Last Updated: September 30, 2026

This Privacy Notice describes how Loftie and our subsidiaries and affiliated companies (collectively, "Loftie," "we," or "us") collect, use, disclose and otherwise process information about you. This Privacy Notice applies to information we collect when you access or use our websites (collectively, the "Website"), our mobile applications (each an "App"), including Henry, the assistant in the App, our smart clocks and lamps and the Loftie Card ("Devices," and together with the Website and the App, the "Services"), or when you otherwise interact with us, such as through our customer support channels.

This Privacy Notice is effective as of the "Last Updated" date above. We may change this Privacy Notice from time to time. If we make changes, we will notify you by revising the "Last Updated" date. Where required by law, we will notify you of changes through the Services or by other means.

Collection of information

Information you provide to us

We collect information directly from you when you create an account, post a review, request customer support, use Henry, or otherwise communicate with us. The categories of information we collect include:

• Contact Information: your name, email address, mailing address, and phone number. If you sign in with Apple or Google, we receive the name and email address they share (with Apple's Hide My Email, a private relay address).
• User Content: information in the content you provide to our Services, such as text, photos, videos, voice recordings, and any other content you provide, including what you send to Henry (described in the Henry section below).
• Financial Information: we rely on third-party payment processors to collect the financial information used to pay for the Services.
• Communication Information: information included in your communications with us, including text and voice chats submitted through our Website and App.

We may also collect any other information you choose to provide.

Information we collect automatically

• Transactional Information: a history of your transactions with us, including the dates and amounts paid for the Services.
• Internet Activity Information: information about how you access our Services, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, and browser type; and information about your activity on our Website, App, and interaction with our communications, such as access times, browsing behavior (such as pages viewed and links clicked), and the page you visited before navigating to our Website.
• Device Information: information about your Loftie clock or lamp (including the hardware model, firmware version, IP address, and device identifiers) and how you use it (including whether it is connected, the alarms, Bed Signal, sleep and wake times and other settings you choose, and diagnostic information such as memory use and errors).
• Location Information: with your permission, the App uses your device's location for three things: your phone requires location access to find and connect to your Loftie Device over Wi-Fi or Bluetooth; we use it once to set your country, and store only the country; and, if you set a place reminder with Henry ("when I get home"), your phone watches for that place. The place's coordinates stay on your phone and are not sent to us.
• Audio Information: if you call our customer service team or leave a voicemail, we may record or keep those conversations.
• Information Collected by Cookies and Similar Tracking Technologies: we use tracking technologies, such as cookies and pixels, to collect information about your interactions with our Services and communications. These technologies help us improve our Services and communications, see which areas and features are popular, count visits, and track clicks. You may be able to adjust your browser settings to remove or reject browser cookies. You can also adjust cookie settings through the Cookie Preferences link, or opt out through the Your Privacy Choices link, in the footer of our Website. Removing or rejecting cookies could affect the availability and functionality of our Services.

Some information stays on your phone and is not sent to us: the apps and websites you choose to block with Rest, Focus or the Loftie Card (handled by Apple's Screen Time or Android's settings), the audio of anything you say to Henry (turned into text on your phone), and the calendar events Henry's Today view shows.

Information we collect from other sources

• Third-Party Integrations: if you connect third-party services to the Services, we may collect information you share with us through those services. For example, if you connect Gmail to Henry, we process your email as described in the Gmail section below. If you allow Screen Time (iOS) or app-usage access (Android) for Rest, Focus or the Loftie Card, your phone uses it to block the apps you choose; the list of apps stays on your phone.
• Third-Party Partners: we may collect information from third-party partners, for example contact information and device identifiers from advertising networks and data analytics providers.
• Social Media Platforms: information you share when you interact with us on social media platforms like Instagram.

Derived information

We may derive information or draw inferences about you based on the information we collect. For example, we may infer your approximate location from your IP address, and your interest in our products from your Internet Activity Information.

