Privacy Policy

1. Scope of this policy

This Privacy Policy applies to everyone who uses Lopaostab — the app, its web version, and any related services we operate. It covers information we collect directly from you, information generated by your activity on the platform, and information we receive from third-party service providers that help us run Lopaostab (such as cloud hosting, media storage, authentication, analytics, and payment-support providers).

It does not cover the practices of unrelated third-party websites or services you may reach through links shared on Lopaostab. We encourage you to review the privacy practices of any third-party service before providing it with information.

2. Information we collect

2.1 Account and profile information

• Email address and authentication details used to create and secure your account.
• Display name, username, profile photo, bio, and other profile fields you choose to add.
• Date of birth, collected to confirm you meet the age requirements for general use and for money-related features.
• If you sign up using a third-party sign-in option, we receive the basic profile information that option shares with us (typically your name, email, and profile photo).

2.2 Content you create

Posts, photos, videos, reels, stories, comments, reactions, direct messages, group and channel messages, live-stream broadcasts, marketplace listings, and any other content you upload, publish, or send through Lopaostab.

2.3 Usage and device information

• Log data such as app version, device type, operating system, crash reports, and general performance data.
• Interaction data such as which features you use, screens you visit, and content you engage with, used to keep the app fast and to improve it.
• This category of data is processed with the help of third-party analytics service providers acting on our behalf.

2.4 Marketplace and monetization information

If you buy or sell on the Lopaostab Marketplace, apply for creator monetization, or request a withdrawal, we collect the information reasonably necessary to process and verify those transactions — including order details, payout requests, and the identity/age-verification information described in section 44 of our Terms.

2.5 Communications with us

When you contact support, report content, submit an appeal, or send a copyright notice, we keep a record of that communication and any information you provide in it.

3. How we use information

• To create, secure, and maintain your account, and to authenticate sign-ins.
• To operate core features: your feed, messaging, stories, reels, live streaming, search, and discovery.
• To operate paid features: coin purchases, gifting, marketplace transactions, creator monetization, and withdrawals.
• To detect and prevent fraud, abuse, spam, and security threats, including account takeovers and payment fraud.
• To enforce our Terms & Conditions and Community Guidelines, including reviewing reports and appeals.
• To send you service-related notices, security alerts, transaction confirmations, and — where you've allowed it — product and engagement notifications.
• To measure and improve app performance, stability, and features.
• To comply with legal obligations, respond to lawful requests, and enforce age and eligibility requirements.

4. Our AI assistant

Lopaostab includes a built-in assistant (Lopaost AI). The assistant is designed to run locally on your device. Chat history with the assistant is stored on your device. We do not send your AI chat messages to external large-language-model providers to generate replies.

AI responses may still be inaccurate, incomplete, or unsuitable for a particular purpose. You are responsible for reviewing any AI-generated material before relying on or publishing it. AI output is not professional legal, medical, financial, or other specialist advice. AI features must not be used for unlawful, harmful, abusive, fraudulent, or rights-infringing purposes. See section 6 of our Terms.

5. Cookies and local storage

Lopaostab uses cookies, local storage, and similar technologies to keep you signed in, remember your theme and preferences, and understand app performance. Full details are in our Cookie Policy.

6. How we share information

We share information only in the following circumstances:

• Third-party service providers. We use trusted third-party providers for things like cloud hosting, database storage, media (photo/video) hosting, authentication, push notifications, and analytics. These providers process information on our behalf, under confidentiality and data-protection obligations, and only to provide the services we ask them for. Our AI assistant runs locally on your device, as described in section 4, and does not send your chat messages to a third-party AI provider.
• Other users, as intended by the feature. Public posts, profiles, comments, live streams, and marketplace listings are visible to other users by design. Direct messages are visible only to their participants. Our staff and administrators cannot read your direct messages in the ordinary course of running the Service; access is technically restricted, and group-chat visibility for moderation does not extend to one-to-one conversations. The narrow exception is a valid legal request, described below: where we are lawfully required to do so, a message export may be produced for a named account and a limited date range. Every such export is permanently recorded, including who ran it, the authority that requested it, and the legal basis relied on.
• Marketplace counterparties. Information reasonably necessary to complete a transaction (such as an order reference) may be shared between a buyer and seller.
• Legal and safety reasons. We may disclose information where required by law, to respond to a valid legal request, to protect the rights, property, or safety of Lopaostab, our users, or the public, or to investigate fraud or Terms violations.
• Business transfers. If Lopaostab is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy or a policy offering comparable protection.
• With your consent. We may share information for other purposes if you clearly direct us to.

7. Push notifications

If you enable push notifications, we use a third-party push-notification service provider to deliver alerts for things like likes, comments, follows, messages, and security alerts. You can turn each notification type on or off individually in Settings → Notifications, and you can disable push notifications entirely at the device level at any time.

