Privacy, in plain language.

Scope and accountability

This notice applies to the Loonie website, application, and support communications. Loonie is responsible for the personal information under its control, including information processed by service providers on its behalf.

Questions, requests, or complaints can be sent to Loonie's Privacy Lead at withloonie@gmail.com.

Information we collect

Account information

Your email address, authentication status, session information, and account timestamps. Authentication is provided by Supabase. Loonie does not retain your password; Supabase stores a protected hash of it for authentication.

Household planning information

Information you choose to enter, including household and person names, account names and types, account priorities, contribution-room figures, allocation targets, tickers, portfolio values and snapshots, and saved contribution plans.

Support and technical information

Messages you send to support and the information needed to investigate a request. Hosting and security systems may also process standard technical information such as timestamps, IP addresses, browser or device details, and request diagnostics.

Why we use information

• Create and secure your household-manager account.
• Store the household planning information you choose to record.
• Calculate portfolio views and contribution plans from your inputs.
• Maintain snapshots and plan history for your future use.
• Respond to support, privacy, and security requests.
• Protect the service, diagnose errors, and prevent misuse.
• Understand aggregated product usage and improve the service.
• Meet legal obligations and enforce the Terms of Use.

If Loonie wants to use personal information for a materially different purpose, we will explain that purpose and obtain consent where required.

Providers and disclosures

Loonie uses service providers to operate the service. These currently include Supabase for authentication and database services, Vercel for hosting and privacy-focused web analytics, and Resend for transactional email. Providers may process information in jurisdictions where they or their subprocessors operate, where it may be subject to local law.

We may also disclose information when required by law, to protect the service or its users, or as part of a business reorganization with appropriate protections. Loonie does not sell or rent personal information.

Analytics and cookies

Loonie uses essential cookies to keep you signed in and protect your authenticated session. Vercel Web Analytics records aggregated page and device information without third-party advertising cookies and is designed not to associate page views with an identified person or IP address. Loonie does not use advertising trackers.

Retention and deletion

We retain account and household information while your account is active and for as long as reasonably needed to provide the service, protect its security, resolve disputes, or meet legal obligations. Provider backups, security logs, and records needed for legal purposes may remain for their applicable retention periods after deletion.

You can delete your household and account directly from Household settings or request deletion through the contact page. After verifying the request, we will delete or de-identify information that is no longer required, subject to legal and technical retention needs.

Safeguards

Loonie uses access controls, encrypted transport, provider-managed infrastructure, row-level database security, and server-side household checks intended to protect information against unauthorized access, use, or disclosure. No online service can guarantee absolute security.

Please use a unique password and contact us promptly if you believe your account or information has been compromised.

Your choices and requests

You can update much of your household information directly in Loonie. You may also ask to access, correct, or delete personal information, or challenge how it has been handled. Send requests from the email address associated with your account so we can verify your identity. We will respond within the time required by applicable law.

You may withdraw consent to optional uses of your information, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent needed to provide the service may limit or prevent continued use of the affected features.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Provincial privacy regulators may also have jurisdiction depending on where you live.

Changes to this notice

We may update this notice as the service and its providers change. The updated date will appear at the top of this page. We will provide additional notice when a change materially affects how personal information is handled.