Privacy Policy

Introduction

Luxardo Labs LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including:

• Our mobile applications (currently LuxBox for iOS)
• Our website (luxardolabs.com)
• Our email communications and newsletters
• Any future apps or services we provide

By using any of our services, you agree to the collection and use of information in accordance with this policy. If you disagree with our policies and practices, please do not use our services.

Please also review our:

• Terms of Service
• Cookie Policy

Information We Collect

1. LuxBox App

Information You Provide

• Gift card details (retailer, balances, expiration dates)
• Card numbers and PINs (encrypted on device)
• Card images and transaction notes
• App preferences and settings

Information Collected Automatically

• Anonymous analytics (if enabled in Settings)
• Crash reports and diagnostics
• Device type and iOS version

We DO NOT collect from the app:

• Your name, email, or phone number
• Exact monetary values (converted to ranges)
• Location data
• Device identifiers or advertising IDs

2. Our Website

Information Collected Automatically

• IP address and browser information
• Pages visited and time spent
• Referring website
• Device and operating system
• Cookies and similar technologies

Information You Provide

• Email address (newsletter signup)
• Name (if provided in forms)
• Any information in contact forms
• Feedback and support requests

3. Email Marketing

Information We Collect

• Email address
• Name (if provided)
• Email engagement (opens, clicks)
• Subscription preferences
• Opt-in/opt-out history

4. Future Services

As we develop new apps and services, we will update this policy to reflect any additional data collection practices. We will notify you of significant changes.

How We Use Your Information

App Data Usage

1. Provide Core Functionality
   • Store and manage your gift cards
   • Track balances and transactions
   • Send expiration reminders (if enabled)
   • Sync data across your devices via iCloud
2. Improve Our Apps
   • Analyze usage patterns
   • Identify and fix bugs
   • Develop new features
   • Optimize performance

Website & Marketing Data Usage

3. Communicate With You
   • Send newsletters (with your consent)
   • Respond to support requests
   • Announce new features or apps
   • Provide security updates
4. Improve Our Website
   • Understand visitor behavior
   • Optimize content and user experience
   • Measure marketing effectiveness
   • Ensure website security

General Uses

5. Legal and Safety
   • Comply with legal obligations
   • Protect our rights and property
   • Prevent fraud and abuse
   • Ensure service security

Data Storage and Security

App Data

On Your Device

• All gift card data is stored locally using Core Data
• Sensitive data (card numbers, PINs) is encrypted using ChaChaPoly encryption
• Encryption keys are stored in iOS Keychain

In Your iCloud Account

• Data syncs privately through CloudKit to your personal iCloud account
• Only you can access your synced data
• We cannot access your iCloud data

Website & Email Data

Our Service Providers

• Website hosted on OVHcloud
• Email managed by Microsoft
• Analytics processed by Google Analytics and LuxAnalytics
• All providers are selected for their security practices

Security Measures

For Apps:

• 256-bit encryption for sensitive data
• Biometric authentication options
• Secure iOS Keychain storage
• No company servers store your card data

For Website & Email:

• SSL/TLS encryption for data transmission
• Secure password protection
• Regular security updates
• Limited access to personal information

Third-Party Services

For Our Apps

Analytics - LuxAnalytics

• Our first-party analytics service
• Collects anonymous usage data
• Can be disabled in app Settings
• Data is sanitized to protect privacy

Crash Reporting - Sentry

• Collects crash reports to help us fix bugs
• No personal information included
• Only technical error information

Apple Services

• CloudKit: For syncing data across your devices
• StoreKit: For processing premium subscriptions
• All transactions handled by Apple

For Our Website & Marketing

Website Analytics

• Google Analytics and LuxAnalytics
• Tracks visitor behavior and traffic sources
• Uses cookies (see Cookie Policy below)

Email Services

• Microsoft (Office 365/Outlook)
• Manages email communications
• Professional email hosting

Other Services

• Payment processors for purchases
• Customer support tools
• Content delivery networks (CDN)

Your Privacy Rights

You Have the Right To:

