LU COIN Privacy Policy
LU COIN is operated by KAIDER MANAGEMENT PTE. LTD. (Singapore) ("we", "us"). This policy explains what personal data the LU COIN app and its services collect, how we use it, and the choices you have. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).
Contact for privacy questions and requests: lu@kaider.sg
1. Data we collect
| Category | What | Why |
|---|---|---|
| Account | Email address; display name and any profile details you choose to add; if you join as a member at one of our stores, the mobile number and name you give at the counter | Sign-in with an email verification code, and showing your name on your posts |
| Content you share | Posts, comments, images you upload, event registrations, follows, favourites, users you block and reports | Running the community features you use |
| LU points | Your LU wallet address (created by us), LU balance and history, store discount records, and for each store purchase that earns or uses LU: the store, order number, amount paid and payment method | Recording points you earn and spend at partner stores, and checking that each record is genuine |
| Food orders | When you order at Teacher Lu's Kitchen (陆老师小厨房) in the app: the items, pickup or delivery time, and for delivery your address, postal code, contact name and phone number; payment status | Preparing and delivering your order |
| Technical | Sign-in session, device/browser type (user agent), approximate region derived from your IP address; our servers keep standard access logs, which include IP addresses, for security | Keeping you signed in, preventing abuse and keeping the service secure |
Some data stays only on your device and is not sent to us, such as course reading progress and quiz answers, and some event interactions that the app marks as "saved on this device". When you pass a course quiz while signed in, we receive the course name so that we can add your LU reward.
2. Device permissions
- Camera: only to scan LU discount and store QR codes. The app does not take or save photos or video.
- Location (while using the app): only when you tap Locate (定位) on the events map, to show your position. We do not track your location in the background or send it to our servers. Your position is shown on the map on your device.
- Calendar: only to add events you choose to your calendar, and to remove them if you cancel.
- Photos (add only): only when you tap Save to save a PayNow payment QR code to your photo library. The app cannot read your photos. Photos you attach to posts are picked with the system photo picker, which shares only the photos you choose.
You can turn these permissions off at any time in your device settings. The rest of the app keeps working.
3. About LU points and the blockchain
LU points are membership points recorded on a public blockchain (currently the Base Sepolia test network). They cannot be transferred, traded or exchanged for cash. Your wallet address and LU balance are written to the blockchain about once a day. Blockchain records are public and permanent. They do not include your name or email, but we cannot delete them.
4. How we use your data
- To provide sign-in, the community, events, courses and LU points.
- To moderate content and handle reports. When you block a user, we are notified so that we can review their content.
- To send you sign-in codes by email, and service notices when needed.
- To keep the service secure and fix problems.
We do not sell personal data. The app shows promotions for LU COIN and our own and partner stores; these are chosen by us, not by an advertising network, and we only count how many times each promotion is shown and tapped, without linking the count to you. We do not track you across other companies' apps or websites.
5. Service providers
- Email delivery: sign-in codes are sent through our mail server.
- AI replies: some accounts in the community are clearly labelled as AI. To write their replies, the title and text of a public post and its most recent public comments (with the commenters' display names) may be sent to our AI provider (Anthropic). Private data such as your email is not sent. AI accounts do not comment on dating (交友) posts.
- App updates: the app checks Expo (expo.dev) for updates, which shares basic app and device information.
- Market data: the price list in the Academy loads public data directly from CoinGecko.
- News sources and images: the News tab loads public news feeds directly from the publishers' websites (Cointelegraph, Decrypt, OpenAI, Google, PANews and IT之家), and some images from Unsplash. These sites receive your IP address and basic device information, as with any web request.
- 狮城生活 (Local Life): if you sign in to the 狮城生活 app with the same account, we share your account ID, email, display name and avatar with it so that it can sign you in.
- Maps: the events map is a Google map, shown with Google's Maps SDK for iOS. When the map is displayed, Google receives the map requests (including your IP address and the area you view) and, as declared in Google's privacy manifest for this SDK, collects crash data, performance data, product interaction data and a device identifier for analytics and to make the map work, a Google user identifier for analytics, and other data that Google's manifest lists as "other data types" for analytics. Google says none of this is used for tracking. We do not send your name, email or account ID to Google. If you tap Locate, the map moves to your position, so the map area Google receives is around where you are. See Google's Privacy Policy.
- Partner stores: when you use LU at a store, that store sees the order and the discount.
- Teacher Lu's Kitchen ordering system: when you order food in the app, the app signs you in to the restaurant's ordering system with your LU account ID, and sends it your order and delivery details. When you join as a member at the counter, that system sends us your mobile number and name so that you can earn and use LU.
These providers process data only to provide their service to us, or under their own privacy policies for data you send them directly.
