Lanturne Privacy Policy
Last updated: 15 September 2026
Lanturne is operated by Technium Foundry LLC ("we", "us"). This policy explains what data Lanturne collects, why it is collected, who else can see it, and how long it is kept.
Contact: the form at https://lanturne.com/contact
Summary
- We collect only what is needed to tell you the person you watch over is all right.
- We keep where they are now, not where they have been. Their most recent position is kept as a single value that is overwritten every time a newer one arrives, so a missed check-in or a silent watch can still tell you where to look. The watch refreshes it periodically, which is what lets us answer "where were they last" when it stops reporting altogether. A position is also recorded permanently on an SOS, on a detected fall, and on the daily check-in, because each of those is a record of a moment. We do not keep a history of their movements. That refreshed position is not stored anywhere, so there is no route, no timeline, and nothing that could reconstruct their day.
- We do not sell data. We do not share it with advertisers. There is no advertising in Lanturne.
- Their watch can only send. It cannot read anything about you and never displays your name.
Who the people are
Lanturne involves two people, and the data rules differ for each. An account holder may also name a third: someone to be told if they cannot be reached.
The account holder, usually an adult child, creates the account, subscribes, and receives alerts.
The monitored person wears the watch. They do not have an account and do not sign in. Data about them is collected by their watch and shown to the account holder who set up the account.
A nominated contact, if the account holder names one. They are told about an alert only when the account holder has not answered it within a few minutes, and only then. They see the monitored person's first name, what happened, when, and where it happened if the watch recorded a position. They see nothing else: no history, no daily check-ins, no battery, no settings, and no record of any other day.
If you are setting Lanturne up for someone else, you are responsible for telling them it is running and what it does, including who you have named as a contact. We provide the plain-language summary above so that conversation is easy to have.
What we collect
Lanturne collects only what is needed to tell you the person you care about is all right.
From you, the account holder: your email address, so we can sign you in and reach you about your account; a notification token, so an alert can reach your phone; and your subscription status. Anything you write to support, so we can answer it.
From the watch: the events it reports, meaning a check-in, an SOS or a detected fall, along with the watch's own status so we can warn you before it stops working. A position is recorded on an SOS, on a detected fall and on the daily check-in, so you know where to go and where they were when they last said they were all right. The watch also refreshes their most recent position periodically; that one is not kept, only used to overwrite the single value described below.
Sensor readings from the watch, including a heart rate and a daily step count. Lanturne reads what the watch's own sensors report, so that its safety features can function: the heart rate tells a worn watch from one on a table, and the step count tells a person moving from a person who is not. A watch that is worn but reports no heart rate and no movement sends the account holder an alert. Those safety features are the only reason any of it is collected.
The account holder's app shows the heart rate the watch read with each report, and the downloadable report lists each day's lowest and highest reading, so they can see the watch was worn and reading. Lanturne draws no conclusions from these readings. There is no diagnosis, no score, no risk rating and no fitness tracking, and a reading is never presented as a medical measurement. The readings sit in the same record as everything else on the account, which the account holder can read, export and delete, and they are destroyed when the account is.
From the contact form on our website: the name, email address and message you type into it, so we can answer you. Nothing else about that visit is recorded, and you do not need an account to use it.
Not a medical device. Nothing collected here is a health record, and nothing is diagnosed or interpreted as one.
What we do not collect
- A history or trail of their movements
- Blood pressure, sleep, or any fitness measure beyond the step count above
- Any diagnosis, health score, or risk assessment. Lanturne reads sensors; it does not draw conclusions from them, for you or for us
- Contacts, photos, messages, call logs, or microphone audio
- Any advertising identifier
Who else sees it
Nobody outside Lanturne, except where it is needed to run the service.
Anyone the account holder names as an emergency contact, and only when an alert has gone unanswered. When someone is named, we send them one email: who named them, and where to get the app. That email contains no information about the monitored person beyond the first name of the account holder who named them. They see nothing else at all until they install Lanturne and sign in with that address. The account holder can remove them at any time.
We do not sell personal data. We do not share it with advertisers, data brokers, or analytics vendors. Lanturne carries no third-party advertising or tracking software.
We will disclose data if legally compelled to, and where we are permitted to tell you, we will.
How long we keep it
Events are kept for as long as the account exists. This is deliberate. A caregiver may need to look back over months to see when their routine changed, and a record that has been quietly pruned cannot answer that.
The watch's routine liveness reports are deleted after 30 days, because they carry no meaning beyond "the watch was on". Check-ins, alerts, positions and readings are not touched by this.
Diagnostic logs and usage records, which carry no event and no position, are deleted after 90 days.
When you delete your account, we delete the account, the monitored person's profile, and all associated events. Backups are overwritten on their normal cycle, within 35 days.
A message sent through the contact form on our website is not attached to any account, so account deletion cannot reach it. We delete answered messages after 12 months. Ask us at any time and we will delete yours sooner.
Your rights
Wherever you live, you may:
- See what we hold about you and the person you monitor
- Correct anything wrong
- Delete the account and everything in it
- Take a copy in a machine-readable format
- Object to processing, or ask us to restrict it
If you are in the EEA or UK, our lawful basis is contract, because we cannot provide the service without this data. Support messages are the exception, and their basis is legitimate interest. If you are in California, we do not sell or share personal information as the CCPA defines those terms, and we do not discriminate against anyone who exercises their rights.
Security
Device tokens and pairing codes are stored as SHA-256 digests, never in the form they were presented. Session tokens are held in the Android Keystore. Traffic runs over TLS. Location and credentials never appear in our logs.
No system is perfect. If we discover a breach affecting you, we will tell you and the relevant regulator within the time the law requires.
Children
Lanturne is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child's data has reached us, tell us through the form at https://lanturne.com/contact and we will remove it.
Changes
If we change this policy in a way that materially affects you, we will tell you in the app before it takes effect. The date at the top always reflects the current version.