This Privacy Policy describes how Luya Labs Inc. (“LUYA”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our websites, use the LUYA mobile application, connect a Luya X-1 growing system, participate in Founder 100, contact customer support, or otherwise use LUYA products and services.
We care about privacy and aim to handle personal information in a transparent, reasonable and secure manner. If you do not agree with this Privacy Policy, please discontinue use of the applicable services.
Third-party websites, platforms and services may have their own privacy practices, and this Policy does not govern their independent processing activities.
This Privacy Policy applies to:
Depending on how you interact with LUYA, we may collect:
We may collect products purchased, order numbers, purchase dates, shipping and billing addresses, refund or return information, Founder 100 purchase status, subscription information, and seed tray or consumable orders.
Full payment card information is generally processed directly by our payment service providers. Unless necessary to provide the service, LUYA does not itself store complete payment card numbers.
When you connect or use a LUYA device, we may collect technical information such as:
Because LUYA is a smart growing system, we may collect temperature, humidity, lighting parameters, irrigation status, pump and fan operation, nutrient usage, growing-cycle information, seed and tray type, tray identifiers, growth stage, harvest timing, alerts and abnormal conditions, and other plant-related system data.
We may use this information to operate the growing system, optimize growing strategies, improve product performance, and develop new growing recipes and services.
Certain LUYA products include cameras. Their primary purpose is to observe plant growth, create plant-growth time series, identify growth stages, analyze plant coverage, colour and condition, detect mold, yellowing, water stress or other abnormalities, optimize growing parameters, and enable features such as time-lapse imagery.
Images or video may be processed locally on the device or through LUYA cloud infrastructure.
LUYA cameras are designed primarily to observe plants within the growing system, not to monitor people in the household. If people, home surroundings, or other personal information are incidentally captured within the camera's field of view, we will treat that information in accordance with this Privacy Policy.
Unless separately disclosed and, where required, appropriately authorized, LUYA does not use its plant-monitoring cameras for facial recognition, identity verification, biometric identification, or continuous monitoring of household members.
We may use anonymized, de-identified, or aggregated plant images and growing data to improve algorithms, train plant-analysis models, develop growing strategies, and conduct product research.
When you use the LUYA App or visit our websites, we may automatically collect:
LUYA websites and services may use cookies, pixels, SDKs, local storage, analytics technologies, advertising identifiers and similar technologies.
To operate websites, apps, authentication and device services.
To understand traffic, usage and product performance.
To remember settings and preferences.
To measure campaigns, attribute conversions, create advertising audiences and, where permitted, deliver more relevant advertising.
When you contact us, we may collect contact information, support tickets, emails and chat records, device diagnostic information, telephone or video-support information, and photos or videos you voluntarily provide.
We use this information to troubleshoot issues, provide support, and improve LUYA products.
If you participate in Founder 100 or another LUYA research program, we may also collect application responses, user-profile information, product feedback, survey responses, likelihood-to-recommend information, recorded interviews, unboxing videos, growing photos and videos, product reviews, bug reports, usage scenarios, and other user-generated content.
Where an interview is recorded, we will provide appropriate notice. Use of Founder 100 content for marketing may also be governed by the applicable Founder 100 Participation Terms and content permissions.
Based on plant variety, growth stage, environmental conditions, device status and historical growing performance.
Account security, authentication, fraud prevention, device security, cybersecurity, and investigation of abnormal activity.
Service notices, order updates, device alerts, software updates, security notices and customer-support communications.
Where permitted by law or with required consent: product updates, Founder Program information, new-product announcements, growing content, offers and event information. You may unsubscribe from marketing emails at any time.
LUYA may use machine learning, computer vision and other artificial-intelligence technologies to analyze plant images, growth speed, plant colour, plant coverage, environmental parameters, historical growing data and device status.
These technologies may be used to identify plant growth stages, detect abnormal conditions, optimize growing environments, predict harvest timing, provide personalized growing recommendations and improve LUYA plant models.
Where appropriate, we take reasonable steps to reduce the use of directly identifying personal information in model-development activities where such information is not necessary.
We do not sell personal information to data brokers simply in exchange for money. However, we may disclose information to third parties when reasonably necessary to operate LUYA.
Cloud infrastructure, database and storage, authentication, payment processing, shipping and logistics, customer-support platforms, email and messaging, analytics, error monitoring, and advertising and marketing technology providers. These providers generally process information to perform services on our behalf.
Where reasonably necessary, partners supporting Founder 100, Lighthouse projects, logistics, customer service, events or other collaborations.
