Privacy Policy
Last updated June 2026
Oona is built for families, so your trust matters more than anything. This explains what information we collect, why, and the choices you have.
Who we are
Oona ("we", "us", "our") is a family-organiser service provided by [operating entity — to confirm], based in New Zealand. We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. You can reach us any time at privacy@oona.co.nz.
What we collect
- Account information — your name, email, and password (or your Google sign-in), and the household you create or join.
- Family content — what you add to Oona: calendar events, lists, chores, notices, messages, feed posts, wishlists, meals, contacts, and any documents or information you put in the family vault.
- Children's information — kept to a minimum: a first name, a colour/avatar, a PIN, and whatever a parent or the child adds. Children sign in with a family code, name and PIN — we don't ask children for an email or phone number.
- Usage information — basic technical data needed to run the service securely and reliably.
- Payment information — handled entirely by Stripe. We never see or store your full card details.
How we use your information
- To provide Oona and keep your family's information in sync across your devices.
- To send essential service messages (e.g. invites, reminders and notifications you've enabled).
- To power features you choose to use — for example, the AI assistant sends your message, and a short, name-free summary of your family's makeup, to Google's Gemini to generate a reply.
- To take payment and manage subscriptions (via Stripe), and to keep the service safe and secure.
We do notsell your personal information, show you ads, or use your family's content to train AI models.
Children's privacy
Oona is intended to be set up and managed by a parent or guardian, who is responsible for the children they add. We collect as little about children as possible and never make a child's information visible outside the household. Parents can view, edit and remove their children's information, and can enable optional oversight of messages that include a child.
Who we share information with
We use a small number of trusted service providers to run Oona, and only share what each needs to do its job:
- Convex and Vercel — secure database, file storage and hosting.
- Google (Gemini) — to generate AI assistant replies.
- Resend — to send and receive email on our behalf.
- Stripe — to process payments.
We may also disclose information where required by law. We don't share your information with anyone else.
Where your information is stored
Some of our providers store data on servers outside New Zealand (including the United States). Where we disclose personal information overseas, we take reasonable steps to ensure it remains protected to a standard comparable to the New Zealand Privacy Act.
Security
We protect your information with industry-standard measures, including encryption in transit and at rest, access controls, and offering multi-factor authentication on adult accounts. Sensitive family-vault information is restricted to adults in your household. No system is perfectly secure, but we take the security of family data seriously.
Keeping and deleting your information
We keep your information for as long as your household is active. You can ask us to delete your account and your household's data at any time by emailing privacy@oona.co.nz, and we'll delete it (except anything we're legally required to keep). Self-serve deletion is on the way.
Your rights
You can ask to access or correct the personal information we hold about you. Email privacy@oona.co.nz and we'll respond as soon as we can. If you're ever unhappy with how we've handled your information, you can contact the Office of the Privacy Commissioner (privacy.org.nz).
Privacy breaches
If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner, as required by the Privacy Act 2020.
Cookies
We use only the cookies needed to keep you signed in and to run the service. We don't use advertising or third-party tracking cookies.
Changes
We may update this policy from time to time. If we make a material change, we'll let you know. The date at the top shows when it was last updated.
Contact
Questions about your privacy? Email privacy@oona.co.nz — we're glad to help.