1. introduction

1.1 commitment to privacy and data protection

at lighthouse, we prioritize the privacy and security of our users. we are committed to transparency, compliance with data protection laws, and ensuring that users have control over their personal data. this privacy policy explains how we collect, use, share, and protect your information when you use lighthouse.

lighthouse is based in the united states and our services are intended for users located within the united states. if you access lighthouse from outside the united states, please be aware that your information may be transferred to, stored, and processed in the united states, where data protection laws may differ from those in your country of residence.

as our services expand to additional regions, we will update this privacy policy to comply with applicable local data protection laws and notify users of any changes.

1.2 how we collect, use, share, and protect your data

we collect personal and technical information to provide a seamless and secure user experience. this includes:

• personal data. information you voluntarily provide when setting up an account or interacting on the platform.
• technical data. automatically collected data that helps us optimize lighthouse's functionality and security.
• third-party integrations. data received from third-party services such as google, apple, facebook, and openai apis for authentication and platform improvements.

we do not sell or share user data with advertisers, affiliates, or research partners. data is stored securely and only used for platform functionality, personalization, security, and legal compliance. users have the ability to control, modify, or delete their data as outlined in this policy.

1.3 users' rights under ccpa

we recognize and uphold user rights under ccpa, ensuring that individuals can:

• access their personal data and request a copy of the information stored about them.
• request correction or deletion of inaccurate or unnecessary data.
• opt-out of certain data collection and processing activities, including location tracking and ai-driven profiling.
• request data portability, allowing users to transfer their data to another service.
• object to or restrict processing of personal data under certain circumstances.
• exercise their right to be forgotten by requesting full deletion of their account and associated data.

for ccpa-related requests, users can submit a formal request via email or in-app settings. we respond to verified requests within 30 days, unless a legal obligation prevents immediate action.

1.4 contact information for privacy inquiries

if you have any questions, concerns, or requests regarding your privacy rights or data handling, you can contact lighthouse at:

mailing address:

my lighthouse llc

200 n green st.

3rd floor

chicago, il 60607

privacy inquiries email: support@hellolighthouse.com

2. information we collect

2.1 personal data provided by users

to provide secure and personalized experiences, lighthouse collects both required and optional user-provided data.

required information (mandatory for account registration)

users must provide the following details during account creation:

• full name
• date of birth (month, day, year)
• email address
• phone number
• gender
• location (city, state/country)

optional information (user-provided enhancements to profile)

users have the option to provide additional details for profile customization and enhanced post curation:

• photos
• hometown
• places traveled
• pronouns
• relationship status
• education
• type of work
• ethnicity
• language
• religion
• interests
• political views

user-generated content

lighthouse allows users to create content and interact with others through profile customization, posts, and engagement features:

• profile description (bio and personal information shared with connections)
• posts & engagement data (likes, hearts, comments, shares)
• messaging content (text-based communication with other users)

lighthouse does not actively monitor or filter user-generated content unless flagged for review, but reserves the right to moderate and remove content that violates platform policies.

verification data

to obtain a verified badge, users may submit a selfie photograph for identity verification purposes. this includes:

• facial imagery submitted during the verification process
• metadata associated with the verification photo (timestamp, device information)

verification photos are processed to confirm user authenticity and are stored securely. users can request deletion of verification data, though this may result in removal of verified status.

2.2 automatically collected data

lighthouse collects technical and behavioral data to enhance performance, security, and user experience. this data is gathered passively and does not require direct input from users.

device & technical data

• ip address (used for security, fraud detection, and regional settings)
• device type, browser type, and operating system (for app compatibility and troubleshooting)
• session duration & activity logs (to track app crashes, errors, and user engagement)

location tracking

lighthouse collects precise location data to curate posts by showing posts from users who are geographically close.

• location data is not shared with third parties and is only used to provide proximity-based recommendations.

usage data & behavioral insights

• engagement patterns, such as time spent on different features.
• interest-based data, including prompts and fields used for connection preferences.
• user interactions, such as connections, messages, and content engagement.

this data is anonymized where possible and used to improve app functionality, personalised recommendations, and maintain platform security.

notification preferences

lighthouse requests permission to send push notifications.

users can enable or disable notifications at any time through their device settings or in-app preferences.

2.3 data from third-party services

lighthouse integrates with third-party services to provide essential platform features, including:

third-party data sources

• google & apple apis. used for authentication.
• openai api. supports ai-powered post curation and content moderation features.
• analytics tools (posthog). provide insights on user behavior, engagement trends, and platform performance.

ai-powered post curation

lighthouse uses ai to analyze compatibility and curates posts based on user interests and engagement patterns. this does not involve intrusive profiling.

no data sharing with advertisers or affiliates

lighthouse does not sell, share, or trade user data with advertisers, affiliates, or research organizations. data collected from third-party integrations is solely used for platform functionality and is governed by strict access controls.