To comply with law, respond to court orders or valid government or regulatory requests, protect LUYA, users or public safety, or investigate fraud, security incidents or unlawful conduct.
If LUYA is involved in financing, a merger, acquisition, restructuring, sale of assets or similar transaction, information may be disclosed or transferred as part of that transaction, subject to appropriate protections.
Certain U.S. privacy laws may define some transfers of information through advertising technology as a “sale” or “sharing” of personal information even when LUYA does not receive cash in exchange for the data. For example, certain advertising cookies, pixels, advertising identifiers and cross-site advertising technologies may constitute “sharing” under applicable privacy laws.
Where required by applicable law, LUYA will provide appropriate opt-out mechanisms, which may include a “Do Not Sell or Share My Personal Information” control. Where legally required, LUYA will also process applicable Global Privacy Control (“GPC”) signals.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide LUYA services, maintain accounts, support warranties and customer service, comply with financial and tax requirements, resolve disputes, prevent fraud and meet legal obligations.
Different categories of information may have different retention periods. When information is no longer reasonably needed, we may delete, anonymize, de-identify or aggregate it. Information that has been anonymized or de-identified so that it cannot reasonably be linked to an individual may be retained for research, product improvement and statistical purposes.
LUYA uses reasonable administrative, technical and organizational safeguards designed to protect personal information. Depending on the circumstances, these may include encryption, access controls, authentication, network-security measures, logging and monitoring, permission separation, security updates and backups.
No Internet transmission or electronic storage system can be guaranteed to be completely secure. If you believe your LUYA account or device may have been compromised, please contact us promptly.
Depending on where you live and whether applicable law covers LUYA, you may have rights to:
If the California Consumer Privacy Act (“CCPA”), as amended by the CPRA, applies to LUYA, California residents may have the right to know, access, delete and correct personal information; to opt out of sale or sharing; to limit certain uses and disclosures of sensitive personal information; and to non-discrimination.
Where permitted by law, an authorized agent may submit certain requests on a consumer's behalf. If LUYA engages in activity that qualifies as a “sale” or “sharing” under applicable law, LUYA will provide the legally required opt-out mechanisms and will honour applicable Global Privacy Control signals where required.
If the New Jersey Data Privacy Law or another applicable U.S. state privacy law applies to LUYA, residents of those states may have rights including confirmation of processing, access, correction, deletion, data portability, opting out of targeted advertising, sale of personal data or certain profiling, and other rights provided by applicable law.
LUYA will process qualifying requests as required by applicable law.
You may submit a privacy request by contacting privacy@luyaxyz.com.
Please indicate whether you would like to access your information, correct information, delete your account, delete personal information, opt out of applicable advertising-data sharing, unsubscribe from marketing, or exercise another privacy right.
To protect your information, we may take reasonable steps to verify your identity.
LUYA products and services are primarily intended for adults and household purchasing decision-makers and are not directed to children under 13.
LUYA does not knowingly collect personal information online from children under 13 unless applicable legal requirements are satisfied and any required parental or guardian consent has been obtained. If we learn that personal information from a child under 13 was collected without appropriate authorization, we will take reasonable steps to delete it.
If you believe a child has provided personal information to LUYA, please contact us.
LUYA may use cloud infrastructure, vendors and technical providers located in the United States or other countries. As a result, information may be processed or stored outside the country or region where you live.
Where required by applicable law, we will use appropriate measures designed to protect data transferred internationally.
You may unsubscribe from marketing emails at any time — by clicking the “Unsubscribe” link in a marketing email, changing account settings, or contacting LUYA.
Even if you opt out of marketing, we may continue sending necessary non-marketing communications such as order notices, security alerts, product-safety information, important device notices and account communications.
Where the LUYA App provides account functionality, you may request account deletion using the method provided in the App or by contacting LUYA through the privacy channels listed above.
After account deletion, certain information may be retained where reasonably necessary for legal obligations, financial records, fraud prevention, warranty support, dispute resolution or security purposes.
LUYA services may integrate with third-party platforms such as Apple, Google, AWS, payment providers, email providers, analytics services, advertising platforms and social-media services.
These third parties may independently process personal information. We encourage you to review their respective privacy policies.
We may update this Privacy Policy as LUYA products, technologies, legal requirements or business practices evolve. If we make material changes, we may provide notice through our website, the LUYA App, email or another appropriate method.
The “Last updated” date at the top of this Policy indicates the latest revision.
If you have questions about this Privacy Policy, your personal information, or LUYA privacy practices, please contact:
Luya Labs Inc. — Privacy Team
Email: privacy@luyaxyz.com
Address: 12 Bellaire Drive, Princeton, NJ 08540, USA