Data, privacy and AI

What you share, and with whom

Lichen asks you to make real choices instead of guessing at defaults you never saw. So here are the defaults, concretely. Signals of connection start on: your presence candle, your findability in the directory, and the AI collaboration the platform is built around — each switchable off in a tap. Anything that exposes your life starts closed: you have no availability hours and can’t be booked until you set hours yourself, your task list starts hidden, your open-web page stays unpublished until you publish it, and your financial picture is readable only by you, your active care team, and the rebalancing intelligence described below. The rule underneath: where you haven’t chosen, unknown is never yes.

This page walks the switches: your presence, your location, your calendar, your financial picture, and the assistant. Five minutes now saves you a lot of second-guessing later.

Presence: present, available, or elsewhere

Three honest states, all yours:

Present — the candle in the top bar, lit by default while you’re actually here. The app counts you present only while it’s open in front of you — a pocketed phone or a backgrounded tab stops claiming you within minutes — and you can snuff the candle whenever you like.
Available — inside the social hours you publish in Calendar settings, minus whatever’s already booked. It asks nothing of you in the moment: set your hours, close the app. Nobody has hours — and nobody can be booked — until they set them.
Elsewhere — neither of the above, and it’s a good sign: when nobody’s here, Home says your network is out living.

No ambient online dots, no timestamps, no “last seen” — nothing shows that you’re merely online. And neither signal gates messaging; they set expectations, not walls. Presence controls live in the My-celium directory; hours live in Calendar → settings.

Presence is a gift, not a status.

Where you are: five levels, per audience

Your location isn’t one switch — it’s a ladder, and you set it per audience.

Hidden · State · County · Area (town) · Exact

Everyone can be at one level, your mycelium at another, a specific community at a third. Most-specific wins, and at a tie the most private wins. The “Area” rung is deliberate: findable without being pinpointable.

Addresses you add for your goods & services are the opposite by design — their whole point is being found — and each one carries its own switches for Maps and for your public page.

Set it all in Profile → Location.

Your calendar: busy, or the details

Sharing a calendar doesn’t mean sharing your life.

Viewers see one of three things: nothing, busy blocks (no titles), or full details — again per audience, most-specific wins. Imported calendars go further: their titles stay yours alone unless you explicitly opt that calendar in.

Your to-do list follows the same per-audience grammar and starts hidden from everyone — undone work is nobody’s business until you decide it is.

Find both in Calendar → settings: “Who sees my calendar” and “My tasks — who sees them.”

Your financial picture — the most private thing here

If you’re seeking subsidized care, an honest picture of your means is what lets the network route fairly. So Lichen asks for it, and then protects it harder than anything else.

Who reads it, exactly: you, your active care team, and — named here because most platforms would bury it — the silicon side of Lichen’s rebalancing: the assistant and the mycelium’s routing algorithm read your financial picture to map the gap between what the economy has given you and what you need, and to route subsidies where the imbalance is real. Not admins. Not other members. Never donors. Never a score, never public, never compared.

And every line stays yours to hold back: mark any field “Omit from AI” — keep your credit score out while the assistant helps streamline your monthly budget — and any care entry can be written with “Omit from AI — sensitive medical/financial.” What you hold back never enters the collective AI system, the rebalancing algorithm included.

It lives in Concierge → Financial health profile, and filling it out is entirely optional.

The assistant: consent, both ways

The brain icon appears in each section of the app — Home, Marketplace, Calendar, Chat, your Drive. Tapping it asks the assistant to help with that section only — nothing is gathered until you open that door.

Consent runs both ways.

What your assistant reads for you. Collaboration between AI and OI — organic intelligence — is the premise of the platform, so the assistant is on by default, and every scope switches off — for real: your choices live in the database with your account, not on one device. Profile → Privacy holds the whole de-selection list: each section of the platform independently, and each of your groups and communities separately, so AI can help you in one space and stay out of another. A space can switch off its own AI too, and both sides are shown that honestly. Off means that scope’s data never reaches the assistant at all.

What other assistants read of you. When someone you talk with asks their assistant to brief them, it reads recent messages in that conversation — including the ones you wrote. You decide whether that’s allowed: Profile → Privacy → “Let other members’ assistants read my messages.” Switch it off and your words stay out of everyone else’s briefings. They’ll still see that you wrote, and can still read you in the app; only the machine is held back.

Your own threads with Claude are private by construction — readable by you alone, not by other members, not even by the founder. And when you ask Claude to edit your page or profile, it can: on by default, switchable off in Profile → Privacy, and it only ever acts when you ask it to, in your own thread, on your own page or a space you steward — reporting every change it makes.

In Chat, an assistant that is on receives recent messages from rooms you’re already in, summarizes rather than quotes, and is never handed your full history.

Two people, two switches, one conversation. Carbon decides; silicon organizes.

Notifications, and who hears from you

Two dials worth knowing:

Notification preference (Profile) — in-app only, or email as well, or off entirely.
Push on this device (Profile → Notifications) — per device, so your phone can buzz while your laptop stays quiet.

And two things that deliberately never notify: weaving someone into your mycelium is silent, and trusting them is private. Nobody is told they’ve been trusted, and no one can see a count.

Where your data lives

Your data sits in an encrypted, managed Postgres database, and every rule on this page is enforced at the database itself through row-level security — not just in the app’s interface. A switch you flip changes what the database will hand over, to anyone, through any door.

When you invite the assistant to help, the slice of data you consented to — that section, that tap — is sent to Anthropic’s Claude. Lichen sends nothing ambient, and your data is never sold, never advertised against, and never used to train anyone’s models.

The legal versions live at Privacy and Terms.