Privacy Policy

Overview

This Privacy Policy explains how Lalarun Technologies LLC ("Lalarun", "we", "us", or "our") collects, uses, discloses, and protects information when you use the Lalarun app, VPN service, AI features, payment flows, websites, and related services.

We do not sell your personal information. We use the information we collect to operate Lalarun, secure accounts, provide subscriptions and AI features, process payments, prevent abuse, and respond to support requests.

Information We Collect

Account and authentication information

• Email address, password hash, account identifiers, verification status, and login state.
• Device-secret registration data, public keys, device identifiers, and authentication tokens.
• Two-factor authentication enrollment status and encrypted or encoded authenticator secrets when you enable 2FA.

Subscription, billing, and purchase information

• Plan, entitlement, trial, subscription, renewal, cancellation, and expiration status.
• Payment processor customer identifiers, checkout session data, transaction identifiers, and App Store purchase verification data.
• We do not store full payment card numbers. Card and payment details are handled by payment processors such as Stripe or by Apple, depending on how you buy the service.

VPN and network service information

• VPN credential issuance data, service configuration, server assignment, and authentication events.
• Operational metadata needed to run and protect the service, such as connection timing, bandwidth or packet metrics, error counts, and abuse-prevention signals.
• Lalarun is a VPN/proxy service. When your traffic is routed through the service, systems that provide the service process network traffic as needed to transmit it.

AI feature information

• AI subscription status, selected AI model level, provisioned backend status, installed skill state, and usage metrics.
• Prompts, messages, files, tool calls, and related outputs you submit to AI features may be processed by your provisioned backend and by AI infrastructure providers to provide those features.

Support and communications

• Support requests, email messages, contact details, diagnostic details you provide, and records of our responses.
• Push notification registration data if you enable notifications.

Device, app, and usage information

• App version, platform, device type, operating system, request metadata, diagnostics, crash or error information, and security logs.
• Website or Worker request metadata, such as IP address, user agent, timestamps, and routing data, as processed by Cloudflare and other infrastructure providers.

How We Use Information

• Provide, maintain, and improve the Lalarun app, VPN, subscription, AI, and support services.
• Create and secure accounts, verify email addresses, authenticate devices, and prevent unauthorized access.
• Provision VPN credentials, AI backends, AI model settings, and installable skills.
• Process purchases, subscriptions, trials, refunds, and entitlement checks.
• Detect, investigate, and prevent fraud, abuse, security incidents, and service misuse.
• Send service-related messages, verification codes, receipts, support replies, and important policy or product updates.
• Comply with legal obligations and enforce our terms and policies.

How We Share Information

We share information only as needed for the purposes described in this policy, including with:

• Infrastructure providers, including Cloudflare, Amazon Web Services, and DigitalOcean.
• Payment and app-store providers, including Stripe and Apple.
• Email, notification, support, analytics, security, and abuse-prevention service providers.
• AI infrastructure providers when you use AI features.
• Authorities, courts, or other parties when required by law or to protect rights, safety, and security.
• Successors or affiliates in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We do not sell your personal information or share it for cross-context behavioral advertising.

Data Retention

We keep personal information for as long as needed to provide the service, maintain security, meet legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary by data type. For example, account records may be retained while your account is active, billing records may be retained for tax and compliance reasons, and security logs may be retained for a limited period to investigate abuse or protect the service.

Security

We use technical and organizational measures designed to protect information, including encryption in transit where appropriate, access controls, cryptographic device authentication, password hashing, and monitoring for abuse. No system can be guaranteed to be completely secure, and you should use a strong password and protect access to your devices.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the use of certain personal information. You may also have the right to object to certain processing or withdraw consent where processing is based on consent.

To make a privacy request, contact us at support@lala.run. We may need to verify your identity before completing a request.

International Transfers

Lalarun is operated from the United States and uses service providers in the United States and other countries. Your information may be processed in countries that may have data protection laws different from those in your location.

Children

Lalarun is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided us personal information, contact us and we will take appropriate steps.

Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the app, website, email, or another appropriate method. The effective date at the top of this page shows when this policy was last updated.

Contact Us

Lalarun Technologies LLC
Email: support@lala.run