This Privacy Policy explains how Lunra ("Lunra," "we," "us," or "our") collects, uses, shares, and protects information in connection with our workforce-management platform, our website at lunraapp.com, and the application at app.lunraapp.com (together, the "Service"). By using the Service, you agree to the practices described here.
A note on roles. Many of our customers are employers who use Lunra to manage their staff. When an employer uploads or manages employee information, that employer is the controller of that data and Lunra acts as a processor on their behalf. If you are an employee of a Lunra customer, please also review your employer's own privacy notice.
01 Information we collect
We collect information in a few ways: information you or your employer provide, information generated as you use the Service, and information from third parties such as our payment processor.
Account & profile information
- Name, email address, phone number, and job role.
- Business details such as company name, locations, and team structure.
- Employment-related records your employer chooses to store, which may include onboarding documents (for example I-9, W-4, and direct-deposit forms).
Usage & device information
- Time-clock entries, schedules, shift records, PTO requests, and attendance data.
- Log data such as IP address, browser type, device identifiers, and timestamps.
Payment information
When a customer subscribes to a paid plan, payment is processed by our payment provider. We do not store full card numbers on our servers; we retain limited billing details such as plan, status, and the last four digits of a card as provided by the processor.
02 How we use information
We use the information we collect to:
- Provide, operate, and maintain the Service, including scheduling, time tracking, PTO, attendance, and payroll exports.
- Authenticate users and secure accounts.
- Process subscriptions, billing, and trials.
- Send transactional messages such as account notices, password resets, and payment notifications.
- Provide customer support and respond to requests.
- Monitor, troubleshoot, and improve the Service.
- Comply with legal obligations and enforce our terms.
03 Location & GPS data
Lunra offers an optional GPS geofencing feature that allows an employer to verify that staff clock in within a configured location radius. Where this feature is enabled:
- Location is captured at the moment of a clock-in or clock-out action, to confirm proximity to an approved worksite.
- Location is used for attendance verification and is associated with the relevant time-clock entry.
- Collection of location data through your device is subject to your device's permission settings, which you can control at any time.
Employers are responsible for notifying their staff about location tracking and obtaining any consent required by applicable law.
04 How we share information
We do not sell personal information. We share information only as described below:
- With your employer or your team. Information you enter is visible to authorized administrators and managers of your organization.
- With service providers who process data on our behalf (see Section 5).
- For legal reasons, when required to comply with law, enforce our agreements, or protect the rights, safety, and security of Lunra and others.
- In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy.
05 Service providers
We rely on a small number of trusted providers to run the Service. These providers process data only as needed to perform their functions for us:
- Hosting & infrastructure (Vercel), for serving the application and website.
- Database, authentication & storage (Supabase), for storing and serving application data.
- Payments (Stripe), for processing subscriptions and billing.
- Email delivery (Resend), for sending transactional and account emails.
Each provider is bound by contractual obligations to protect your information and to use it only for the purposes we specify.
06 Data retention
We retain personal information for as long as an account is active or as needed to provide the Service. We may retain certain information after account closure where necessary to comply with legal obligations, resolve disputes, maintain accurate records, and enforce our agreements. When an organization cancels, its data may be placed in a read-only state before deletion in accordance with our agreements and applicable law.
07 Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
08 Your rights & choices
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Because employee data is often controlled by an employer, we may direct certain requests to the relevant employer, or assist them in fulfilling your request.
To exercise a right, contact us using the details below. We will respond consistent with applicable law. You can also control device-level permissions (such as location) through your device settings.
09 Children's privacy
The Service is intended for use by businesses and their adult workforce. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can take appropriate action.
10 Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.
11 Contact us
If you have questions about this Privacy Policy or our data practices, contact us: