Privacy Policy

A. Information you provide in the Lomnera mobile app

• •Account and profile information: Name, email address, authentication credentials or OAuth sign-in details (such as Sign in with Apple or Google), and profile preferences.
• •Property and home information: Addresses and other details about properties you add, including physical address and related home profile data.
• •Uploaded content: Photos and videos you capture or upload for scanning and environment analysis around the home; documents you upload (such as inspection reports/PDFs, contracts, warranties, and receipts); and related OCR/extracted findings.
• •Chat and free-form content: Messages you send through support or AI chat.
• •Voice / audio (when you use those features): Audio you submit for transcription or related processing.
• •Onboarding and preferences: Basic role selections (for example, homeowner, renter, or buyer) and preferences you choose later.
• •Payment information (when paid features are offered): Billing for mobile subscriptions is processed through Apple or Google when you purchase through those stores. The current production mobile release may be free-only; when paid subscriptions are offered, we do not store full card numbers.

B. Information collected automatically in the Lomnera mobile app and backend services

• •Device and technical information: Device type, operating system, and identifiers needed to operate accounts, sessions, and push notifications.
• •Product usage and engagement: Feature usage and related product-performance events collected through Lomnera's product analytics systems operated with our backend services.
• •Error and performance diagnostics: In the Lomnera mobile app and backend services (not on the lomnera.com marketing site), application error and performance monitoring data may be processed through Sentry to help us identify, investigate, and resolve technical issues. Diagnostic information associated with errors may include technical context about the failing request or session. When enabled, Sentry is configured not to send default PII.
• •Infrastructure logs and metrics: Operational logs and metrics used to run and monitor the Service on AWS (including CloudWatch).
• •Location: With your permission, the mobile app may access precise device location to support weather features and address assist. Separately, property addresses and geocoded coordinates associated with homes you add may be stored as part of your property profile. You can deny or revoke location permission in device settings.
• •Maintenance calendar: The in-app maintenance calendar displays tasks stored in your Lomnera account. It does not read or write to Apple Calendar or Google Calendar.

C. Information collected on lomnera.com (website)

• •Website early access: If you request early access on lomnera.com, we collect the email address you submit, your affirmative consent to receive Lomnera Launch Updates, a consent/disclosure version identifier, attribution fields (such as first-touch UTM parameters), optional details you may add in the same signup flow (such as first name, role, postal code, or interests), and, if already present in your browser, an existing HubSpot visitor cookie (`hubspotutk`). HubSpot sends a confirmation email; your Launch Updates subscription is confirmed only after you complete that double opt-in step.
• •Inspector Pilot applications: If you apply for the Lomnera Inspector Pilot on lomnera.com, we collect the information you submit (such as name, company, state, email, and related professional details) so we can evaluate and respond to your application. Applications may be delivered to our team by email through Resend. Website server/function logs may retain limited operational records related to submission handling; we do not intentionally log full applicant PII in production application logs.
• •Website analytics: On lomnera.com, we use Vercel Web Analytics to understand aggregate site traffic and page usage, plus limited custom events that do not intentionally include email addresses or form contents. See Website Analytics & Cookies.
• •Website storage and cookies: First-party session storage may hold first-touch UTM/referrer attribution for early-access signup; local storage may hold a UI preference such as dismissing the announcement bar. See the cookies notice for details.
• •Website account-deletion requests: If you use Delete account on this website, we process the email and one-time verification code you submit to verify and queue deletion of a Lomnera app account through our backend privacy APIs.

We use the information we collect to:

• •Provide, maintain, and improve the Lomnera Service
• •Analyze photos, documents, and related content using AI to identify issues, extract information, and support environment/image analysis features in the app
• •Generate DIY guides and maintenance suggestions
• •Help you discover local contractors and service providers through public listing and location search providers (such as Google Places). This is listing/discovery functionality; Lomnera does not currently transmit your personal or home information to contractors for quote requests, bookings, referrals, or leads
• •Send maintenance reminders via push notifications, email, and optional SMS (after phone verification and SMS opt-in). Lomnera does not access your device calendar or reminders.
• •Process payments and manage subscriptions when paid features are offered through Apple or Google
• •Respond to support and Inspector Pilot requests
• •Detect, prevent, and address technical issues, abuse, and fraud
• •Understand feature usage, reliability, and product performance through product analytics in the app/backend
• •Operate website analytics and early-access / pilot lead handling for lomnera.com (separate from in-app product analytics)

Service improvement vs. third-party AI training: We may use information you provide and generate on the Service to operate, maintain, debug, and improve Lomnera's own features and infrastructure. Separately, photos, documents, messages, and other content you submit for AI features may be sent to third-party AI providers (currently including OpenAI) so those providers can process the request and return results. This Privacy Policy does not claim that OpenAI uses Lomnera API content to train its foundation models, and it does not claim Zero Data Retention unless Lomnera has separately confirmed that arrangement. Provider use of data is governed by our agreements with them and their published terms. For current details about a specific provider configuration, contact privacy@lomnera.com.

