Legal
Privacy Policy
This policy explains what personal data Pennone Labs, LLC ("Pennone Labs", "we") collects through pennonelabs.com (the "Site") and our apps and devices (together, the "Services"), why, and what rights you have. Muti Advisory Services is a trade name of Pennone Labs, LLC. For the Site and our consumer Services, Pennone Labs is the data controller.
1. The Site
The Site is static. It sets no cookies, runs no analytics code in your browser and loads no third-party scripts. Fonts and images are served from our own domain. The Site is hosted on Amazon Web Services (CloudFront and S3), which records standard server logs for us — IP address, approximate country, user agent, referring page, pages requested, time. We use them for security, operations and aggregate traffic statistics (such as weekly page views and top referrers), and delete them after 90 days. If you email us, we keep the correspondence for as long as needed to deal with your request and for our records.
2. Our apps
Each app has its own in-app privacy notice that lists exactly what it collects; the summary below describes our general practice.
What we collect
- Account data — email address, name if you give it, authentication tokens.
- Content you provide — for example trip and bag details, photos, receipts, documents, reports and correspondence you create to pursue a claim; vessel and equipment details for monitoring.
- Tracker share links — if you paste a share link from Apple Find My or Google Find Hub, we store the link so you can reopen or forward it. The location itself is fetched by your device directly from Apple or Google when you open the link; we do not read, store or process the location behind the link unless a feature explicitly says so and you turn it on.
- Device and diagnostic data — app version, OS version, crash reports and basic usage events needed to keep the app working.
- Location and sensor data from our hardware — for devices we sell, the position, motion and status readings the device reports, associated with your account.
Why we use it
- To provide the Services you ask for and to keep your account secure.
- To fix bugs, measure reliability and improve the Services (aggregated or de-identified wherever possible).
- To contact you about your account, your cases, your devices, or changes to these terms.
- To comply with law and enforce our terms.
Where the GDPR or UK GDPR applies, our legal bases are performance of a contract (providing the Services), our legitimate interests (security, reliability, improvement), consent where we ask for it (for example optional features and marketing), and legal obligation.
Who we share it with
We do not sell personal data and we do not use it for third-party advertising. We share it only with: service providers that process it on our instructions (cloud hosting, crash reporting, email delivery, payment processing); parties you direct us to send it to (an airline, insurer, marina or regulator, when you submit a report or claim); app stores, for purchases and subscriptions; and authorities when the law requires. A current list of processors is available on request.
International transfers
We are based in the United States and our processors may be in the US or elsewhere. Where data about people in the EEA, UK or Switzerland is transferred outside those areas, we rely on standard contractual clauses or another lawful mechanism.
Retention
We keep account and content data while your account is active and for up to 12 months after you delete it, unless a longer period is required by law or needed to resolve a dispute. Case files you create to pursue a claim may matter for longer than you expect (for example, the two-year limitation period under the Montreal Convention), so we do not delete them automatically; you can delete them yourself at any time. Diagnostic data is kept for up to 24 months.
3. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of the EEA and UK may also complain to their data-protection authority. Residents of California and certain other US states have rights under their state privacy laws; we do not sell or share personal data for cross-context advertising. To exercise any right, email hello@pennonelabs.com; we will respond within the time the law allows and may ask you to verify your identity.
Account deletion is available from inside each app, or by emailing us from the address on the account.
4. Children
The Services are not directed at children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
5. Security
We use encryption in transit, encryption at rest for stored content, access controls and least-privilege infrastructure. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires.
6. Changes
We may update this policy. We will post the new version here with a new date and, for material changes, notify you through the Services or by email.
7. Contact
Pennone Labs, LLC
Florida, USA
hello@pennonelabs.com