Privacy Policy

1. Introduction

Convene Market LLC, doing business as Luana Home ("we," "our," or "us"), respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our family organization application and related services.

2. Information We Collect

Account Information

• Email address (account owners)
• Password (encrypted)
• Household name
• Family member names and profile information
• Usernames for family member accounts (created by the account owner)

Usage Data

• Routine and task information you create
• Calendar events (when you connect your calendar)
• Photos you upload for the screensaver feature
• Device information for paired TVs

TV App Telemetry

When you open the Luana TV app, we record an anonymous device identifier and basic device info (platform, app version, locale, timezone, screen size) so we can measure how well our app works across different TVs. This data is not linked to your identity or your Luana account.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card information directly. Please refer to Stripe's privacy policy for information about how they handle your payment data.

Marketing Attribution Data

When you visit our site after clicking an ad or shared link, we may collect and store:

• Campaign identifiers from the URL (UTM parameters such as utm_source, utm_campaign, utm_content)
• Ad-platform click identifiers (Reddit rdt_cid, Meta fbclid, Google gclid) if the referring ad platform attaches them to the landing URL
• The referring site (origin only — we do not store the full referring URL)
• The first page you landed on and the time of your first visit

This information is stored in a first-party cookie (luana_attribution) for up to 30 days and, if you create an account, attached to your household record. We use it to measure which marketing channels and campaigns bring new customers, not to track you across other websites. You can delete this cookie at any time via your browser settings.

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Display your routines, calendar events, and photos on your TV
• Process your subscription payments
• Send important service notifications
• Improve our application and user experience
• Respond to your support requests

4. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade security including encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

5. Third-Party Services

We integrate with the following third-party services:

• Google Calendar: If you choose to connect your Google Calendar, we access your calendar events to display them on your TV. We only read calendar data; we do not modify your calendar. You can disconnect your Google Calendar at any time from your dashboard settings or from your Google Account permissions page at myaccount.google.com/permissions. We do not share or sell your calendar data to third parties. When you disconnect, cached calendar data is deleted within 24 hours.
• Apple Calendar (iCloud): If you choose to connect your Apple Calendar, we access your calendar events via iCloud to display them on your TV. We only read calendar data; we do not modify your calendar. Connection requires an app-specific password generated from your Apple ID settings. You can disconnect your Apple Calendar at any time from your dashboard settings, or revoke access by deleting the app-specific password at appleid.apple.com. We do not share or sell your calendar data to third parties. When you disconnect, cached calendar data is deleted within 24 hours.
• Microsoft Outlook: If you choose to connect your Outlook calendar, we access your calendar events via Microsoft Graph API to display them on your TV. We only read calendar data; we do not modify your calendar. You can disconnect your Outlook calendar at any time from your dashboard settings or from your Microsoft account permissions page at account.microsoft.com/privacy/app-access. We do not share or sell your calendar data to third parties. When you disconnect, cached calendar data is deleted within 24 hours.
• Other Calendars (ICS): You may connect other calendar services by providing an ICS feed URL. ICS is a standard calendar format supported by most calendar applications. When you provide an ICS URL, we periodically fetch calendar events from that URL to display on your TV. We only read the data provided by the ICS feed; we cannot modify your source calendar. You can disconnect any ICS calendar at any time from your dashboard settings. We do not share or sell your calendar data to third parties. When you disconnect, cached calendar data is deleted within 24 hours.
• Google Photos: If you choose to connect your Google Photos account, we use Google's Picker API to let you select photos to display on your TV screensaver. Selected photos are downloaded, optimized, and stored in your private Luana storage. We do not access your full photo library — only the photos you explicitly select. We store an OAuth token to maintain your connection; this token and all imported photos are deleted when you disconnect. We do not use your photos for advertising, analytics, or any purpose other than displaying them on your household TV. You can disconnect Google Photos at any time from your dashboard, or revoke access from your Google Account at myaccount.google.com/permissions. Luana's use of Google Photos data complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Amazon Alexa: See Section 6 below for details on our voice assistant integration.
• Stripe: For payment processing and subscription management.
• Open-Meteo: For weather data displayed on your TV (no personal data is shared).
• Meta (Facebook) Pixel & Conversions API: We use Meta's pixel and Conversions API to measure the effectiveness of ads we run on Facebook and Instagram. When you visit our site, the pixel reports anonymous page-view events to Meta. When you complete a signup or subscription, we also send a server-side event that includes a hashed (one-way) version of your email address so Meta can match the conversion to the ad that brought you. We do not share unhashed personal data with Meta. You can learn more in Meta's privacy policy.
• Reddit Pixel & Conversions API: We use Reddit's pixel and Conversions API to measure the effectiveness of ads we run on Reddit. When you visit our site, the pixel reports anonymous page-view events to Reddit. When you complete a signup or subscription, we also send a server-side event that includes a hashed (one-way) version of your email address so Reddit can match the conversion to the ad that brought you. We do not share unhashed personal data with Reddit. You can learn more in Reddit's privacy policy.

