State privacy rights
U.S. State Privacy Rights
Effective July 16, 2026 · Last updated July 17, 2026
This notice supplements the Loommi Privacy Notice and describes privacy rights for U.S. residents. Loommi, Inc. provides the common rights baseline below to residents of all 50 U.S. states and the District of Columbia, even when a state statute would not require every right for a particular person or business. Where applicable law provides a stronger or additional right, Loommi honors that law.
1. Rights available nationwide
You may ask Loommi to:
- confirm whether Loommi processes personal information about you;
- access the personal information and receive a copy;
- correct inaccurate information;
- delete information, subject to lawful exceptions;
- provide eligible information in a portable, usable format;
- identify third parties that received information where applicable law requires it;
- withdraw a consent;
- opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects; and
- appeal a denied request.
Loommi does not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or profile a person to make a legal or similarly significant decision. Loommi does not provide a financial incentive in exchange for personal information.
2. Submit a request
Use the companion application's Privacy Center when available or email support@loommi.ai with the subject “Privacy request.” Include the email address, account, device, Store interaction, or child profile involved and the right you want to exercise. Do not send a password, full payment-card number, government identification, biometric sample, child recording, or health detail by ordinary email. Loommi will provide a secure method if additional sensitive evidence is necessary.
You do not need to create a new account. Loommi may use an existing authenticated account or ask for information reasonably needed to verify your identity and protect another person. A parent or legal guardian requesting a child's information may need to establish authority for that child.
Loommi ordinarily responds within 45 days. If reasonably necessary and allowed by law, Loommi may take one additional 45-day period after notifying you and explaining why. Responses and the first two requests in a 12-month period are free unless law permits a reasonable charge for a manifestly unfounded, excessive, or repetitive request.
If Loommi declines a request, it explains the reason and how to appeal. Appeal by replying to the decision or emailing the same address with the subject “Privacy appeal.” Loommi decides an appeal within 45 days and, when required, provides a way to contact the appropriate state attorney general or regulator.
3. Authorized agents
You may use an authorized agent where law permits. The agent should submit the request through the same channel and identify that they act as an agent. Loommi may ask for signed authority and may directly confirm the request with you. If the agent has a valid power of attorney under applicable law, Loommi will apply that law. An agent cannot use authority for one request to obtain unrelated information.
For a browser-based opt-out signal, the browser or device acts as the agent and no additional proof is required for the signal's legally defined scope.
4. Global Privacy Control
Loommi recognizes Global Privacy Control and another legally required universal opt-out signal as a request to opt out of sale, sharing, and targeted advertising for the browser or device sending it. Where Loommi can reliably associate the signal with an account, it applies the choice to the account.
Because Loommi does not engage in those practices, a signal does not reduce or alter current service. Loommi will not begin such a practice without first deploying the required signal handling and updating the applicable notice and choice.
5. California collection and preceding-12-month disclosures
5.1 Categories used by current public services
This factual disclosure is limited to the website, Store, adult waitlist, customer-account entry points, and support communications that were available during the preceding 12 months. It does not report a planned child, biometric, health, cloud-media, memory, or subscription category as if Loommi had already collected it.
| California category | Current examples | Sources | Business purposes | Recipient categories |
|---|---|---|---|---|
| Identifiers | Adult waitlist email and optional first name; account or Store identifier; IP address and device headers processed at the network edge | Adult subscriber, browser, Shopify, Cloudflare | Waitlist confirmation, Store and account operation, security, support | Hosting, network, account, email, and commerce providers |
| Customer records | Contact information intentionally submitted through an account, order, or support message | Consumer and commerce provider | Respond, authenticate, support a transaction or request | Account, commerce, email, and support providers |
| Commercial information | Catalog view, cart state, discount or gift-card entry, and any completed transaction record | Consumer and Shopify | Operate and secure the Store; support a transaction | Shopify and configured commerce providers |
| Internet or electronic activity | Requested page, time, Store session, cart activity, browser or device header, and security signal | Browser, network, Shopify, Cloudflare | Deliver, protect, and troubleshoot the current services | Hosting, network, security, and commerce providers |
| Geolocation | Coarse region inferred from IP or a shipping region; no ordinary request for precise location | Network and consumer-supplied address | Region enforcement, security, tax, and delivery when applicable | Network, commerce, tax, and delivery providers |
| Sensitive personal information | Account credentials or payment information handled by the relevant account or payment provider; Loommi does not request child, biometric, health, or precise-location information through the adult waitlist | Consumer and configured provider | Authenticate and secure the requested account or transaction | Restricted account and payment providers |
The current public website and adult waitlist do not intentionally collect child audio, images, video, transcripts, biometric templates, consumer health data, or precise geolocation. A person can choose to send information in a support message; Loommi asks people not to send those sensitive categories by ordinary email.