In the Lomnera mobile app, Lomnera uses AI to analyze photos and documents you upload. This includes:

• •Defect / environment scanning: Images of surroundings or concerns around the home may be processed to identify and classify issues and provide informational guidance.
• •Document analysis: Documents are processed to extract relevant information.
• •AI Chat: Conversations may reference your property data, documents, and scans to provide more personalized responses.

Real-time voice and live camera streaming features are not currently marketed as generally available unless separately described in-product.

Important: AI outputs are for informational purposes only and do not replace professional advice. Always consult qualified professionals for significant decisions. See also AI & Safety.

We use trusted third-party providers to operate Lomnera. These vendors process data on our behalf only as needed to deliver the Service and are contractually required to protect your information. Scope is noted below.

Mobile app and backend services

• •Amazon Web Services (AWS): Cloud hosting, file storage (including uploaded photos and documents), databases, core backend infrastructure, and infrastructure monitoring (including CloudWatch).
• •OpenAI: Service provider used to process supported AI requests (vision analysis of scan photos, document extraction, contextual chat, DIY guide generation, and maintenance suggestions). Content you submit for those features may be sent to OpenAI for processing. Retention of provider-side copies is governed by applicable OpenAI processing terms and our configuration with them; we do not claim Zero Data Retention here.
• •Google Places / Geocoding: Address suggestions, place details, and contractor/business discovery may send search or location information to Google so we can return nearby or matching results. Lomnera does not currently forward your personal or home information to contractors for quotes, bookings, referrals, or leads.
• •OpenWeatherMap: Weather forecasts and related safety/risk surfacing for property or device location context.
• •RentCast and public-records sources: Property enrichment (for example, year built or square footage) when inspection or user-provided data is incomplete.
• •Sentry: Application error and performance monitoring in the Lomnera mobile app and backend services when enabled. Not used on the lomnera.com marketing site.
• •Apple / Google: App distribution, Sign in with Apple / Google authentication where offered, push delivery infrastructure, and in-app purchase processing when paid mobile subscriptions are offered.
• •Push notification delivery: Device push tokens and related delivery metadata may be processed through Apple Push Notification service, Firebase Cloud Messaging, or equivalent mobile push infrastructure used by the app.

Website (lomnera.com)

• •Vercel: Hosting for lomnera.com, edge/server function logs for website APIs, and Vercel Web Analytics for website traffic measurement.
• •HubSpot: Customer relationship management for website early-access requests (email, Launch Updates consent, attribution, and any optional details you submit). HubSpot manages confirmation (double opt-in) and unsubscribe for Lomnera Launch Updates. Deleting a Lomnera app account does not automatically delete a HubSpot marketing contact.
• •Resend: Transactional email delivery for Inspector Pilot applications submitted on lomnera.com.

Not used for the current production mobile release (free-only): Stripe and RevenueCat are not active payment processors for the current free-only mobile release. If web checkout or a third-party subscription SDK is later enabled, we will update this Policy before treating those providers as active subprocessors for that data.

We may update subprocessors from time to time. For questions about our vendors, contact privacy@lomnera.com.

Lomnera builds a long-term understanding of your home — what we call home memory — from the content you choose to add in the mobile app.

When you scan photos, upload documents, or add property details, we store that information and link it to your property profile so the Service can:

• •Provide contextual AI chat that references your scans, documents, and property history
• •Generate personalized maintenance plans and recommendations
• •Surface relevant DIY guides, contractor suggestions, and reminders over time

Home memory stays associated with the property profiles in your account unless you delete the underlying scans, documents, or properties.

You can delete individual scans or documents at any time, or delete your entire account through Profile/Settings or Delete account. Account deletion removes your home memory and associated content from live systems according to our deletion workflow, subject to limited retention described in Data Retention. App account deletion does not automatically delete a HubSpot marketing contact created from a website early-access request. See Privacy Choices.

We do not sell your personal information. We may share information in these limited circumstances:

• •Service Providers: Vendors that help operate the Service (hosting, AI processing, error monitoring, website hosting/analytics/CRM, transactional email).
• •Listing and location providers: When you use contractor or business discovery in the app, we may send search or location information to applicable public listing/location providers (such as Google Places) to return results.Lomnera does not currently transmit your personal or home information directly to contractors for quote requests, bookings, referrals, or leads.
• •Legal Requirements: When required by law or to protect rights and safety.
• •Business Transfers: In connection with a merger, acquisition, or sale.
• •Aggregated Data: Anonymous, aggregated stats that cannot identify you.

