Terms of Service & End User Licence Agreement

LUCY (“the Service”) is a business operations analytics platform provided by NGA Dynamics Ltd (“we”, “us”, “our”), a company registered in England and Wales. By using LUCY you enter into a binding agreement with NGA Dynamics Ltd.

You must be at least 18 years old and have the authority to enter into this agreement on behalf of your organisation. If you are using LUCY on behalf of a business, that business also agrees to these terms.

You agree not to:

• Use LUCY for any unlawful purpose or in violation of any applicable regulations.
• Attempt to reverse-engineer, decompile, or extract the source code of LUCY.
• Introduce malware, viruses, or harmful code via the ingestion API or any other means.
• Use LUCY to store or transmit personally identifiable information of individuals without a lawful basis under UK GDPR.
• Resell or sublicence access to LUCY without our written permission.
• Attempt to access another organisation's data or exceed the permissions of your account role.

You own your data. The events, metrics, and configuration you store in LUCY belong to you. We process your data only to provide the Service as described in these terms. We do not sell, share, or use your business data for any purpose other than operating and improving LUCY.

On cancellation or deletion of your organisation, your data is permanently deleted within 30 days. You may export your event data at any time via the Sources → Events tab or the /api/events/export endpoint.

NGA Dynamics Ltd acts as a data processor when processing personal data on your behalf. You are the data controller and are responsible for ensuring you have a lawful basis for any personal data you send to LUCY's ingestion API. We process data in accordance with UK GDPR and the Data Protection Act 2018.

For a Data Processing Agreement (DPA), contact info@ngadynamics.co.uk.

If you use LUCY in a regulated health or social care setting (such as a care home, nursing home, or supported living service), you may store personal data that falls within UK GDPR Article 9 special categories, including health data, care plans, and medication records relating to residents or service users.

As the data controller, you are responsible for:

• Identifying a valid Article 9 condition for processing (e.g. Article 9(2)(h), health or social care purposes).
• Maintaining an appropriate policy document as required by Schedule 1 of the Data Protection Act 2018.
• Ensuring that access to health records within LUCY is restricted to authorised staff only.
• Applying appropriate retention periods for care records in line with your regulatory obligations (e.g. CQC, NHS records management codes).

NGA Dynamics Ltd applies the same technical and organisational measures to special category data as to all other personal data processed through LUCY. We will process it only on your documented instruction.

LUCY lets you record information about children and their parents or guardians, check and store identity documents (including an automatic check that compares a selfie with a document), and record that staff or volunteers have had a criminal-record check. You are the data controller for this information. In particular you are responsible for:

• having a lawful basis, and where needed a condition under Article 9 or Article 10 of UK GDPR, before you collect it;
• telling people (and, for children, their parents or guardians) what you collect and why, and, for the automatic ID check, getting their agreement before they take part, because a face match uses biometric data;
• following your own safeguarding, vetting and child-protection duties: LUCY records what you tell it and does not replace your procedures, your designated safeguarding lead, or checks required by law;
• using the check results properly: an automatic result supports your decision and does not make it, and a person in your organisation must review and approve it;
• deleting or returning information when you no longer need it, and answering requests from the people it is about within the legal time limit.

Automatic ID checks are run for us by Stripe, and each one counts against a monthly allowance for your workspace. We may change the allowance, the countries it covers, or withdraw the feature, with reasonable notice.

The owners and administrators of a workspace decide who can do what in it, including which features each person, department and branch can use and whether branches can see each other's records. You are responsible for setting these correctly and for putting people into the right departments. LUCY records an audit trail of changes made in your workspace (who, when, what, and the IP address and browser), visible to owners and administrators and kept for as long as the workspace exists. You must tell the people who use your workspace that this record is kept, and you must not use it in a way that breaks the law.

LUCY is a business management platform. It is not a clinical system, a care planning tool regulated by the Care Quality Commission (CQC), or a financial product regulated by the Financial Conduct Authority (FCA), except where explicitly stated (see the Loans module).

If you operate in a regulated sector (care, healthcare, financial services, logistics, or other), you remain solely responsible for ensuring that your use of LUCY complies with all applicable regulatory requirements. LUCY does not replace regulated software or regulated advice, and NGA Dynamics Ltd accepts no liability for regulatory non-compliance arising from your use of the platform.

Who can use it. LUCY Personal is for people aged 16 or over.

Your content is yours. You keep ownership of what you post, send and store. By posting to the community you give us a non-exclusive licence to host and show it to the members you chose as its audience, and only for that purpose. The licence ends when you delete the content or your account, apart from short-lived backups and copies we must keep for legal reasons.

You are responsible for it. You must have the right to post what you post, and it must follow our Community Guidelines.

Reporting and action. Any member can report a post, comment, message or person. We review reports, and may remove content, or suspend a member from posting, from messaging, or from Personal, for a set time or until lifted. We act without notice where content is illegal or puts someone at risk. You can ask us to review a decision through Help & support in the app or at info@ngadynamics.co.uk.

Illegal content and takedown. If you believe content on LUCY is illegal or infringes your rights, report it in the app or email us with a link and an explanation. We will assess it and act promptly, and we pass serious illegal content (for example child sexual abuse material or credible threats) to the authorities.

Your privacy. How we treat your Personal data, including our commitment that marketing is opt-in only, is set out in our Privacy Policy.

We aim to keep LUCY available 24/7 but do not guarantee uptime. Planned maintenance will be communicated in advance where possible. We are not liable for losses arising from temporary unavailability of the Service.

LUCY, its design, and underlying technology are the intellectual property of NGA Dynamics Ltd. These terms do not transfer any intellectual property rights to you. You grant NGA Dynamics Ltd a limited licence to store and process the data you send to LUCY solely for the purpose of providing the Service to you.

To the maximum extent permitted by law, NGA Dynamics Ltd shall not be liable for indirect, incidental, or consequential damages arising from your use of LUCY, including but not limited to loss of revenue, loss of data, or business interruption. Our total liability to you shall not exceed the fees paid by you in the three months preceding the claim.

Either party may terminate this agreement at any time. We may suspend or terminate your account if you breach these terms, with or without notice depending on severity. Upon termination, your right to access LUCY ceases immediately. Data deletion follows the schedule in Section 5.

We may update these terms from time to time. We will notify account owners by email at least 14 days before material changes take effect. Continued use of LUCY after that date constitutes acceptance of the updated terms.

These terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

info@ngadynamics.co.uk
NGA Dynamics Ltd · Hull · United Kingdom