Privacy Policy

1. Introduction

Lolo ("we," "our," or "us") is operated by Consort Technologies. This Privacy Policy explains how we collect, use, and protect your personal information when you use our location-based social networking platform at lolo.consort.tech (the "Service").

2. Information We Collect

2.1 Account Information

• Email address (via social login providers)
• Social media profile data (Google, Twitter/X, Telegram, Farcaster, LinkedIn, World ID)
• Username and display name
• Profile photo (optional)

2.2 Location Data

• Approximate location when you "ping" on the map (neighborhood, city, state, or country level)
• We do NOT store precise GPS coordinates
• Location data is only visible to other users at the granularity level you choose

2.3 Blockchain Data

• Wallet addresses you connect (Ethereum, Base, Solana, and other supported chains)
• Token holdings and NFT ownership (publicly visible on blockchain)
• On-chain transaction history related to Lolo events (event check-in NFTs, reputation badges)

2.4 Social Activity

• Friends and connections within Lolo
• Messages you send through Lolo

2.5 Contacts and Phone Discovery

• Phone contacts you choose to share for contact discovery
• Phone numbers from shared contacts, normalized and matched against hashed phone numbers for Lolo users who are discoverable by phone
• Contact-based matches between you and Lolo users already in your phone contacts
• Phone number information you choose to link to your account, such as a hashed phone number and last four digits, if phone discovery is enabled

Contact sharing is optional. We use shared contacts to help you find people you already know on Lolo. We do not sell contact information or use it for advertising.

2.6 Usage Data

• Device type, browser, operating system
• IP address (used for geolocation and security)
• Pages visited, features used, time spent on the Service
• Referral, install, and acquisition information when you open or share Lolo links
• Push notification subscription identifiers and device platform when you opt in to notifications

3. How We Use Your Information

• Display your location and profile to other users on the map
• Calculate your reputation score based on social connections, blockchain activity, and community engagement
• Enable event creation, RSVPs, and check-in NFT minting
• Facilitate friend connections and vouching
• Help you find phone contacts and social connections who are already on Lolo
• Send notifications about events, vouches, and app updates (if you opt in)
• Attribute referrals and invite links
• Improve the Service through analytics and bug fixes
• Comply with legal obligations and enforce our Terms of Service

4. Information Sharing

4.1 Public Information

The following information is publicly visible to other Lolo users:

• Your username, display name, and profile photo
• Your current ping location (at the granularity level you choose)
• Your reputation score and pillar breakdown (if you make it visible)
• Linked social accounts and wallet addresses
• Events you create or attend
• Vouches you give or receive (staked reputation amounts)

4.2 Third-Party Services

We use the following third-party services to operate Lolo:

• Supabase: Database and authentication (hosted in the US)
• Mapbox: Map rendering and geocoding
• Alchemy / Helius: Blockchain data indexing
• Vercel: Hosting and deployment
• OneSignal: Push notification delivery
• Resend: Email notification delivery
• PostHog: Product analytics
• Social login providers: Apple, Google, Twitter/X, World ID, Telegram, Farcaster, and LinkedIn

These services may have access to your data as necessary to provide their functionality. We do not sell your data to third parties.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Lolo, our users, or the public.

5. Data Security

We use industry-standard security measures to protect your data, including:

• Encrypted HTTPS connections
• Secure database hosting via Supabase
• OAuth 2.0 for social authentication (we never store your social media passwords)
• Regular security audits and updates

However, no system is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights and Choices

6.1 Account Deletion

You can delete your account at any time through the app settings. This will remove your profile, pings, and associated data from our database. Note that blockchain transactions (event check-ins, NFTs) are permanent and cannot be deleted.

6.2 Data Access

You can view most of your data within the app (profile, reputation, events, friends). For a full data export, please contact us at ibukarel@gmail.com. We are working on an automated data export feature.

6.3 Privacy Controls

• Control who can see your reputation details (all users vs. equal/higher rep only)
• Choose your ping granularity (neighborhood, city, state, country)
• Choose whether to share contacts and whether phone discovery is enabled for your account
• Opt in or out of push notifications
• Unlink social accounts or wallets at any time

7. International Users

Lolo is hosted in the United States. By using the Service, you consent to the transfer and processing of your data in the US, which may have different data protection laws than your country of residence.

8. Children's Privacy

Lolo is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

• Email: ibukarel@gmail.com
• Company: Consort Technologies
• Website: https://lolo.consort.tech