6. Retention
We keep account data and content for as long as your account exists, and delete them when you delete your account (see section 7). Sign-in codes expire after 10 minutes. Sign-in sessions last up to one year, and signing out ends them. Access logs are kept for a limited time for security.
7. Your choices and rights
You can edit your display name in the app and sign out at any time.
Delete your account in the app: go to Me (我的) → Account and privacy (账号与隐私) → Delete account (删除账号) and confirm. When you delete your account:
- you are signed out on all devices straight away, and the account can no longer sign in;
- your email address, display name, profile, sign-in codes and sessions are erased;
- your posts (including uploaded images), comments, likes, favourites, follows, blocks, event registrations and group memberships are deleted;
- your LU balance is set to zero and cannot be restored;
- we keep, without your name or email, the LU history and partner-store discount records that we need for accounting and the law, and the public blockchain records described in section 3 cannot be deleted.
The same account is also used by the 狮城生活 (Local Life) app, so after deletion you cannot sign in to either app. When you delete your account in LU COIN, we notify 狮城生活 at that moment and it automatically deletes the posts, photos, comments, likes, reports and block list you have there; you do not need to contact it separately. If that notice cannot be delivered, we keep retrying until it is.
To access or correct your personal data, or if you cannot use the in-app option, email lu@kaider.sg from the address you use to sign in. We will respond within 30 days.
8. Security
All data is sent over HTTPS. Sign-in codes and session tokens are stored on our servers only as hashes. The private keys of LU wallets are held by us, and administrator access is limited to authorised staff.
9. Children
LU COIN is only for adults aged 18 and over. You confirm that you are 18 or older when you sign in. We do not knowingly collect personal data from anyone under 18; if we learn that an account belongs to someone under 18, we will delete it.
10. Changes
If we change this policy, we will update this page and its effective date. If the changes are significant, we will also tell you in the app.
LU COIN 隐私政策
LU COIN 由 KAIDER MANAGEMENT PTE. LTD.（新加坡）运营（以下称「我们」）。本政策说明 LU COIN App 及其服务收集哪些个人数据、怎样使用，以及你可以做哪些选择。我们按新加坡《2012 年个人数据保护法》（PDPA）处理个人数据。
隐私问题与请求请联系：lu@kaider.sg
1. 我们收集的数据
| 类别 | 内容 | 用途 |
|---|---|---|
| 账号 | 邮箱；昵称，以及你自己填写的资料；如果你在我们的门店收银台登记会员，还有你登记的手机号和称呼 | 用邮箱验证码登录；在你发布的内容上显示昵称 |
| 你分享的内容 | 帖子、评论、你上传的图片、活动报名、关注、收藏、你屏蔽的用户、举报 | 提供你使用的社区功能 |
