← Legal

Privacy Policy

Lycana helps people turn spoken or typed system-design commands into editable diagrams. This policy describes the information Lycana handles and the choices available to you.

Effective

Who operates Lycana

Lycana is operated by Justin Zhi Yong Seow and Jensen Huang Yan Kai, based in Singapore. Jensen Huang Yan Kai is Lycana's designated data protection officer. For privacy questions or requests, email [email protected].

Information Lycana handles

  • Account information. Supabase Authentication processes your email address and account identity. If you choose Google sign-in, Lycana may receive your name, email address, and profile image.
  • Diagrams and commands. Lycana stores diagrams, titles, commands, and edit history for signed-in accounts. A guest draft stays in that browser's local storage until it is cleared or saved to an account. Guest commands and voice input are also sent for processing when you use those features.
  • AI and voice input. When you request an AI change or title, Lycana sends the command and relevant diagram context to OpenRouter and a model provider it routes to. When you use voice input, ElevenLabs processes the audio to transcribe it. Diagram text and voice may include information you choose to provide, including information about other people.
  • Support messages. If you contact Lycana, we receive your message and the contact details you include so we can respond.
  • Operational information. Lycana handles account and session identifiers, guest allowance identifiers, usage records, and technical request, error, and security information to operate the service, apply limits, troubleshoot, and protect accounts.
  • Product analytics. Lycana sends product-usage events to PostHog, such as which features are used, whether a command succeeded, and how long it took. These events do not include the text of your diagrams or commands, your voice recordings, or your email address.
  • Billing information. When you use paid checkout, Stripe processes payment details. Lycana handles billing records such as customer, subscription, and payment references to manage your plan and answer payment questions.

The editor does not provide a general file-upload feature. Only include information in diagrams or commands that you have the right to provide and are comfortable sending to Lycana and the providers that process your requests.

Why information is used

Lycana uses account and session information to sign you in; diagram content, titles, and commands to create, edit, save, and share diagrams; voice audio to transcribe commands; and operational records to apply guest allowances, troubleshoot, and protect the service. We use support messages to answer you, usage events to understand and improve how Lycana is used, and billing records to manage paid plans and respond to payment questions.

Lycana does not sell your personal information and does not use it for targeted advertising.

Marketing

We will obtain your separate permission for each specific use of your review, name, or diagram in marketing. Using Lycana does not give that permission.

Service providers

Some service providers may process information in a country different from yours. Anyone who has a diagram's share link can view its shared content and may copy or pass on the link. The shared view does not show command history or the owner's identity. A copy saved by a viewer may remain in that viewer's account.

Cookies and browser storage

Lycana uses a small number of cookies and browser storage to run the service. None are used for advertising.

  • Sign-in. Supabase session cookies keep you signed in and protect your account.
  • Guest drafts and preferences. Local storage keeps a guest's diagram on that device, remembers editor preferences, and carries a draft or checkout through sign-in.
  • Landing page. A first-party cookie remembers for up to one year whether you have already seen the introduction.
  • Analytics. PostHog stores a random identifier in your browser so usage events can be grouped, and links them to your Lycana account ID when you are signed in.

If your browser sends a Global Privacy Control or Do Not Track signal, Lycana does not load analytics in that browser. You can also clear cookies and local storage in your browser settings, although doing so may sign you out or remove a guest draft. Google sign-in and Stripe checkout may use their own storage under their privacy policies.

Retention and deletion

You can delete an individual saved diagram in Lycana. Deleting it removes the diagram's linked edit events and share access from Lycana's application data. It does not delete other account information, copies saved by viewers, provider records, or backups.

For help with information associated with your account, including an access, correction, deletion, copy, or consent-withdrawal request where applicable, email [email protected]. You may also have other rights depending on where you live, including the right to contact a privacy regulator. We may ask for information to verify a request before responding.

Younger users

If you are a parent or guardian with a question or concern about a young person's information in Lycana, contact [email protected].

Contact

For privacy questions or requests, email [email protected]. For general support, email [email protected].