LAM - PRIVACY POLICY

This Privacy Policy explains what information LAM ("LAM", "we", "us", "our"), operated by FORKLAB (Kuwait, commercial license 2019/2665/), collects when you use lamsg.me or the LAM app, and what we do with it. It applies to registered Recipients, anonymous Senders, and anyone who simply views a public LAM page.

1. Information We Collect

1.1. If you register an account (Recipient): username, display name, bio, email address, profile image URL, time zone, year of birth, subscription/plan dates, and a device push-notification token.

1.2. Every time a Message is sent — whether by a registered user or an anonymous Sender: the Sender's IP address, and the Message's timestamp and duration, are recorded and linked to that specific Message.

1.3. The Message itself: the audio recording, stored against the Recipient's account.

1.4. We do not require an anonymous Sender to provide a name, email, or any other identifying information beyond what is described in 1.2.

2. How We Use This Information

• To operate the Service — deliver Messages, display your public page, and manage your subscription;
• To verify your account and send you service-related communications;
• To send push notifications about new Messages, where enabled;
• To investigate reported content, enforce our Terms and Conditions, and protect the safety of our users;
• To detect, prevent, and respond to fraud, abuse, or security incidents;
• To comply with legal obligations, including responding to valid law enforcement requests and mandatory reporting obligations described in our Terms and Conditions.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Legal Bases for Processing (EEA/UK Users)

Where the GDPR or UK GDPR applies to you, we process your information on the following bases: performance of our contract with you (providing the Service you signed up for); our legitimate interests in keeping LAM secure and free of abuse; compliance with a legal obligation; and, where applicable, your consent (for example, for optional push notifications).

4. Who We Share Information With

4.1. We share information with third-party service providers who help us operate LAM, including a cloud storage provider that hosts audio files, and the mobile platform's native push-notification and in-app purchase systems. These providers only receive the information needed to perform their function for us and are not permitted to use it for their own independent purposes.

4.2. We disclose information to law enforcement or other authorities where required by valid legal process, where we believe in good faith it is necessary to prevent harm, or as otherwise described in our Terms and Conditions (see "IP Logging and Disclosure").

4.3. Some of our service providers may process or store data outside Kuwait, including in jurisdictions with different data protection standards. Where this involves a transfer of personal data out of the EEA/UK, we rely on appropriate safeguards recognized under applicable law.

5. Public Information

5.1. Your username, display name, bio, and public page are visible to anyone who visits lamsg.me/<username>, including people who do not have a LAM account.

5.2. If you (as a Recipient) generate a Public Link for a Message you received, that recording becomes accessible to anyone holding the link, and may be shared further outside LAM's control.

5.3. Public pages and shared links may be indexed by search engines. We are not able to control or reverse indexing carried out by a third-party search engine, even after you delete or remove the underlying content from LAM.

6. Data Retention

Message retention depends on the Recipient's plan: Free (30 messages, deleted after 30 days), Lite (150 messages, deleted after 90 days), Premium (500 messages, kept), and Unlimited (5000 messages, kept). Account and Message data associated with a deleted account is hidden immediately and permanently purged from our active systems within [30] days, with backup copies purged on a longer cycle. Full detail is set out in our Terms and Conditions.

7. Your Rights

7.1. If GDPR/UK GDPR applies to you, you have the right to request access to, correction of, deletion of, or a copy of your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.

7.2. If the CCPA/CPRA applies to you (California residents), you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information — noting that LAM does not sell or share personal information for cross-context behavioral advertising.

7.3. To exercise any of these rights, email us at the address in Section 11. We may need to verify your identity or your control of the account before acting on a request.

8. Children's Privacy

LAM requires account holders to be at least 16 years old and does not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. Because anyone can send an anonymous Message to any public page without providing personal information, this Policy's protections for children primarily concern registered accounts; please see our Parental Guide for information relevant to a minor's use of LAM as a Recipient.

9. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) between your device and our servers, and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page and, where practical, through an in-app notice.

11. Contact

Questions about this Privacy Policy, or requests relating to your personal data, can be sent to the address below.