| LU 积分 | LU 钱包地址（由我们生成）、LU 余额与记录、门店九折记录；每笔获得或使用 LU 的门店消费：门店、单号、实付金额和付款方式 | 记录你获得、在联盟门店使用的积分，并核实每条记录的真实性 |
| 点餐 | 在 App 里向陆老师小厨房点餐时：所点餐品、取餐或送达时间；外送还有地址、邮编、联系人和电话；付款状态 | 制作和配送你的订单 |
| 技术数据 | 登录会话、设备 / 浏览器类型（user agent）、根据 IP 推算的大致地区；服务器为安全保留常规访问日志，其中含 IP 地址 | 保持登录、防止滥用、保障服务安全 |
有些数据只保存在你的设备上，不会发给我们，比如课程阅读进度和考试答题，以及 App 标注「仅保存在本机」的部分活动互动。登录状态下通过课程考试时，我们会收到课程名称，用来发放 LU 奖励。
2. 设备权限
- 相机：只用来扫描 LU 九折凭证和门店二维码，不拍照、不录像、不保存图像。
- 位置（仅在使用 App 时）：只在你点活动地图上的「定位」时请求，用来显示你的位置；不在后台追踪，也不发送到我们的服务器。你的位置只在你设备上的地图里显示。
- 日历：只用来把你选择的活动加入日历，取消时移除。
- 相册（仅添加）：只在你点「保存二维码」时，把 PayNow 付款码存到相册；App 不能读取你的相册。发帖配图用系统的图片选择器，只会提供你选中的图片。
你可以随时在系统设置里关掉这些权限，App 的其他功能不受影响。
3. 关于 LU 积分与区块链
LU 是记录在公开区块链上的会员积分（目前在 Base Sepolia 测试网），不能转让、不能交易、不能换现金。你的钱包地址和 LU 余额大约每天写入区块链一次。区块链记录是公开、永久的，不包含你的姓名或邮箱，但我们无法删除。
4. 我们怎样使用数据
- 提供登录、社区、活动、课程和 LU 积分功能。
- 审核内容、处理举报。你屏蔽某个用户时，我们会收到通知并检查其内容。
- 通过邮件发送登录验证码，必要时发送服务通知。
- 保障服务安全、排查问题。
我们不出售个人数据。App 里会展示 LU COIN、我们自己和合作门店的推广内容，由我们自己选择投放，不使用广告网络；我们只统计每条推广的展示和点击次数，不关联到你。我们不跨其他公司的 App 或网站追踪你。
5. 服务提供方
- 邮件发送：登录验证码经我们的邮件服务器发送。
- AI 回复：社区里有一些明确标注为 AI 的账号。为了生成它们的回复，公开帖子的标题和正文，以及该帖最近的公开评论（含评论者昵称）可能会发给我们的 AI 服务商（Anthropic）；你的邮箱等私人数据不会发送。AI 账号不评论交友帖。
- App 更新：App 会向 Expo（expo.dev）检查更新，这会发送基本的 App 与设备信息。
- 行情数据：学院里的币价列表直接从 CoinGecko 读取公开数据。
- 新闻来源与图片：新闻页直接从发布方网站读取公开新闻源（Cointelegraph、Decrypt、OpenAI、Google、PANews、IT之家），部分图片来自 Unsplash。这些网站会像普通网页请求一样收到你的 IP 地址和基本设备信息。
- 狮城生活：你用同一账号登录狮城生活 App 时，我们会把你的账号 ID、邮箱、昵称和头像提供给它，用于登录。
- 地图：活动地图是 Google 地图，用 Google 的 Maps SDK for iOS 显示。显示地图时，Google 会收到地图请求（包括你的 IP 地址和你浏览的地图区域）；按 Google 为这个组件发布的隐私清单，Google 还会收集崩溃数据、性能数据、产品交互数据和设备标识，用于分析和让地图正常运行，以及 Google 的用户标识和清单里列为「其他数据类型」的数据，用于分析。Google 声明这些数据都不用于跟踪。我们不会把你的姓名、邮箱或账号 ID 发给 Google。你点「定位」后地图会移到你所在的位置，所以 Google 收到的地图区域就在你附近。详见 Google 隐私政策。
- 联盟门店：你在门店使用 LU 时，门店能看到这笔订单和折扣。
- 陆老师小厨房点餐系统：你在 App 里点餐时，App 用你的 LU 账号 ID 登录餐厅的点餐系统，并把订单和配送信息发给它。你在收银台登记会员时，该系统会把你的手机号和称呼发给我们，用来获得和使用 LU。
这些服务方只为向我们提供服务而处理数据；你直接发给它们的数据，适用它们各自的隐私政策。
6. 保存期限
账号存在期间，我们保存你的账号数据和内容；你注销账号时删除（见第 7 节）。登录验证码 10 分钟后失效。登录会话最长一年，退出登录即结束。访问日志为安全目的保存一段有限的时间。
7. 你的选择与权利
你可以在 App 里修改昵称，随时退出登录。
在 App 内删除账号：进入「我的 → 账号与隐私 → 删除账号」并确认即可。删除账号后：
- 所有设备立即退出登录，这个账号不能再登录；
- 邮箱、昵称、个人资料、登录验证码和登录会话会被抹掉；
- 你发布的帖子（含上传的图片）、评论、点赞、收藏、关注、屏蔽、活动报名和小组成员关系会被删除；
- LU 余额清零，无法恢复；
- 记账和法律需要的 LU 记录、联盟门店折扣记录会保留，但不再关联你的姓名或邮箱；第 3 节所说的公开区块链记录无法删除。
这个账号同时用于「狮城生活」App，删除后两个 App 都不能再用它登录。在 LU COIN 删除账号时，我们会当即通知狮城生活，它会自动删除你在那边的帖子、照片、评论、点赞、举报和屏蔽名单，不需要另外联系它；通知暂时发不出去时，我们会持续重试直到送达。
如需查阅、更正个人数据，或无法使用 App 内入口，请用你登录的邮箱发邮件到 lu@kaider.sg，我们会在 30 天内回复。
8. 安全
所有数据都经 HTTPS 传输。登录验证码和会话 token 在服务器上只保存哈希值。LU 钱包的私钥由我们托管，管理权限只开给授权人员。
9. 儿童
LU COIN 只面向年满 18 岁的成年人，登录时你需要确认已满 18 岁。我们不会故意收集未满 18 岁人士的个人数据；如果发现账号属于未满 18 岁的人，我们会删除该账号。
10. 政策变更
如果本政策有改动，我们会更新本页和生效日期。改动较大时，还会在 App 里告诉你。