Henry

Henry is the assistant in the Loftie app. You tell him what's on your mind, and he keeps it, sorts it and reminds you.

What Henry keeps

• Your messages to him and his replies.
• The notes he files from them, and any times you give.
• Short facts he picks up about you and people you mention, such as a birthday. He doesn't keep health details as facts: if a message mentions a diagnosis or medication, it stays part of the note you sent. You can see and delete every fact in the app, under What you've told Henry.
• Your answers to his setup questions, such as how involved he should be and when he should stop messaging you.
• Your time zone, and a token for your phone so he can send reminders.

How your messages reach him

• In the app, over an encrypted connection.
• By email, when you forward something to your personal Henry address. We keep the text and drop attachments other than plain text.
• By text, when you text your Henry address: your carrier turns the text into an email.

Email Henry sends for you

When you ask, Henry can send an email on your behalf from his own Henry address. You approve each one before it goes out, and it shows that it comes from Henry for you.

Who helps us run Henry

Service	What it does	What it receives
Anthropic (Claude)	Reads each message to sort it and writes Henry's replies	The message, plus the notes and facts needed to answer it
Google Cloud (Firebase, Vertex AI)	Stores Henry's data, makes notes searchable, sends notifications	Everything Henry keeps
Apple and Google push services	Deliver reminders to your phone	The reminder text and your phone's token
Postmark	Sends and receives email for your Henry address	Email you send to Henry, and email he sends for you

Anthropic processes messages on our behalf and, under its commercial terms, doesn't use them to train its models. It may keep what it receives for a limited period, currently up to 30 days, for safety and abuse monitoring, and longer where content is flagged or the law requires. We don't sell Henry data or use it for advertising.

Who at Loftie can see it

Henry works automatically. A small number of authorized people at Loftie may look at Henry conversations to help you when you ask, to keep Henry safe and working (for example, investigating a bug or abuse), to improve him, or when the law requires.

If a message suggests you may be in danger

Henry replies right away with emergency and crisis lines for your region, in fixed wording. Henry is not monitored in real time and is not an emergency service.

Letting go and deleting

• Letting a note go takes it off your lists; Henry keeps it so he can still answer from it.
• You can delete facts at any time.
• Deleting your Loftie account deletes everything Henry holds. You can also email us to delete it.

Henry's data is stored in the United States, on Google Cloud.

Gmail and other Google user data

If you choose to connect your Gmail account to Henry, you give Loftie permission through Google to view and change your Gmail messages. Connecting is optional, and you can disconnect at any time.

What Henry accesses. New messages that arrive after you connect, so he can spot orders, deliveries, travel, appointments and bills. Older messages, only when you ask him to find something. The Google account email address you connected.

What Henry does. Anything that changes something is a card in the app first, and nothing happens until you tap Yes.

• Offers to turn an order, delivery, trip, appointment or bill into a reminder, with a link back to the email.
• Finds an email when you ask, and answers with a link to it.
• Offers to write a reply in your Gmail. It goes out only after you review it and tap Send, or tap Yes to have Henry send it for you.
• Archives messages when you ask, and may offer, once per sender, to unsubscribe you from a newsletter that supports one-click unsubscribe. Henry never deletes email.

What we store. An encrypted access credential from Google, kept on our servers and never on your phone. What Henry wrote from your email (a card, a reminder you accepted, an answer to your question) and the Gmail message ID, so you can open the original. Loftie does not keep a copy of your emails: message content is processed to create those items, then discarded from our systems.

Our AI provider. The content of the messages Henry looks at, and anything you ask him about your mail, is sent to Anthropic, whose AI models (Claude) power Henry. Anthropic processes it on our behalf to create cards, reminders, answers and drafts. Under its commercial terms it does not use this content to train its models. It may keep what it receives for a limited period, currently up to 30 days, for safety and abuse monitoring, and longer where content is flagged for a policy violation or the law requires. After that it is deleted.

