Privacy Policy

Last updated: June 2026

1. Purpose and Scope

This Privacy Policy outlines how Lokul ("we," "our," or "us") collects, processes, utilizes, maintains, and secures personal and tracking data acquired when you install, register, or interface with the Lokul mobile application (the "App").

Target Audience Limitations: Lokul is engineered, hosted, and intended exclusively for operation within the United States. We make no representations that this policy or our data practices satisfy the legal standards of international data jurisdictions, such as the European Union's General Data Protection Regulation (GDPR). If you reside outside the United States, you are unauthorized to use the App.

2. Information We Collect and Process

We collect data essential to operate the App. We do not sell your data or use it for cross-app advertising or tracking.

  • Account and profile information: When you create an account, we collect your name, email address, username, date of birth (to verify you are 18 or older), optional bio, and profile photo. If you sign in with Apple, we may receive your name and email from Apple on first sign-in.
  • Location data: To show nearby events, place map markers, and verify event check-ins, we collect location data. Precise location is collected in the foreground while you use the App or when you check in. If you decline GPS, you may set a home city or area (coarse location) so discovery still works. You can change location permissions anytime in your device Settings.
  • User-generated content: Content you create or upload in the App, including event listings, photos and videos (including event stories), direct messages, group chat messages, comments, and reports.
  • Engagement and usage data: Which events you view, RSVP to, share, check into, boost, or host; friend connections; and related in-app activity linked to your account.
  • Purchase information: Records of in-app purchases and subscriptions (such as Lokul Pro and event boosts) processed through Apple's App Store. We receive subscription and purchase status from our payment partner; we do not collect or store your full payment card details.
  • Identifiers and device information: A unique user ID for your account, and—if you enable push notifications—a push notification token and basic device information (such as platform and device model) so we can deliver alerts. Our servers may also receive standard connection metadata such as IP address when you use the App.

We do not collect your phone number, contacts, SMS or email inbox contents, browsing history, or advertising identifiers for tracking.

3. Third-Party Service Providers

We use trusted vendors to run the App. They process data on our behalf and are not permitted to use it for their own marketing or cross-app tracking:

  • Supabase — authentication, database, file storage, and backend APIs. Profile data, messages, events, location, and usage records are stored on Supabase infrastructure in the United States.
  • RevenueCat — subscription and in-app purchase management for Lokul Pro and boosts. RevenueCat receives your App Store purchase and entitlement status linked to your account.
  • Mapbox — map display in parts of the App. Mapbox receives map usage needed to render tiles; we have disabled Mapbox telemetry in the App.
  • Expo (push notifications) — delivery of optional push notifications when you grant permission. We store your push token linked to your account.
  • Apple — Sign in with Apple (optional), Apple Maps, and on-device place search for address and city lookup. Geocoding uses Apple services on your device; we do not send your searches to third-party ad networks.

We do not use Firebase, Google Analytics, or similar third-party advertising or analytics SDKs in the App.

4. How We Use Your Information

We use your information only to operate and improve the App:

  • Create and secure your account, verify age eligibility, and maintain your profile.
  • Show nearby events, maps, RSVPs, check-ins, messaging, and social features.
  • Process subscriptions, boosts, and other in-app purchases.
  • Send optional push notifications you have allowed.
  • Enforce our Terms and Conditions, block abusive users, review reports, and protect safety.

5. Sharing and Disclosing Your Data

We will never sell, lease, monetize, or trade your personal raw data or geolocation logs to data brokers, ad networks, or commercial marketing firms. Your data is shared solely under the following parameters:

  • With Event Hosts: When you explicitly press the RSVP or Check-In action buttons for a particular event list, your public profile information (name, avatar photo, RSVP status, and time of check-in confirmation) is shared with and made visible to the specific Host managing that event profile.
  • For Overriding Legal/Public Safety Reasons: We will actively share data records, including IP numbers and location metadata, with state or federal law enforcement bodies if required to do so by a valid subpoena, court order, statutory regulation, or if we possess a good-faith belief that disclosure is strictly necessary to prevent physical harm, property damage, or immediate public safety crises (such as illegal street takeovers).

6. Data Retention and Mandatory In-App Deletion Purge

We retain your records only for the duration necessary to satisfy the utilities described in this document.

Account Deletion Tool: In accordance with mobile platform compliance, the App features a clear, self-service account deletion mechanism within the user profile configuration menu. Upon your execution of this tool, an automated backend pipeline is initiated that completely purges, wipes, or fully anonymizes your entire personal row entry from our Supabase auth.users database and public profile records within thirty (30) days of your deletion request, except for any transactional records we are legally mandated to retain under federal or state accounting laws.

7. Security Management

We institute commercially reasonable, structural, administrative, and electronic safety protocol protections over our database tables. However, no data transmission across the mobile web or cloud server array is 100% impenetrable. While we work diligently to isolate your database rows, we cannot guarantee its absolute immunity against malicious actors or system data leaks.

Express Conditional Waiver and Release: Contingent upon Lokul's implementation and maintenance of the commercially reasonable measures described herein to protect and secure data, you hereby expressly, unconditionally, and irrevocably covenant not to sue, and agree that Lokul shall have no liability whatsoever for, any security incidents, unauthorized data access, or data breaches.

Under such specific circumstances, you explicitly waive and release any and all rights to seek legal or equitable remedies, restitution, or financial recovery of any kind from Lokul, and covenant that Lokul shall not be liable for:

  • Categories of Damages: Including, without limitation, direct damages, actual damages, indirect damages, incidental damages, special damages, punitive damages, exemplary damages, or consequential damages of any kind or nature whatsoever, including but not limited to lost corporate profits, business interruption, or the loss or corruption of proprietary data.
  • Categories of Legal Claims: This comprehensive release applies to any and all causes of action, liabilities, claims, demands, or legal theories, explicitly including those sounding in negligence, breach of contract, breach of implied contract, strict liability, or any other statutory, equitable, or common law tort claims under the laws of the State of Florida.

8. United States State-Level Privacy Disclosures

Depending on your U.S. state of residence (including states enforcing comprehensive consumer frameworks like California, Virginia, Colorado, and the Florida Digital Bill of Rights), you possess specific consumer privileges regarding your records:

  • Right of Access/Confirmation: The right to verify whether we process your data and receive an organized read-out of your collected profile files.
  • Right of Correction: The right to amend or rectify any broken or inaccurate personal profile listings.
  • Right of Erasure/Deletion: The right to demand the permanent deletion of your collected records (readily handled via our 30-day in-app tool).
  • Right to Opt-Out of Profiling/Targeting: We do not track users across external apps for commercial targeting, nor do we employ automated decision profiling that yields major financial or legal impacts.

To exercise these rights, or if you wish to file a formal appeal regarding a data access request, submit your inquiry to our privacy team at privacy@lokul.live.

9. Children's Privacy Safeguards

The Service is strictly restricted to individuals who are 18 years of age or older. We do not knowingly or intentionally collect, track, or maintain personal records or geolocation fields from minors under the age of 18. If we determine that a minor under the age of 18 has established an account, we will instantly wipe their data assets from our database infrastructure.

10. Revisions to This Disclosure

We reserve the right to alter this Privacy Policy at our discretion. Any changes will be signaled by updating the "Last Updated" date at the peak of this layout.

11. Contact Channels

For privacy queries or data accessibility requests, contact us at:

Lokul Website: https://www.lokul.live
Email: privacy@lokul.live