inc. (USA).

All transfers to the United States are governed by Standard Contractual Clauses (SCCs) and/or Data Privacy Framework certifications, pursuant to Article 46 of the GDPR.

6. USERS OUTSIDE THE EUROPEAN UNION

While this Privacy Policy is primarily designed to comply with European data protection law (GDPR), users located outside the European Union — including residents of the United States — may exercise equivalent rights regarding their personal data by contacting us at legardienvincent@gmail.com.

We do not sell, rent, or share personal data with third parties for commercial or advertising purposes, regardless of the user's location.

7. YOUR RIGHTS (GDPR)

Pursuant to the GDPR and the French Data Protection Act, you have the following rights:

• Rights of access, rectification, and erasure (Articles 15, 16, 17 GDPR).
• Right to object to or limit processing (Articles 18, 21 GDPR).
• Right to data portability (Article 20 GDPR).
• Right to withdraw consent (Article 7.3 GDPR).

To exercise these rights, contact: legardienvincent@gmail.com. We will respond within one month (Article 12.3 GDPR).

8. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with a supervisory authority, such as the CNIL in France (www.cnil.fr).