Who can see it. Your email is handled automatically. People at Loftie don't look at your Gmail data, except: when you ask us to, for example by sharing a specific message with our support team; when it's needed for security, such as investigating abuse or a security incident; or when the law requires it. Any such access is limited to the few authorized people who need it. We also use aggregated, anonymized information about how Henry's features are used (for example, how many reminders are accepted) to improve them; it never includes the content of your email.

Other service providers. Besides Anthropic, the only service providers that process your Gmail data are Google Cloud, to host Henry's data, and Apple's and Google's push services, which deliver the reminders you accept.

What we never do with Google user data. We don't sell it. We don't use it for advertising or share it with advertising platforms, data brokers or information resellers. We don't use it to decide creditworthiness or for lending. We don't use it to train, develop or improve generalized artificial intelligence or machine learning models, and our service providers don't either. We use it only to provide and improve the Henry features you can see in the app.

Disconnecting and deletion. Disconnect Gmail in the Loftie app (Account → Henry → Gmail → Disconnect). We revoke our access with Google and delete the stored credential and everything Henry created from your email. You can also remove Loftie's access in your Google Account's security settings, under third-party connections. Deleting your Loftie account deletes all of it.

Security. Credentials are encrypted with Google Cloud Key Management Service. Data is encrypted in transit and at rest. Access to production systems is limited to the few engineers who operate Henry, and those systems never record email content in logs. Henry's Gmail feature is independently assessed under Google's Cloud Application Security Assessment (CASA) before it launches and each year after.

Google API Services: Limited Use

Loftie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Henry's use of information received from Gmail and other Google Workspace APIs adheres to the Google Workspace API User Data and Developer Policy, including its Limited Use requirements. We do not use Google Workspace API data to develop, improve or train generalized AI or machine learning models.

Customer support, with AI

Much of our customer support is answered by Louisa, an AI assistant, with our team able to step into any conversation.

• Where: chat in the Loftie app, chat on loftie.com and in our returns portal, and replies to support email and social messages.
• What Louisa uses: your message, and, when needed to help you, your order, device and membership details and your past support conversations. On the website, anything about your own account needs a code sent to your email first.
• Who processes it: Deliberate Studio, which runs Louisa for us, and Anthropic, whose models Louisa uses. Deliberate Studio is owned by Loftie's founder. Both act as our service providers. Our help desk (Gorgias) stores support conversations.
• People: our support team can read support conversations to help you and to check Louisa's answers.

Use of information

We use the categories of information we collect for the following business and commercial purposes:

• Service Delivery: to provide and maintain our Services, including to run your Devices and Henry, send the reminders you set, process payments, and authenticate your account.
• Communication: to communicate with you about Loftie and our Services, including to respond to your questions, inform you of price or Services changes, and send you other transactional or relationship messages.
• Marketing and Advertising: to send direct marketing messages (including by email and automated text) and target advertisements to you on third-party platforms and websites as described in "Targeted advertising and analytics" below. You can opt out of direct marketing by following the instructions in those messages (such as clicking "unsubscribe" in emails or replying "STOP," "END," or "CANCEL" to texts) or by contacting us. We never use Henry content or Gmail data for marketing or advertising.
• Research and Development: to monitor and analyze Services trends, usage, and activities, improve our Services, develop new products and services, and generate de-identified data that we will not re-identify.
• Protection and Compliance: to detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of Loftie and others, and comply with our legal and financial obligations.
• Notice/Consent: we may also use information in other circumstances after giving you notice and/or getting your consent.

Targeted advertising and analytics

We engage others to provide analytics services, serve advertisements, and perform related services across the web and in mobile applications. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Website, including your IP address, web browser and mobile network information, pages viewed, time spent on pages, and links clicked. This information is used to deliver advertising targeted to your interests on other companies' sites or mobile apps and to analyze and track data, determine the popularity of certain content, and better understand your activity. Some of these activities may constitute "targeted advertising," "sharing," or "selling" under certain laws. To opt out, use the Your Privacy Choices link in the footer of our Website (in the EU, EEA, UK and Switzerland, Cookie Preferences).

