Privacy notice
Version 2026-09-23
What this notice covers
This notice describes the personal data LAKOU actually collects today, version 2026-09-23. It is written from the application's real behaviour, not from a template. If something below does not match what you observe, treat it as a defect and tell us.
What we collect
Account data you give us: your email address, the name you type, your chosen language, and a LAKOU account reference generated for you.
Access-pass data: the PayPal transaction ID and payer email you submit when you claim a payment, the amount and currency, and the approval decision, dates and any note left by the owner.
Technical data: your language choice and your consent choice are stored in your browser. Standard server logs of requests are produced by our hosting and backend providers.
Reading statistics: when a profile page is opened we add 1 to a counter stored against that profile. The counter holds no user identifier, so it cannot show who read what.
Renewal reminders: if you switch reminders on in your profile, we store that choice so we can tell you shortly before your 30 days end. You can switch it off at any time.
We do not ask for a date of birth, a postal address, a phone number, or card details. Card and bank details are never entered in LAKOU.
What we do not use
No advertising pixels, no advertising networks, no session-replay or screen-recording tool, and no marketing-email list. Fonts are hosted on this site, so loading a page does not contact an external font provider.
Who processes data for us
Backend, database, authentication and file storage: Lovable Cloud (Supabase infrastructure). Receives your account data, access-pass records and sign-in activity.
Hosting and delivery of the site: Lovable. Receives request data such as IP address and user agent.
PayPal: you pay on PayPal's own site. PayPal receives the payment data you enter there under its own privacy notice; we only see the transaction ID and payer email you copy back to us.
Telegram: when a new member account first appears, the owner receives an internal notification containing the member's name, email, account reference and language.
Support chat (Chatbase): loaded only if you accept it. Once loaded, it receives the messages you type and basic page information. If you reject or withdraw, it is not loaded at all.
Why we process it, and how long we keep it
To operate your account and your 30-day access pass, and to review payments manually. Account data is kept while your account exists.
Access-pass and payment-review records are kept as business records after an account is deleted, with the member's identifiers removed where the record still has to exist.
Consent and language choices stay in your browser until you change or clear them.
Your choices
Consent: use Privacy settings, below or in the footer, at any time to accept, reject or withdraw the optional support chat. Rejecting leaves every part of LAKOU usable.
Export: sign in and use “Download my data” on your profile page to get a machine-readable copy of your account and payment-submission records.
Deletion: sign in and use “Delete my account” on your profile page. Your profile and sign-in credentials are removed; payment-review records are kept but stripped of your email.
Access and correction: you can edit your name and language directly on your profile page.
Children
LAKOU is intended for adults interested in Haitian cultural and religious reference material. It is not directed to children. The site operator has not yet published a minimum-age requirement; until one is published, no age is collected and none is enforced.
Security
Access to member data is enforced in the database, not only in the interface: you can read only your own profile and your own payment submissions, access dates and suspension can only be changed by the owner, and profile artwork is stored privately and served through short-lived links to signed-in members with an active pass. No system can be described as completely secure.
Contact and legal details
Owner-confirmation required: the legal entity name, postal address and contact email for privacy requests have not been supplied to us, so they are deliberately left blank rather than invented. Until the owner supplies them, use the support channels in the app for privacy requests.