8. Payments and financial data

Coin top-ups, verification purchases, and certain other paid features may currently be processed manually or through third-party payment-support channels, as described in section 24 of our Terms. When you make a manual payment, you provide a payment reference so it can be matched and verified — we do not ask for or store full card numbers through this process.

Marketplace and creator withdrawal requests require the payout details necessary to send funds (such as a bank account name and number), which are used solely to process that payout and are handled under the same security standards as the rest of your account data.

7A. SIGN-IN RECORDS AND APPROXIMATE LOCATION
To help you notice a sign-in that isn't yours, we keep a record of the devices signed in to your account. Each record includes the device it was made from (for example the phone model reported by the device, or the browser and operating system), the app used, your language setting, and when it was last active. You can see this list, and remove a device from it, in the app.
We also record an approximate location for each sign-in. This is worked out on our servers from the network address your device connects through, not from your device's GPS or precise location. We do not ask for, collect, or store precise location for this purpose. The result is typically accurate only to a city or country, and is often the location of your mobile carrier's or internet provider's network rather than where you actually are. It is shown to you labelled as approximate, and is never used on its own to lock or restrict an account.
We do not retain your full network address for this purpose. It is used to carry out the location lookup and is then reduced to a shortened form that identifies the network rather than an individual connection.
To perform the lookup we send the network address to a third-party network-location provider acting on our behalf. That provider receives the address and returns location information; it does not receive your name, account, or message content.
These records are kept for as long as the associated device remains signed in, and are removed when you remove the device or delete your account, unless a longer period is required to investigate abuse or to meet a legal obligation. Because these records show where and when your account has been used, they form part of the information that may be disclosed in response to a valid legal request, as described elsewhere in this policy.

8A. AUTOMATED PAYMENTS THROUGH A PAYMENT PROVIDER
Where a purchase is processed automatically rather than manually, it is handled by an authorized third-party payment provider acting as an independent controller of the payment data it collects. To start a payment we share with that provider the information needed to process it, which includes your email address, the amount and currency, and a reference identifying the purchase.
Card details are entered on and handled by the payment provider, not by Lopaostab. We do not receive or store your full card number, expiry date, or security code. For automatically renewing subscriptions the provider stores a token that allows it to charge the same payment method again; that token is held by the provider, and Lopaostab holds only a reference to the subscription so it can be shown to you and cancelled on request.
The provider returns to us confirmation of whether a payment succeeded, the amount, a transaction reference and, where applicable, the subscription status. We keep those records for accounting, fraud-prevention, dispute-handling, and legal-retention purposes. Your use of the payment provider's service is also subject to that provider's own privacy policy.

9. Location information

Lopaostab can optionally tag a post with your approximate location if you choose to enable it and grant your device's location permission when prompted. Location tagging is off unless you turn it on for a specific post, and you can revoke location permission at any time through your browser or device settings.

10. How long we keep data

We keep information for as long as it's needed for the purposes described in this policy — generally, for as long as your account is active, plus a reasonable period afterward for security, fraud-prevention, dispute-resolution, tax, and legal-compliance purposes. Some content may remain temporarily in backups, security logs, or transaction records after deletion, as described in section 30 of our Terms.

11. Data security

We use reasonable administrative, technical, and organizational safeguards — including encrypted connections, access controls, and monitoring — to help protect your information. No method of transmission or storage is 100% secure, and we can't guarantee absolute security. If you believe your account has been compromised, contact us immediately (see Contact & Support).

12. Children and age requirements

Lopaostab requires users to be at least 13 years old, or the higher minimum age required by applicable law in your country, to create an account and use the Service. Users under 18 additionally cannot access money-related or commercial features (coins, gifts, marketplace, monetization, or advertising purchases), regardless of parental permission for the account itself — see section 2 of our Terms. If we learn that we've collected information from a child under the applicable minimum age in violation of applicable law, we'll take steps to delete it.

13. Your rights and choices

Depending on your location and applicable law, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information, most of which you can edit directly in your profile and settings.
• Delete your account and associated personal information — see Delete your account for how, subject to the retention needs described above.
• Export a copy of your information in a portable format.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Control notifications and, where applicable, location and other permissions, through in-app settings and your device settings.

To exercise any of these rights, contact us using the details in Contact & Support. We may need to verify your identity before acting on a request.

14. International data transfers

Lopaostab is offered worldwide and operates from Nigeria. Because Lopaostab is used globally, your information may be processed and stored in Nigeria and in other countries where we or our third-party service providers operate, which may have different data-protection laws than your own country. Where information is transferred internationally, we take steps intended to ensure it continues to receive an appropriate level of protection, consistent with applicable data-protection law.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we'll update the effective date above and, where appropriate, provide notice through the app or another reasonable channel. Continued use of Lopaostab after a change takes effect constitutes acceptance of the updated policy, to the extent permitted by applicable law.

16. Contact us

Questions about this policy, or requests relating to your personal information, can be sent through our official channels — see Contact & Support. Lopaostab operates in Nigeria; official privacy notices may be submitted through the designated contact channels listed there.