Privacy Policy

We put a sensor in your home. We analyze dust from your floors. Members tell us about their households. That's a lot of trust, and this document is where we earn it.

The Lution Company is a Delaware public benefit corporation at 201 E Ojai Ave, #660, Ojai, CA 93023. This Policy covers lutionlevel.com, lutionlabs.com, lution.ai and their subdomains, our apps, our devices, our marketplace, and our lab services.

If you share health information with us, Section 8 is your policy — it's also published on its own at our site. If you're in Canada, Section 14 is for you.

Everything below in one place, before you buy.

• Your device reports continuously while it's powered and connected — particulate, carbon dioxide, volatile compounds, nitrogen oxides, formaldehyde, temperature, humidity, pressure.
• We analyze the dust you send us, including sequencing to identify bacteria and fungi.
• We collect your home address and look up basic public facts about the property.
• Health information is optional and always was. Nothing requires it. It takes a separate opt-in, lives under Section 8, and you can withdraw it anytime.
• We use de-identified member data for research and to improve our models. That's one setting in your account, and you can turn it off.
• We don't sell health information. And nobody who receives data from us may use it for underwriting, credit, tenant screening, employment, or anything adverse to a household. Your air quality will never be used against you.
• We don't diagnose. We tell you about your air, never about your health.

What you give us

• Name, email, phone, password
• Shipping and billing address, order history
• Your home address, plus property facts our address and property data providers return — square footage, bedrooms, stories
• Details about your home you enter at setup: age, construction, ventilation, heating and cooling, water damage history, how rooms get used
• Optional health information about symptoms or conditions in your household, under Section 8
• Support messages, survey answers, reviews, testimonials
• Payment details, which go straight to our payment processor. We never receive your full card number.

What your device sends

• Air quality readings: fine particulate, carbon dioxide, volatile compound index, nitrogen oxide index, formaldehyde
• Temperature, relative humidity, differential pressure
• Device diagnostics: identifier, firmware version, connection status, signal strength, errors, and the name of the network it joins

It reports continuously while powered and connected.

What your samples produce

• Lab results from your dust and air samples: sequencing to identify bacteria and fungi, fungal biomass, gravimetric and elemental analysis
• Results we calculate from all of it — Lution Levels, severity classifications, your home's baseline

About genetic material in dust. Household dust holds genetic material from everything that passes through a home — bacteria, fungi, plants, food, pets, people.

We don't sequence genomes. Our labs amplify two specific marker regions used to identify microorganisms: a segment of the bacterial ribosomal RNA gene, and the internal transcribed spacer region used to identify fungi. The analysis is pointed at bacteria and fungi, and it can't produce meaningful genetic information about a person.

We don't perform, request, or report human genetic analysis. Reads that don't match bacteria or fungi are discarded in processing — not analyzed, not reported, not kept.

What we collect automatically

IP address and the rough location it implies, browser and device type, operating system, language, pages viewed, features used, session length, and where you came from. Plus what cookies and similar technologies collect — Section 6.

Two categories get extra care and extra legal protection:

• Your precise location, which we hold as your home address
• Health information, if you choose to share it

We use these only to deliver what you asked for, to meet legal obligations, and for purposes you've specifically agreed to. We don't use them to infer things about you. Health information requires its own opt-in and lives under Section 8.

Four purposes, and you control three of them:

• Necessary — running the site, keeping you signed in, securing your session, processing your order. These stay on.
• Analytics — understanding what people use so we can make it better.
• Advertising — measuring our ads and reaching people who'd want this.
• Error monitoring — finding and fixing bugs.

Third parties supply the analytics, advertising, messaging, and error monitoring technologies, and may receive information about how you use our site and app.

Your choices. A consent tool appears on your first visit, and the link in our footer changes your mind anytime. Non-essential technologies stay off until you turn them on. We honor Global Privacy Control and similar browser signals. Your browser settings work too, though parts of the site may not.

The assistant. Before your first message, we tell you that a third-party AI provider processes the conversation.

Our assistant answers questions about your results and summarizes what we found. A third-party AI provider powers part of it.

• What it sees. Your messages and the results you're discussing go to that provider so it can respond.
• Training. That provider is contractually barred from training on your information. We may use de-identified conversations for our own research and model improvement — and that's covered by the same opt-out in Section 9. Health information is excluded.
• What it isn't. It describes what we measured. It doesn't give medical advice, doesn't tell you what results mean for anyone's health, and doesn't give remediation instructions. It can be wrong.
• Health information in conversation. If you tell the assistant about symptoms, that's health information under Section 8.
• Transcripts. We keep them 24 months, to support you and to review the assistant's accuracy and safety. Conversations containing health information follow Section 8's schedule.

This section is our Consumer Health Data Privacy Policy. It governs health information specifically and applies on top of everything else here.

What we collect

Only what you offer: symptoms or health conditions in your household, including anything about health you tell our support team or our assistant.

We never require it. Every part of the Services works without it.

How we ask

Through a separate opt-in, clearly labeled, presented where it's relevant — including at the moment you first ask a question that touches on it. It's never bundled with your acceptance of the Terms or your consent to a charge. We don't infer health information from your environmental data.

What it's for

The features you asked for that depend on it. De-identified research on how indoor environments relate to reported health, including publication where you consented to research use. Improving the Services.

We don't interpret it, don't diagnose, and don't tell you what it means for anyone's health.

Who sees it

• Service providers who host and process it for us, under contract, only for the purposes above
• Research partners, de-identified only, and only if you consented to research use
• Anyone you direct us to — a physician, an inspector, a contractor, a family member
• As legally required, per Section 12

We don't sell health information. If that ever changed, we'd come to you first for a separate written authorization naming who would receive it, what they'd get, and why. You could say no, and you could revoke it later.

