What “nothing here watches you” means, exactly.

The life inside is not collected.

The Journal, the keys, who’s home, names, notes, routines - all of it lives on the Core, on your shelf, readable by your household alone. It is not uploaded, mined, sampled, or used to train anything. Connected mode moves sealed envelopes we cannot open; the honest ledger lists the entire envelope. This isn’t a promise of restraint - the product is built so there is nothing to restrain.

We market like a normal company.

This site uses ordinary marketing tools: analytics (Google Analytics) to see which pages get read, and a CRM (HubSpot) to hold reservation emails and send the occasional letter. We measure pages, not people. Decline cookies and the site works identically - no nagging, no degraded version.

Where the ordinary ends.

We do not sell or rent your data. We do not build advertising profiles, buy third-party data to “enrich” your record, or share your details with ad brokers. If you unsubscribe, you’re gone from the list; if you ask what we hold, we send it; if you ask us to delete it, we do. The marketing stack knows you visited a website - it will never know anything about a home.

Flipping the switch severs the cloud on the spot: its keys stop working and the relay forgets your address. Then, if you delete the account, we actively anonymise our records down to what accounting law forces us to keep: a serial number was sold, on a date, for a price. Not to whom, not where it lives.

Sovereign inquiries are held on paper, never entered into the CRM, and never touched by the marketing stack. After handover, the survey and commissioning notes go home with you - the signed one-page inventory is the only copy, and it’s yours. If you call us back, we arrive as strangers. That’s the design.

Questions about any of this?

The household operating system. Shipping late 2026.

PRODUCT Features Getting started Trust Pricing Luma Guard Reserve

MODES Luma Cloud Luma Off-Grid Luma Sovereign

IN WRITING Privacy policy Terms of service