Privacy Policy
1. Introduction
Locals Only LLC (“Locals Only,” “we,” “us,” or “our”) operates the Locals Only mobile application (“App”). This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding your personal data.
By using the App, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the App.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you register, we collect your name, email address, username, password, account type (personal or business), and zipcode.
- Profile Information: Any profile photo, biography, or other details you choose to add to your profile.
- User Content: Posts (including images), comments, likes, and direct messages you create or send through the App.
- Reports: Content you flag or report for review.
- Payment Information: When you purchase a Post Boost, our payment processor collects your payment card details. We do not store full card numbers on our servers. We receive a transaction confirmation and limited billing details (e.g., last four digits, card type) for record-keeping purposes.
- Communications: Emails or messages you send to us directly (e.g., support requests).
2.2 Information We Collect Automatically
- Location Data: Your zipcode, which you provide during registration or when updating your profile. We do not collect precise GPS coordinates.
- Usage Data: How you interact with the App, including features used, content viewed, posts created, and actions taken (follows, likes, reports).
- Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
- Log Data: IP address, access times, pages or screens viewed, and crash reports.
- Push Notification Tokens: If you enable push notifications, we collect a device token to deliver notifications to you.
2.3 Information from Third Parties
We use third-party services for authentication, cloud infrastructure, and payment processing. These services may provide us with information as part of their operation (e.g., authentication tokens, payment confirmation). We do not purchase or receive personal data from data brokers.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Operate and deliver the features of the App (feeds, posts, comments, messages, follow relationships)
- Display your content to the appropriate users based on your location and account type
- Process Post Boost purchases and manage billing records
- Send you service-related notifications (account activity, direct messages, policy updates)
- Enforce our Terms of Service, including reviewing reported content
- Detect, prevent, and respond to fraud, abuse, and security incidents
- Improve and develop new features for the App
- Comply with applicable legal obligations
- Respond to your support requests and communications
We do not use your information for targeted advertising to third parties and do not sell your personal data.
4. How We Share Your Information
4.1 With Other Users
Your profile information (username, profile photo, account type) and public posts are visible to other users of the App as determined by our platform’s feed logic. Direct messages are visible only to you and the recipient.
4.2 With Service Providers
We share information with third-party service providers that help us operate the App. These providers are contractually required to use your information only as directed by us and in accordance with this Privacy Policy. Our current service providers include:
- Amazon Web Services (AWS): Cloud hosting, database storage, file storage (S3), and authentication (Cognito). Data is stored in the United States.
- Payment Processor(s): Processing Post Boost transactions. Payment data is subject to the payment processor’s own privacy policy.
4.3 For Legal Reasons
We may disclose your information if required to do so by law, subpoena, court order, or other governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Locals Only LLC, our users, or the public.
4.4 Business Transfers
If Locals Only LLC is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via the App or email before your data is transferred and becomes subject to a different privacy policy.
4.5 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
5. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide the App’s services. Specific retention practices:
- Account Data: Retained for the duration of your account. Upon account deletion, your profile, posts, and content are removed within a reasonable period, except as described below.
- Transaction Records: Payment and billing records are retained for a minimum of seven (7) years for tax and accounting compliance.
- Log Data: Server logs and usage data are retained for up to 90 days.
- Legal Holds: We may retain data beyond standard retention periods if required by a legal obligation, dispute resolution, or law enforcement request.
- Zipcode Change History: When you change your zipcode, your prior posts are deleted from public view. We may retain metadata related to the account’s prior location for fraud prevention purposes for a limited period.
6. Your Rights and Choices
6.1 Account Information
You may update your account information at any time through the App’s settings.
6.2 Account Deletion
You may delete your account through the App’s settings. Upon deletion, your publicly visible content will be removed. Some information may be retained as described in Section 5.
6.3 Push Notifications
You may disable push notifications at any time through your device’s operating system settings.
6.4 Virginia Consumer Data Protection Act (VCDPA)
If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Delete: Request deletion of personal data we hold about you, subject to certain exceptions.
- Right to Data Portability: Request a portable copy of your personal data in a readily usable format.
- Right to Opt Out: Opt out of the sale of personal data, targeted advertising, or profiling. We do not sell personal data or conduct targeted advertising as described in the VCDPA.
- Right to Appeal: If we decline to act on a rights request, you may appeal our decision by contacting us as described in Section 11.
To exercise these rights, contact us at app.localsonly@gmail.com. We will respond within 45 days as required by Virginia law. We will not discriminate against you for exercising your privacy rights.
7. Children’s Privacy
The App is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected information from a user under 18, we will delete that information and terminate the account promptly. If you believe a user under 18 has registered for an account, please contact us at app.localsonly@gmail.com.
8. Security
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (TLS)
- Secure token storage on your device (not stored in plain text)
- Access controls restricting internal access to personal data
- VPC network isolation for database infrastructure
- Minimal IAM permissions for backend services
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. Third-Party Links and Services
The App may contain links to third-party websites or services. This Privacy Policy applies only to the Locals Only App. We are not responsible for the privacy practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party services you use.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this document. If we make material changes, we will notify you through the App or by email. Your continued use of the App after changes become effective constitutes your acceptance of the revised Privacy Policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Locals Only LLC
Email: app.localsonly@gmail.com
Website: localsonlyapp.us
For Virginia VCDPA rights requests, please include “Privacy Rights Request” in the subject line of your email.
This Privacy Policy should be reviewed by a licensed attorney before publication. This document is a draft and does not constitute legal advice.