We don't sell health-linked data to insurers, and every recipient of data from us is contractually barred from using it for insurance underwriting or pricing, credit decisions, tenant screening, employment decisions, or any adverse action against a person or household.

How long we keep it

While your account is active. Then deleted within 90 days of closing your account or withdrawing consent — including by our processors, whom we instruct to delete it.

Your rights

• Confirm and access what health information we hold
• Withdraw consent anytime
• Delete it, with deletion instructed to our processors
• Refuse or revoke any authorization to sell it
• Be treated the same either way

privacy@lutionlevel.com. We answer within the time the law requires, and if we ever say no, we tell you why and how to appeal.

Your results are yours. You own your account and the results we generate for you.

Separately, we build something bigger. De-identified environmental and lab data from many homes becomes reference baselines, a picture of indoor conditions across regions and building types, published research, better products, and better models behind the Services. We share de-identified, aggregated data with research partners — academic and scientific researchers.

Your opt-out

One setting in your account, called Research and Model Improvement, covers all of it — research, publication, sharing with research partners, and training the models behind our Services.

Turn it off and we stop including your data in any of that, going forward. Nothing else about your service changes. We won't charge you differently or give you less for opting out.

One honest limit: we can't pull your contribution back out of research already published, datasets already aggregated, or models already trained. Once data is de-identified it stops being findable as yours, which is the whole point of de-identifying it. Opting out is forward-looking.

What de-identification means here

We remove direct identifiers — names, contact details, precise addresses — and reduce indirect ones, including generalizing geography, so the information can't reasonably be linked back to you or your household. We aggregate before we publish or share, and we don't attempt re-identification. Every recipient is contractually barred from attempting it.

Research and publication

We publish using de-identified, aggregated data. Findings never identify you, your household, or your address. Health information appears only where you consented to research use, and only de-identified.

If you close your account

We delete your account and your individual results per Section 11. De-identified contributions already folded into aggregate datasets or trained models remain, for the reason above. Health information is different — it's deleted under Section 8, including by our processors.

Independent labs. Accredited third-party laboratories analyze your samples. They act on our instructions, are contractually limited to that work, and may not use your samples or results for their own purposes.

Service providers, by category:

Every provider is contractually bound to use information only as we direct, protect it, and not repurpose it. Want the specific companies? Ask us at privacy@lutionlevel.com and we'll send the current list.

Research partners — de-identified, aggregated data only, per Section 9.

Anyone you direct us to — a physician, mold inspector, HVAC contractor, family member. Your call, your results.

A buyer or successor in a merger, acquisition, financing, or asset sale, still bound by this Policy for everything collected before.

For legal reasons — Section 12.

We don't share your individual results with a landlord, tenant, buyer, seller, insurer, or employer without your instruction.

We may hold something longer where the law requires it, or to resolve a dispute.

Your results describe a building, which means other people sometimes want them. Our answer is consistent:

We don't hand your results to anyone — owner, manager, buyer, seller, insurer, employer — without your instruction.

We may disclose information where the law requires it, including in response to a subpoena, court order, warrant, or other valid legal demand, and where we need to protect our rights, our members, or the public.

We don't write litigation reports and we don't serve as expert witnesses.

Depending on where you live, you may have the right to:

• Know and access what we hold, why, and get a copy in a portable format
• Correct what's wrong
• Delete it, subject to the exceptions the law allows
• Opt out of sale and sharing, including for targeted advertising
• Limit our use of sensitive information to what delivering the Services requires
• Withdraw consent — including for health information, and for research and model improvement under Section 9
• Appeal if we say no
• Be treated the same for asking

How. Email privacy@lutionlevel.com or use the form on our site. We verify who you are first, and we answer within the period the law requires. An authorized agent can act for you with proof of authority.

In our footer: Do Not Sell or Share My Personal Information and Limit the Use of My Sensitive Personal Information. We honor Global Privacy Control.

Marketing. Every email unsubscribes. Reply STOP to any text. Change preferences in your account. We'll still send what you need about your orders, samples, and results.

Your device. Unplug it whenever. A factory reset clears your account link and local data — do that before you sell or give it away.

A former home. Moved? Delete that address and its history from your account.

We follow the Personal Information Protection and Electronic Documents Act and applicable provincial privacy law, including Quebec's.

• Consent. Express consent before we collect sensitive information, including health information. Otherwise, your consent or a purpose you'd reasonably expect.
• Where your data goes. Our providers are in the United States, so your information is processed there and may be reachable by US authorities under US law. We assess these transfers before making them and require contractual protections from every provider.
• Access and correction. Ask us anything about how we handle your information at privacy@lutionlevel.com.
• Automated results. Lution Levels are generated automatically. You can ask for the reasons behind a result and submit your own observations for a person to consider, at support@lutionlevel.com.
• Messages. Commercial email and texts go only to people who gave the express consent Canada's Anti-Spam Legislation requires, always with an unsubscribe.
• Privacy Officer. [Name, title] — privacy@lutionlevel.com, or our address in Section 1.
• French. A French version of this Policy is on our site.

This is built for adults, and you need to be 18 to hold an account. We don't knowingly collect information from children under 13, and we delete it if we discover it. A parent or guardian who's concerned can write to privacy@lutionlevel.com.

Our devices measure rooms children use. Those readings describe the room — they aren't connected to any person, including any child.

We'll post updates here with a new date, and for anything material we'll tell you by email or in the app at least 30 days ahead.

If we ever want to use information we already hold for a materially different purpose than the one we described when we collected it, we'll ask you — not just tell you.

The Lution Company · 201 E Ojai Ave, #660, Ojai, CA 93023

Privacy and data rights privacy@lutionlevel.com · Security security@lutionlevel.com · Legal legal@lutionlevel.com · Support support@lutionlevel.com