6. Voice Assistant Integration (Amazon Alexa)

Luana integrates with Amazon Alexa through the "My Luana" skill, allowing you to check routine status, mark tasks complete, and access calendar information using voice commands.

How Voice Commands Work

When you speak to Alexa, your voice is processed entirely by Amazon's systems. Luana does not receive, process, or store any audio recordings. We only receive a text interpretation of your request (for example, "how are the kids doing") after Amazon has processed your voice.

Data Accessed by the Alexa Skill

When you use the My Luana skill, we access the following data from your Luana account to respond to your requests:

• Family member names
• Routine names and completion status
• Calendar events and schedules

Account Linking

To use the Alexa skill, you must link your Luana account using secure OAuth 2.0 authentication. This creates a secure connection between your Alexa account and your Luana household. You can unlink your account at any time through the Alexa app, which immediately revokes the skill's access to your Luana data.

Voice Data Storage

Luana does not store voice recordings. All voice processing is handled by Amazon. We only log text-based request data (what you asked) for troubleshooting and service improvement purposes. For information about how Amazon handles your voice data, please refer to the Alexa Privacy Settings and Amazon Privacy Notice.

Disabling Voice Access

You can disable voice access to Luana at any time by:

• Disabling the My Luana skill in the Alexa app
• Unlinking your account in the Alexa app's skill settings
• Saying "Alexa, disable My Luana skill"

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

8. Data Security and Breach Notification

We implement appropriate technical and organizational measures to protect your personal data. In the unlikely event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law. Notification will be sent to the email address associated with your account.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Withdraw consent for optional data processing

To exercise these rights, please contact us at support@myluanahome.com, or visit our account deletion page to request data or account deletion.

10. Children's Privacy

Our service is designed for family use, including children. We take the privacy of children seriously and comply with the Children's Online Privacy Protection Act (COPPA).

Family Member Accounts

Account owners (parents or guardians) can create login accounts for family members, including children under 13. These accounts are created and managed entirely by the parent — children cannot create their own accounts. The parent sets the child's username and password.

Information Collected from Children

When a child uses a family member account, we collect only the minimum information necessary to provide the service:

• Username (created by the parent)
• Display name and optional profile photo (set by the parent or child)
• Routine completion activity (which tasks were marked done)
• Star balance and reward history
• Calendar events they assign themselves to

We do not collect email addresses, phone numbers, physical addresses, or any other contact information from children. We do not use children's data for advertising or marketing purposes.

Parental Consent

Parental consent is obtained through the account creation process. Only the account owner (parent or guardian) can create family member accounts, and doing so requires an active paid subscription with verified payment information. The parent's creation of a child's account constitutes verifiable parental consent for the collection of the child's information as described above.

Parental Rights

Parents have full control over their child's account and data. At any time, a parent can:

• Review their child's activity (routines, stars, calendar) from the parent dashboard
• Change their child's username or reset their password
• Remove their child's login (the child can no longer sign in, but their routine history and stars are preserved)
• Delete their child's family member profile entirely, which removes all associated data
• Delete the entire household account, which removes all family data

To exercise these rights, parents can use the Family page in their dashboard, or contact us at support@myluanahome.com.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

Convene Market LLC
Email: support@myluanahome.com