In addition to ad targeting that relies on cookies and similar technologies, we work with advertising partners to translate other identifiers, such as your email address or phone number, into a unique identifier (a hashed value) that those partners can use to show you more relevant ads for Loftie across the web and in mobile apps. You may opt out of these disclosures by emailing us at info@loftie.com.

You can also learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising by companies that participate in the Digital Advertising Alliance, at www.aboutads.info/choices.

Disclosure of information

We disclose information as follows:

• Vendors: to vendors, service providers, contractors and consultants that need it to provide services to us, such as companies that help us with web hosting, device connectivity, payment processing, fraud prevention, customer service, AI processing, email and text messaging, data enrichment, analytics, and marketing and advertising. The AI and support providers for Henry and customer support are named in those sections.
• Advertising Partners: to third parties for the purposes described under Marketing and Advertising above.
• Professional Advisors: to our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
• Legal Authorities: to legal authorities and others for the purposes described under Protection and Compliance above, including if we believe disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements; if we believe your actions are inconsistent with our user agreements or policies; if we believe you have violated the law; or if we believe it is necessary to protect the rights, property, and safety of Loftie, our users, the public, or others.
• Corporate Transactions: in connection with or during negotiations of certain corporate transactions, including a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliates: between and among Loftie and any current or future parents, affiliates, subsidiaries, and other companies under common control and ownership.
• The Public: if you post a product review or other content on our Services, the public will be able to see it.
• Consent: when we have your consent or you direct us to do so.

We also disclose de-identified information that cannot reasonably be used to identify you.

Residents of certain US states

Privacy laws in certain US states, such as California, Colorado, Connecticut, Delaware, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia ("State Privacy Laws"), require additional disclosures and grant their residents certain rights. This section applies to residents of those states and serves as our Notice at Collection for California.

Additional disclosures

We collect the following categories of personal information: Contact Information, Commercial Information, User Content, Communication Information, Internet Activity Information, Device Information, Location Information, Audio Information, and Derived Information. We collect it from you, from the third parties described in "Information we collect from other sources," and by automated means.

Category of personal information	Purposes	Categories of recipients
Contact Information	Service Delivery; Communication; Marketing and Advertising; Protection and Compliance	Vendors; Advertising Partners
Commercial Information	Service Delivery; Communication; Marketing and Advertising; Research and Development	Vendors; Advertising Partners
User Content (including Henry)	Service Delivery; Research and Development; Protection and Compliance	Vendors
Communication Information	Communication; Marketing and Advertising; Research and Development	Vendors
Internet Activity Information	Service Delivery; Communication; Marketing and Advertising; Research and Development; Protection and Compliance	Vendors; Advertising Partners
Device and Location Information	Service Delivery; Research and Development; Protection and Compliance	Vendors
Derived Information	Marketing and Advertising; Research and Development	Vendors; Advertising Partners

Your privacy rights

Depending on where you live and subject to certain limitations, you have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, (3) request correction of inaccurate personal information, and (4) request information about the third parties to whom we disclosed your personal information. To exercise these rights, contact us or use https://loftie.com/pages/data-requests. We may verify your request by asking you to verify your email address and/or provide information related to your recent interactions with us.

Opt out of sales, sharing, and targeted advertising

As described in "Targeted advertising and analytics," we process personal information to serve you ads on non-Loftie properties and expand the reach and effectiveness of our marketing. These activities may result in selling or sharing Contact Information, Internet Activity Information, and Derived Information with our Advertising Partners (including social media platforms) so they can show you ads targeted to your interests on other platforms, and may be considered targeted advertising under State Privacy Laws. We do not knowingly sell or share personal information about consumers younger than 16. You can opt out:

• by following the prompts behind the Your Privacy Choices link in the footer of our Website. This choice is linked to your browser; renew it if you use a new device or browser, or clear your cookies;
• by emailing info@loftie.com to turn off targeted advertising, sharing, and sales based on your email address and other non-cookie identifiers; and
• by visiting our Website with a legally recognized universal choice signal enabled, such as the Global Privacy Control. We apply the signal to cookie-based sales, sharing, and targeted advertising in that browser or device. To also opt out of advertising based on your email address or other non-cookie identifiers, email us at info@loftie.com.

