Privacy Policy

Overview

Lokt ("Lokt," "we," "us") operates the Lokt mobile app, which lets you put your own money behind a personal goal you set. This policy explains what information we collect when you use Lokt, how we use it, who we share it with, and the rights you have over it.

By creating a Lokt account or using the app, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use Lokt.

Information we collect

We collect the following categories of information:

• Account information: your name, email address, and timezone, obtained via Google Sign-In when you create an account.
• Device information: a push-notification token for your device, used to send you reminders and updates about your stakes.
• Stake information: the goals you create, including goal text, stake amount, deadline, status, and the charity you chose.
• Proof data: your puzzle attempts, and any photos you submit as proof, along with the time each photo was captured.
• Payment and refund records: Razorpay order, payment, and refund identifiers, and the amounts associated with them.
• Security logs: IP addresses and request identifiers, collected for fraud prevention and debugging.

How we use your information

We use the information above to:

• Create and manage your Lokt account, and sign you in;
• Run the core Lokt flow — creating stakes, opening and closing proof windows, reviewing proof, and processing refunds or donations based on the outcome;
• Process payments, refunds, and donations through Razorpay;
• Send you push notifications about your stakes (for example, when a proof window is opening or closing);
• Detect and prevent fraud, abuse, and re-used or fabricated proof;
• Debug and improve the app; and
• Meet our legal and tax obligations.

We do not use your information for advertising, and we do not sell your personal data.

Google user data

Lokt uses Google Sign-In as its only method of signing in. When you sign in with Google, we receive:

• Your name;
• Your email address; and
• Whether that email address is verified,

using the standard openid, email, and profile scopes. We use this information only to create and identify your Lokt account. Lokt does not request or access your Gmail, Google Drive, Google Contacts, or any other Google service or data beyond what's listed above.

Lokt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Photos and proof data

Photos you submit as proof are uploaded to Google Cloud Storage, hosted in India (Mumbai region, asia-south1). Location data and other metadata are stripped from the copy that our reviewers see. Photos are used only to verify that you completed your goal, and to detect photos that have been re-used across stakes. See Data retention for how long we keep proof photos.

Payments

All payments on Lokt are processed by Razorpay, an RBI-regulated payment aggregator. Lokt never sees or stores your card numbers, UPI PINs, or bank credentials — these are handled entirely by Razorpay. We store only Razorpay's order, payment, and refund identifiers, along with the associated amounts, so we can track and reconcile your stakes.

Who we share data with

We share information with the following service providers, only as needed to run Lokt:

• Google Cloud — hosting and storage, including photo storage;
• Razorpay — payment processing;
• Google — sign-in, and push notifications via Firebase Cloud Messaging; and
• Your chosen charity — when a stake fails, we share the donated amount with the charity you selected. We do not share your personal details with the charity unless you specifically ask us to, for example to issue you a donation receipt.

We do not run ads, we do not sell your personal data, and we do not share your data with advertisers.

Security logs

We keep security logs — including IP addresses and request identifiers — for fraud prevention and debugging. These logs help us detect suspicious activity such as fabricated or re-used proof, and multiple accounts created to abuse the platform.

Data retention

• Account data is kept for as long as your account is active.
• Payment and transaction records are kept as required by applicable law, typically up to 8 years.
• Proof photos are deleted within 90 days of the stake being resolved and any dispute window closing.
• You can request deletion of your account and associated data at any time by emailing us — see Contact us.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Erase your data, subject to our legal retention obligations described above;
• Withdraw consent for processing, where consent is the basis for that processing;
• Grievance redressal — raise a complaint about how we've handled your data; and
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email us at the address in Contact us.

Age requirement

Lokt is only for users aged 18 and over. We do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date at the top of this page. Continuing to use Lokt after a change means you accept the updated policy.

Contact us

For any privacy question, data request, or grievance, email us at:

lokt.customer.support@gmail.com

Governing law

This policy is governed by the laws of India.