2:14 AM · your backyard

Something moved in the backyard.

You already know what it was. You never got up. And nobody outside this house will ever see it.

20 s

Trigger to eyes on

250 g

Maximum takeoff weight

$500

Hardware, once

0

Keys we hold

What actually happens

Luna is off the dock before you have your phone unlocked.

Four fixed cameras cover four angles and everything between them is dark. Luna covers the parcel, on demand, and puts itself away when it is finished.

  1. 00:00

    Something trips

    Motion at the side gate, glass, a noise on the north wall. Or nothing trips and you just open the app because you felt like it.

  2. 00:04

    Luna lifts

    The dock opens and the aircraft is airborne in four seconds, already climbing on the heading of whatever triggered it.

  3. 00:20

    You have eyes on

    Live on your phone, from bed. The side gate, the driveway, the dark corner behind the garage that no fixed camera has ever covered.

  4. 02:00

    It lands itself

    Back on the dock, charging, ready to go again. The recording stays in the dock. It does not go anywhere else, because there is nowhere else for it to go.

The precedent

4,000

Immigration searches run through Flock Safety cameras by local police, acting as a warrantless side door into a network homeowners paid for. Flock had a written policy prohibiting exactly that. 214 cities and counties have since ended their contracts, 90 of them inside a single month.

Source: reporting on Flock Safety audit logs, 2025. Contract count as of 2026.

The response

We do not build the feature that would let us betray you.

Seven properties of the hardware. Not values, not a pledge page, not a policy that a later executive can quietly amend. Things that are true about the machine, published and versioned at /commitments/v1 so you can diff the wording against what we say next year.

A policy is a promise.
Luna is an architecture.

The difference is that a promise survives exactly as long as the people who made it.

The commitments · v1

Seven things the machine cannot do.

01Inference in the dock
The threat model runs on dock hardware inside your house. Video is never uploaded to be processed.
02Local first storage
Footage lives on the dock. Cloud backup is opt in and off by default.
03Encrypted by default
End to end, on from the first boot. Not an advanced setting you have to go and find.
04We hold no keys
We cannot produce your footage under subpoena because we cannot read it. Warrants resolve to you.
05No law enforcement portal
Not built, not planned, not on a roadmap. There is nothing to abuse and nothing to sell.
06Geofenced to your parcel
Luna is constrained to your property boundary and cannot be flown past it.
07Transit framing
The camera points down and inward while moving, so a neighbour is never captured in the first place.

Read all nine, in full

GEOFENCE · FIRMWAREHARD STOPYOUR PROPERTY LINE · SET ONCE, AT SETUP
Luna flies inside the boundary you trace at setup. Crossing it is not a setting it declines to use. It is a limit the firmware does not expose.

Luna and the Luna Dock

Small enough that hitting a window is a scuff, not a repair.

Under 250 grams, so it stays out of federal registration and cannot hurt anyone standing under it. American supply chain from the first unit, because after the FCC covered list ruling that is the licence to operate rather than a badge for the box.

Weight
Under 250 g
Time to eyes on
20 seconds
Hardware
$500
Monitoring
$25 per month, optional

Local storage, playback and detection are free forever and work with no subscription and no internet at all. We never hold your own footage hostage.

Early access

Luna ships to the first 500 homes.

Join the list and you take a position. Refer someone and you move up it. No deposit, no card, and we will not sell your address any more than we would sell your footage.

A short note every few months, plus the big moments. Nothing else, and never to anyone else.