LARKING / PRIVACY POLICY
UPDATED · APR 24, 2026

PRIVACY POLICY.

What we collect, what we don't, and what we'll never do with any of it. The short version: we collect what we need, and nothing more.

Contents
  1. §01WHAT WE COLLECT
  2. §02WHY WE COLLECT IT
  3. §03WHO WE SHARE WITH
  4. §04COOKIES & TRACKING
  5. §05YOUR RIGHTS
  6. §06DATA RETENTION
  7. §07CHILDREN
  8. §08SECURITY
  9. §09CHANGES
  10. §10CONTACT

§01WHAT WE COLLECT

We collect three categories of information about you:

  • Account data — your email, name, password (hashed), the city you live in.
  • Usage data — which spots you've viewed, which plans you've made, your stated preferences.
  • Device data — IP address, browser type, OS, approximate location (city-level only, never precise unless you turn on routing).

§02WHY WE COLLECT IT

To run the service. To grade better. To stop bots. That's it. We do not build advertising profiles. We do not sell data. We do not allow the data to leave the building for a vacation.

§03WHO WE SHARE WITH

Service providers — Stripe (billing), AWS (hosting), Sendgrid (transactional email). All bound by their own data-processing agreements. We share only what they need to do their job, and we do not share with anyone else, ever.

§04COOKIES & TRACKING

Three cookies. One holds your session. One remembers your tier. One holds your preferences. No third-party trackers. No retargeting pixels. No Facebook anything.

§05YOUR RIGHTS

Under GDPR, CCPA, and similar regimes, you may:

  • Request a copy of all data we hold about you.
  • Request that we correct or delete your data.
  • Object to specific processing.
  • Lodge a complaint with your local data protection authority.

Email larkingappai@gmail.com with the subject “PRIVACY REQUEST” and we'll respond within 30 days.

§06DATA RETENTION

Active accounts: data is retained as long as the account exists. Deleted accounts: most data deleted within 30 days. Billing records retained for 7 years (we are required to). Backups purged on a 90-day rolling basis.

§07CHILDREN

The service is not for users under 13. We do not knowingly collect data from children. If we discover otherwise, we delete and apologise.

§08SECURITY

Encryption in transit (TLS 1.3) and at rest (AES-256). Passwords hashed with Argon2id. Annual penetration tests. Bug bounty at larkingappai@gmail.com. We are not perfect; we are vigilant.

§09CHANGES

We update this policy when our practices change. Material changes are emailed to you 30 days before they take effect. The current version is always at larking.ai/privacy.

§10CONTACT

Larking Inc. · Brooklyn, NY · larkingappai@gmail.com. The privacy officer reads every email.

questions? larkingappai@gmail.com← back to the cover