Nondiscrimination. We will not treat you differently for exercising your privacy rights.

Appeals. If we deny your request, you may appeal by contacting us at info@loftie.com. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.

Authorized agents. If you submit a request as an authorized agent, you must submit proof of your authorization, such as a valid power of attorney or signed permission from the person. Please do not send sensitive personal information such as a government-issued ID. We may contact the person to verify the request.

Notice of financial incentives. We provide discounts to people who join our marketing lists. These may be "financial incentives" or "bona fide loyalty programs" under State Privacy Laws. If you take part, we collect relevant personal information, such as your email address, and disclose it to our vendors and advertising partners. You can join by following the sign-up instructions we provide, and withdraw at any time by unsubscribing or contacting us. If you ask us to delete information essential to the incentive, we can no longer provide it. The value of your personal information is reasonably related to the value of the offer or discount.

Data retention. We store personal information for as long as necessary to carry out the purposes for which we collected it, satisfy our legal requirements, or for other business purposes explained in this Privacy Notice. Henry content stays until you delete it or your account, and Gmail credentials and everything made from your email are deleted when you disconnect Gmail or delete your account.

Individuals in Europe

This section supplements this Privacy Notice if you are in the European Economic Area ("EEA"), the United Kingdom, or Switzerland.

Legal basis for processing. When we process your personal information as described above, we rely on the following lawful bases:

• to perform our responsibilities under our contract with you (for example, processing payments for and providing the products and services you requested, including Henry);
• our legitimate interests in operating our business or protecting our interests (for example, to provide, maintain, and improve our products and services, conduct data analytics, and communicate with you);
• to comply with our legal obligations (for example, to keep a record of your consents and of those who have opted out of marketing); and
• your consent (for example, when you opt in to marketing, non-essential cookies, or connect Gmail to Henry). You may withdraw consent at any time.

Data subject requests. You have the right to request access to, deletion of, or correction of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us. If you have a concern we can't resolve, you may lodge a complaint with the data protection authority where you reside: EEA, UK, Switzerland.

Data transfers. We may transfer personal information from the EEA, the United Kingdom, or Switzerland to countries such as the United States that are not deemed adequate. We rely on appropriate safeguards such as the standard contractual clauses ("SCCs"), and you may obtain a redacted copy by contacting us.

Data retention. We store personal information for as long as necessary to carry out the purposes for which we collected it and for other business purposes explained in this Privacy Notice.

Shine the Light

A California law known as "Shine the Light" permits California residents to request certain details about how their information is disclosed to third parties for direct marketing purposes. To make a request, contact us at info@loftie.com.

Individuals in Canada

Consent. By submitting personal information to Loftie, our service providers, or our agents, you consent to its collection, use, disclosure, and transfer in accordance with this Privacy Notice and as permitted or required by law. You may withdraw your consent at any time by contacting us. If you withdraw consent, or choose not to provide certain information, we may not be able to provide certain products, services, or information.

Canada's Anti-Spam Law ("CASL"). We only send commercial electronic messages ("CEMs") where we have your express or implied consent. Consent is implied where we have an existing business relationship with you, or you contacted us with an inquiry within a certain time frame. You may unsubscribe from CEMs at any time by clicking unsubscribe in an email. If you opt out, we may still send you non-promotional messages, such as those about your account.

Children

Our Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will delete it.

Contact us

If you have any questions about this Privacy Notice, contact us at info@loftie.com.