Privacy Policy

Who we are

Oona ("we", "us", "our") is a family-organiser service provided by Paragon Design, a New Zealand business, based in New Zealand. We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. You can reach us any time at privacy@oona.co.nz.

What we collect

• Account information — your name, email, and password (or your Google sign-in), and the household you create or join.
• Family content — what you add to Oona: calendar events, lists, chores, notices, messages, feed posts, wishlists, meals, contacts, and any documents or information you put in the family vault.
• Children's information — kept to a minimum: a first name, a colour/avatar, a PIN, and whatever a parent or the child adds. Children sign in with a family code, name and PIN — we don't ask children for an email or phone number.
• Usage information — basic technical data needed to run the service securely and reliably.
• Payment information — handled entirely by Stripe. We never see or store your full card details.

How we use your information

• To provide Oona and keep your family's information in sync across your devices.
• To send essential service messages (e.g. invites, reminders and notifications you've enabled).
• To power features you choose to use — for example, the AI assistant sends your message, and a short, name-free summary of your family's makeup, to Google's Gemini to generate a reply.
• To take payment and manage subscriptions (via Stripe), and to keep the service safe and secure.

We do notsell your personal information, show you ads, or use your family's content to train AI models.

Marketing emails (Oona news)

When you create an Oona account we add your email address to our product-news list so we can send you occasional updates about new features, tips and announcements. This is separate from the essential service messages above. Children's accounts are never added.

• Your choice. Every marketing email includes a one-click unsubscribe link, and you can opt out at any time — we action unsubscribes promptly, as required by New Zealand's Unsolicited Electronic Messages Act 2007.
• Who it's from. These emails are sent by Contenscience (the maker of Oona), New Zealand, and clearly identify us with a way to contact us.
• How to opt out. Use the unsubscribe link in any email, or email hello@oona.co.nz. Opting out of news doesn't affect essential service messages.
• We use Resend to manage this list and deliver these emails. We don't sell or share your address with other advertisers.

Children's privacy

Oona is intended to be set up and managed by a parent or guardian, who is responsible for the children they add. We collect as little about children as possible and never make a child's information visible outside the household. Parents can view, edit and remove their children's information, and can enable optional oversight of messages that include a child.

Who we share information with

We use a small number of trusted service providers to run Oona, and only share what each needs to do its job:

• Convex and Vercel — secure database, file storage and hosting.
• Google (Gemini) — to generate AI assistant replies.
• Resend — to send and receive email on our behalf.
• Stripe — to process payments.

We may also disclose information where required by law. We don't share your information with anyone else.

Where your information is stored

Some of our providers store data on servers outside New Zealand (including the United States). Where we disclose personal information overseas, we take reasonable steps to ensure it remains protected to a standard comparable to the New Zealand Privacy Act.

Security

We protect your information with industry-standard measures, including encryption in transit and at rest, access controls, and offering multi-factor authentication on adult accounts. Sensitive family-vault information is restricted to adults in your household. No system is perfectly secure, but we take the security of family data seriously.

Keeping and deleting your information

We keep your information for as long as your household is active. You can permanently delete your account yourself at any time in Settings → Account → Delete my account (see oona.co.nz/delete-accountfor details), or email privacy@oona.co.nz and we'll do it for you — except anything we're legally required to keep, such as basic billing records.

Your rights

You can ask to access or correct the personal information we hold about you. Email privacy@oona.co.nz and we'll respond as soon as we can. If you're ever unhappy with how we've handled your information, you can contact the Office of the Privacy Commissioner (privacy.org.nz).

Privacy breaches

If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner, as required by the Privacy Act 2020.

Cookies

We use only the cookies needed to keep you signed in and to run the service. We don't use advertising or third-party tracking cookies.

Changes

We may update this policy from time to time. If we make a material change, we'll let you know. The date at the top shows when it was last updated.

Contact

Questions about your privacy? Email privacy@oona.co.nz — we're glad to help.