We implement industry-standard measures to protect your data, including:

• •Encryption in transit (HTTPS/TLS)
• •Encryption at rest for primary AWS data stores
• •Secure authentication, including optional device biometric unlock while you remain signed in on a supported device. Lomnera does not receive or store your biometric templates from the device unlock feature
• •Access controls limiting employee access

No method of transmission is 100% secure. We cannot guarantee absolute security. See also Security.

We retain personal information only as long as needed for the purposes described in this Policy, subject to the categories below. Deletion is not always instantaneous; verified account-deletion requests are processed through a durable backend workflow, with retries as needed.

• •Account and profile data: Retained while your account is active. After a verified deletion request, account and associated personal data are deleted or anonymized from live production systems, except records we must retain for legitimate legal, security, or fraud-prevention purposes.
• •Home, property, and user content: Retained while needed to provide the Service, then removed according to the deletion workflow (including soft-delete cleanup jobs for residual content after a short operational period).
• •Raw product analytics: Raw analytics logs are retained for approximately 90 days, then removed under our analytics retention schedule.
• •Security and access logs: Retained for limited security and operational periods (for example, revoked or expired authentication sessions are cleaned up on a scheduled basis).
• •Backups: After live deletion, copies may remain temporarily in encrypted backups until routine backup expiration. Backup copies are not used as live account data.
• •Marketing / HubSpot contacts: Website early-access and Launch Updates contacts remain separate from app account deletion until you unsubscribe or request deletion of that marketing contact.
• •Vendor copies: Limited copies processed by service providers (such as AI, email, or error-monitoring vendors) are governed by applicable provider processing and retention terms.

Depending on your location, you may have the right to:

• •Access, correct, or delete your personal information
• •Request information about data we hold
• •Opt out of marketing communications
• •Disable location services or notifications

Practical channels are listed on Privacy Choices. To exercise these rights, contact us at privacy@lomnera.com. California residents: see Section 10 below or email privacy@lomnera.com.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, provides additional rights regarding personal information. This section summarizes how those concepts apply to Lomnera based on the categories of information we actually collect. It is not a certification of compliance with every CCPA/CPRA obligation.

Categories of personal information we collect

• •Identifiers (such as name, email address, account ID, and device identifiers)
• •Customer records / account profile details you provide
• •Commercial information (such as subscription or purchase status when paid features are offered through app stores)
• •Internet or other electronic network activity (such as product usage events, diagnostic/error data, and website analytics events)
• •Geolocation data (precise device location when you grant permission; property addresses/coordinates you add)
• •Sensory or similar information you upload (photos, videos, documents, and audio submitted for supported features)
• •Inferences drawn from the above to personalize home-related features (for example, maintenance suggestions grounded in your records)

Sources

• •Directly from you (account, uploads, chat, preferences, website forms)
• •Automatically from your device/app/website use (usage, diagnostics, website analytics)
• •From service providers and public/property data sources used to operate features (for example, address or property enrichment providers)

Business purposes

We use this information to provide the Service, communicate with you, secure and debug the Service, understand product performance, personalize in-product features, process payments when offered, and comply with law — as described in Sections 2–4.

Categories of recipients

Service providers/subprocessors listed in Section 4 (including listing and location providers used for contractor/business discovery); and legal or business-transfer recipients as described in Section 6. Lomnera does not currently share personal or home information with contractors for quote, booking, referral, or lead handoff.

Sale and sharing

We do not sell personal information for money. We also do not “share” personal information for cross-context behavioral advertising as those terms are commonly understood under the CPRA. If that practice changes, we will update this Policy and provide any required opt-out mechanism.

Your California rights

• •Right to know / access categories and specific pieces of personal information we have collected about you
• •Right to correct inaccurate personal information
• •Right to delete personal information, subject to exceptions
• •Right to opt out of sale/sharing (not applicable to our current practices described above)
• •Right to non-discrimination for exercising CCPA/CPRA rights

How to submit a request

Email privacy@lomnera.com with the subject line “CCPA Request,” your full name, the email associated with your account, and the type of request (know, correct, delete, or other). You may also use Delete account or in-app account settings to delete your app account; see Privacy Choices.

We will verify requests by confirming control of the email address on the account (and may request additional information reasonably needed to verify identity). You may designate an authorized agent to submit a request on your behalf; we may require written authorization and verification that the agent is permitted to act for you.

Lomnera is not intended for users under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will post updates on this page and change the effective date above. Material changes may also be noted in the app where appropriate.

Questions about this Privacy Policy? Contact Lomnera LLC, a Georgia limited liability company:

Privacy requests: privacy@lomnera.com

Legal notices: legal@lomnera.com

Privacy Choices: lomnera.com/privacy-choices