5.2 Planned categories not currently collected
The following table describes categories a planned service could collect only after the related feature is made available and the person enables it after the required contextual notice and permission. This table reserves the disclosure framework; it is not a claim that Loommi collected each category in the preceding 12 months.
| California category | Loommi examples | Sources | Business purposes | Disclosed for a business purpose |
|---|---|---|---|---|
| Identifiers | Name, email, account ID, device ID, IP address, order number | You, guardian, browser, device, Shopify, account provider | Account, Store, pairing, security, support | Hosting, account, email, commerce, delivery, support processors |
| Customer records | Contact, billing and shipping details, purchase and warranty record | You and commerce providers | Order, tax, delivery, return, warranty | Shopify, payment, fulfillment, carrier, repair processors |
| Protected characteristics | Age or age band, parent status, optional accessibility information | You or a parent/legal guardian | Age-appropriate service, lawful consent, requested accessibility | Restricted account or feature processors only |
| Commercial information | Cart, purchase, subscription, return, refund, warranty | You and commerce providers | Complete and support transactions | Shopify, payment, fulfillment, accounting, support processors |
| Internet or electronic activity | Store session, request log, app and device interaction, security event | Browser, application, device | Deliver, protect, troubleshoot | Hosting, security, account processors |
| Geolocation | Coarse location inferred from IP or shipping region; Loommi does not request precise location for ordinary operation | Network and order information | Region enforcement, tax, fraud, delivery | Hosting, commerce, tax, delivery processors |
| Audio, visual, and sensory information | Activated voice, camera frame, support upload | You and enabled device sensors | Requested AI, accessibility, recognition, safety, support | On-device by default; named optional processor after permission |
| Inferences | Confirmed interest, memory, safety or reliability signal | On-device processing and parent confirmation | Requested personalization, safety, machine reliability | Restricted feature processors only when enabled |
| Sensitive personal information | Account credentials, child information, precise contents of communications, biometrics, health or accessibility information | You, parent, device, enabled feature | Authenticate, provide requested child/safety/accessibility/recognition feature | Restricted processors under specific notice and consent |
| Professional or education information | Not requested for ordinary household use | — | — | — |
Loommi's source categories are the consumer, a parent or legal guardian, browser, application, paired device, enabled sensor, account or commerce provider, service processor, and optional integration chosen by the consumer.
Loommi's business purposes are providing the requested service; processing orders and support; authenticating users and devices; security and fraud prevention; debugging; safety; short-term transient use; internal machine reliability; quality assurance; and legal compliance. Loommi does not use child information, raw voice or video, biometric data, or consumer health data for general-purpose AI training.
Loommi does not sell or share any category for cross-context behavioral advertising. It has not sold or shared personal information in the preceding 12 months. It does not knowingly sell or share personal information of anyone under 16.
6. California sensitive information
Loommi uses sensitive personal information only to provide a service an eligible person requests, ensure security and integrity, resist fraud, protect physical safety, perform short-term transient processing, provide child and accessibility features after the required permission, and maintain service quality. Loommi does not use sensitive personal information to infer characteristics for advertising or another purpose that would require a separate limitation control under California law.
If that changes, Loommi will provide the required “Limit the Use of My Sensitive Personal Information” control before the new use begins.
7. California additional disclosures
- Shine the Light: Loommi does not disclose personal information to third parties for their own direct marketing, so there is no such list to provide under California Civil Code section 1798.83.
- Do Not Track: Loommi does not use current Store browsing for cross-site behavioral advertising. Global Privacy Control is honored as described above. A generic Do Not Track header has no additional standardized effect.
- Minor content removal: If Loommi later permits a registered minor to post content publicly, it will provide the removal instructions required by California law. Loommi does not currently offer public child posting.
- Non-discrimination: Loommi will not deny a product, charge a different price, or reduce quality because a person exercised a privacy right, except that a feature cannot operate without information genuinely necessary for that feature.
8. Other state-specific rights
Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with operative consumer privacy laws retain the access, correction, deletion, portability, opt-out, consent, authorized-agent, signal, appeal, and non-discrimination rights their law provides.
Connecticut residents receive sensitive-data protections whenever that law applies, including consent, necessity, a data-protection assessment, and the Privacy Notice's statement that child information, raw media, biometric data, and consumer health data are not used for general-purpose model training.
Oregon residents may request the specific third parties that received their information where the law provides that right. Minnesota residents may request information about profiling and challenge an eligible significant- effect profiling decision; Loommi does not currently make such a decision.
Nevada residents may opt out of a covered sale. Loommi does not sell covered information. Washington and Nevada consumer-health requests use the dedicated policies linked below.
9. Children, biometrics, and consumer health
Specialized rules apply regardless of whether a general state-law business threshold is met:
- Children's Privacy Notice
- Biometric Privacy and Retention Policy
- Washington Consumer Health Data Privacy Policy
- Nevada Consumer Health Data Privacy Policy
A general Terms acceptance is not consent to collect child, biometric, or consumer health data. The eligible person receives the specific notice and choice before processing begins.
10. Retention and deletion exceptions
The Privacy Notice provides Loommi's category schedule. Deletion may exclude the minimum information reasonably necessary to complete your transaction; detect a security incident or fraud; exercise or defend a legal claim; comply with tax, accounting, warranty, recall, or other law; protect another person's rights; or maintain a record of consent or withdrawal. An exception is limited to its purpose and is not used to continue an unrelated feature.
11. Contact
Loommi, Inc. 14 Tews Ct Newport, RI 02840, USA Telephone: (781) 718-2161 support@loommi.ai