Privacy information

1. Data we collect

We collect only what is needed to run the app:

• Account data: username, password (we do not keep it as you typed it; it is stored in a scrambled form that cannot be reversed), display name, profile picture, "About me" line, and an optional e-mail address for verification once you confirm it with a code we send you.
• Content you send or post: text and voice messages, photos, videos, files and locations shared in chats and groups, statuses (they disappear after 24 hours), and the voice rooms you create.
• Usage data needed for the app to work: your friends, block and mute lists, privacy settings, presence status (online / last seen) according to your settings, read receipts, call history, and daily communication streaks.
• Device data: the notification address (FCM token) used to deliver notifications, the device type, the system and app version, and crash reports when the app fails.
• The network address (IP) reaches our servers with every request; we use it to limit the number of allowed attempts and to protect accounts from guessing and abuse.
• Reports: when you report a chat, group or user we store identifiers (reporter, reported user, chat, report type, time). When you report from inside a chat, the app draws a picture of what the chat screen shows (drawn by the app itself, without the screen-capture permission) and shows it to you before the report window opens, so you can crop or exclude it, write the reason and review everything; none of it is sent until you press "Send report". The picture may show the other party's messages and media, so attach it only if it is evidence of the violation.
• Who added you: for each person who creates a chat with you we store a single record (their identifier and the time of the addition) so we can show you "@username added you" in the notifications inbox, whether or not they sent a message.

2. Permissions the app requests and why

Every permission is optional and is requested when you use the feature; you can withdraw it from the device settings:

• Camera: taking photos inside the app and video calls.
• Microphone: voice messages, calls, voice rooms and recording video with sound, and converting speech to text through your device's speech-recognition service (which Google may process depending on your phone settings).
• Photos and videos: you choose them through Android's system photo picker, without giving the app broad access to your gallery. Audio and music: permission to read audio files in order to choose music for the video editor. We read your media only when you choose it.
• Contacts: only for the "Invite a friend" feature; the numbers are read on your device for you to choose from and are not uploaded to our servers.
• Location: only when you share your location in a chat. The location you choose is sent to the person you message, and the map is loaded from OpenStreetMap, which receives the IP address and the map area shown.
• Notifications, the battery list (a button in settings that opens the system list so you can exempt the app if you wish), exact alarms and start after reboot (calendar reminders), foreground call services, Bluetooth (call headsets), fingerprint (locking chats on your device only), and screenshot detection (alerting the other party).

3. How we use data

• Running accounts, chats, statuses, groups, calls and voice rooms.
• Sending notifications.
• Applying privacy and blocking.
• Protecting accounts and preventing abuse, reviewing reports and taking action such as suspending a violating account.
• Finding and fixing the causes of app crashes.

We show no ads, we do not sell your data, and we do not use it to track you across apps.

4. Where data is stored and who processes it

We rely on service providers who process data on our behalf only:

• Cloudflare: the Lamma 1 servers (accounts, chats, settings) and their database, the storage of photos, videos and files, and the e-mail we send you (verification codes and account alerts).
• Google Firebase: notifications (FCM), crash reports (Crashlytics), and part of the account and chat data not yet moved to Cloudflare (Authentication, Firestore, Storage, Realtime Database and server functions).
• Call server: audio and video calls and voice rooms pass through a LiveKit server that we run and manage; we do not record calls.
• Google ML Kit: translation models are downloaded once from Google and run on your device; the text of your messages is not sent to an external service for translation.
• OpenStreetMap: map images when you share a location (see above).

Messages travel between the app and the server over an encrypted connection (HTTPS) and are stored on our servers; they are not end-to-end encrypted, which means they are technically accessible from the server, and we look at them only where legal or security necessity requires it. We do not share your data with anyone else except the service providers above or when legally required.

5. Blocking, reporting and safety

You can block any user and report a chat, group or user from inside the app. The report reaches the Lamma 1 team through a protected admin panel, and an alert reaches the support e-mail with the report number and its identifiers only (without the picture or the reason). The picture and the reason are stored in private storage tied to the report, with no public link, and only the authorized moderator can see them inside the admin panel; the moderator then decides the appropriate action, including suspending the violating account, and no account is ever suspended automatically. We keep the report and what was attached to it while it is under review and for as long as it is needed to protect users.

6. Retention

• Your account data and content: as long as your account exists, and you can delete your messages and statuses; statuses disappear after 24 hours, and temporary messages follow the duration you choose.
• When you delete the account: your account is suspended immediately and permanently deleted with its data after 30 days (your profile, statuses, stored photos and files, notification tokens, e-mail, friends, and the voice rooms you created). You can restore it during those days by signing in.
• What remains after deletion: messages that reached others stay with them; a technical record without name or picture that prevents the identifier from being reused; and reports related to user safety, including the picture and reason the reporter attached, for as long as they are needed to protect users.
• Protection logs (sign-in attempts) are kept for a short time and erased automatically.

7. Deleting your account and data

From inside the app: Account settings → Delete account (with your password). From outside the app: through the account deletion page on our website, by entering your username and password to prove ownership. If you cannot, write to us at the support e-mail from the e-mail verified on your account.

• Account deletion page
  https://www.lamma1.com/en/delete-account

8. Your rights

You can edit your data from the app, ask for a copy of it or for its correction or deletion by writing to the support e-mail, and withdraw any permission from the device settings.

9. Children

Lamma 1 is not directed at children. We do not knowingly collect data from children. If you know of a child's account, tell us so that it can be deleted. For the child safety standards and to report any exploitation or abuse:

• Child safety standards
  https://www.lamma1.com/en/child-safety

10. Camera

When you use the Lamma 1 camera:

• We ask for camera permission, and microphone permission when you record video with sound.
• The camera image is processed on your device during preview and capture, and the camera itself does not connect to any external service.
• The shot is kept temporarily in the app's temporary cache to show it to you, and is deleted when you choose "Delete".
• It is not sent to the server or to anyone unless you choose to publish or send it, and it is not saved to the gallery unless you choose.

11. Updates

We may update this page when the services or the way data is handled change, and we show the updated version in the app and on the website.

12. Contact

For questions about privacy, account data and reports:

• support@lamma1.com