1. Control Data Collection
   • Disable app analytics in Settings > Privacy
   • Manage cookie preferences on our website
   • Choose email communication preferences
2. Access Your Data
   • Export app data in multiple formats
   • Request copies of the data we have about you
   • See what information we've collected
3. Delete Your Data
   • Delete app data anytime
   • Unsubscribe from emails instantly
   • Request deletion of your information
4. Manage Permissions
   • Control app permissions (camera, photos, notifications)
   • Update email preferences
   • Opt out of marketing communications
5. Data Portability
   • Export your gift card data
   • Transfer to other services
   • Download in standard formats

Data Sharing

We DO NOT:

• Sell your personal information
• Share data with advertisers
• Use tracking across apps or websites
• Share your gift card data with merchants

We ONLY share data:

• With Apple for iCloud sync (your private iCloud account)
• Anonymous crash reports with Sentry
• When required by law

Children's Privacy

LuxBox is not intended for children under the age of 13. We do not knowingly collect personal information from individuals under the age of 13. If you are a parent and believe your child has provided us with personal information, please contact us.

California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt out of sale (we don't sell your data)
• Right to non-discrimination

European Privacy Rights (GDPR)

EU residents have additional rights:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict processing
• Right to object to processing

Legal Basis: We process your data based on your legitimate interests (providing the service you requested) and your consent (for analytics purposes).

Cookies and Tracking Technologies

Website Cookies

Our website uses cookies to:

• Remember your preferences
• Analyze website traffic
• Improve user experience
• Enable certain website features

Types of Cookies

• Essential: Required for website function
• Analytics: Help us understand usage
• Preferences: Remember your settings
• Marketing: Track campaign effectiveness

Managing Cookies

You can control cookies through your browser settings. Disabling cookies may limit website functionality. For more details, see our Cookie Policy.

Email Marketing

When We Email You

• Newsletter (with consent)
• Important service updates
• Security notices
• Responses to your inquiries

Unsubscribing

Every marketing email includes an unsubscribe link. You can also email us at support@luxardolabs.com to update preferences.

We Never

• Sell your email address
• Send spam
• Share with third parties (except our email service provider)

Data Retention

We keep data only as long as necessary to provide our services and comply with legal obligations:

LuxBox App

• Your Gift Card Data: Stored only on your device and iCloud - you control when to delete it
• Anonymous Analytics: 13 months (to allow year-over-year comparisons)
• Crash Reports: 90 days (to fix bugs)

Website

• Contact Form Submissions: 2 years (for customer service follow-ups)
• Website Analytics: 13 months (for year-over-year comparisons)
• Server Logs: 30 days (for security and troubleshooting)
• Cookie Consent Records: 13 months (to demonstrate compliance)

Communications

• Newsletter Subscriptions: Until you unsubscribe + 30 days
• Email Communication Logs: 2 years
• Support Correspondence: 2 years

Legal Requirements

• Financial Records: 7 years (tax law requirements)
• Legal Documents: 7 years
• Security Incident Logs: 3 years

You can request deletion of your data at any time by contacting us at support@luxardolabs.com. Some data may need to be retained for legal obligations.

International Data Transfers

Your data may be processed in the United States, where our services are based. By using our services, you consent to the transfer of your data. We ensure appropriate safeguards are in place.

Changes to This Privacy Policy

We reserve the right to update our Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date
• Posting a notice on our website
• Notifying app users of significant changes
• Emailing subscribers about material changes

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: support@luxardolabs.com
Website: https://www.luxardolabs.com/legal/privacy
Mailing Address:
Luxardo Labs
780 Savannah Crossing Way
Town and Country, MO 63017

App Store Privacy Information

Data Used to Track You

None

Data Linked to You

• Identifiers (anonymous user ID for analytics)
• Usage Data (if analytics enabled)

Data Not Linked to You

• Diagnostics (crash reports)

Privacy Practices

• Data encryption in transit and at rest
• Optional analytics that can be disabled
• No data used for tracking
• Minimal data collection