3. how we use your information

personalization

lighthouse uses collected data to improve user experience by tailoring platform interactions based on user preferences. this includes:

• enhancing post curation by showing posts based on interests, engagement, and location.
• customizing content recommendations within the app.
• providing a dynamic and interactive feed based on user activity.

security & fraud prevention

to maintain a safe and secure platform, lighthouse implements security measures that monitor, detect, and prevent fraudulent activities, unauthorized access, and policy violations. this includes:

• verifying accounts through otp-based authentication.
• analyzing user activity patterns to detect suspicious behavior, such as automated bot activity or identity fraud.
• investigating and mitigating reported abuse, harassment, or platform misuse.

lighthouse may suspend or restrict accounts involved in policy violations, fraudulent behavior, or security threats. users engaging in harmful activities may face permanent bans to ensure community safety.

platform analytics

lighthouse collects and analyzes usage data to optimize platform performance, enhance post curation matching accuracy, and improve overall user engagement. analytics tools are used to:

• measure user interaction with key features such as messaging, content sharing, and connection requests.
• identify areas of improvement in app functionality and user experience.
• troubleshoot performance issues and address potential technical faults.

aggregated data is used internally to refine lighthouse's post curation algorithms, user engagement strategies, and content moderation processes.

location-based matching

lighthouse utilizes precise location tracking to improve matchmaking accuracy by showing posts from users who are geographically close to one another. the use of location data includes:

• displaying potential connections based on proximity.
• adjusting recommendations to prioritize local engagement and real-world interactions.

users have control over their location visibility and can choose to enable or disable location-based features through their account settings.

ai processing

lighthouse integrates ai-driven tools to enhance post curation, moderation, and engagement. ai processing is used to:

• analyze user preferences and behavioral patterns to optimize recommendations.
• moderate content by detecting and flagging potential policy violations.
• automate post curation based on interests and background.

compliance & legal obligations

lighthouse processes personal data in compliance with ccpa and other relevant u.s. data protection laws. this includes:

• ensuring proper data handling practices that align with user rights under ccpa.
• implementing measures to protect sensitive user information from unauthorized access.
• providing users with options to access, modify, or delete their data upon request.

lighthouse complies with applicable privacy laws, including the ccpa and ftc guidelines. users will be explicitly informed about how their data is processed for marketing purposes, and no personal health information or sensitive personal data will be shared with advertising networks.

marketing & audience targeting

lighthouse may use customer data, including engagement patterns and anonymized behavioral insights, to optimize advertising and marketing campaigns. this includes:

• creating segmented audiences based on user interactions, interests, and platform usage.
• using customer names, emails, and other details to create custom audiences for targeted advertising on platforms such as facebook and google.
• building lookalike audiences to reach similar users through platforms like facebook, google, and tiktok.
• personalizing marketing messages to improve user experience and outreach effectiveness.

what we do not do:

• lighthouse does not sell personal user data to third-party advertisers.
• lighthouse does not expose individual user identities or sensitive data publicly in any form.
• any data used for marketing purposes is anonymized and aggregated to prevent personally identifiable information (pii) from being shared with external platforms.

lighthouse does not process or share data for purposes outside of those stated in this policy, and legal compliance is a core part of its data handling approach.

connection requests ("anchors")

lighthouse uses a mutual connection system called "anchors." when users send or accept an anchor request:

• both users gain access to each other's private profile information
• connection status and history are stored to facilitate platform functionality
• users can remove connections at any time, which revokes mutual profile access

content moderation and user reports

lighthouse maintains community safety through user reporting and automated moderation. when content is reported, we collect:

• the reported content (post, comment, message, or profile)
• the reason for the report (selected from categories including: nudity/sexual content, violent content, hateful content, harassment, child safety concerns, terrorism, spam, or misinformation)
• reporter and reported user identifiers

reported content is reviewed using a combination of automated tools and human moderation. users whose content violates community guidelines will be notified of removal actions and may appeal through in-app support.

4. data retention & user control

user data storage

lighthouse retains user data indefinitely unless a user formally requests account deletion. the storage of user data supports platform functionality, security, and compliance.

account deletion

users may request permanent deletion of their account and associated data. upon receiving a deletion request:

• all personal data, including profile details, messages, and preferences, will be removed from lighthouse's active systems.
• some data may be retained as required by legal obligations, security policies, or fraud prevention measures.

once an account is permanently deleted, the action is irreversible, and users will not be able to recover any stored information.

ccpa rights

california users are granted specific rights under the ccpa, including:

• the right to request access to personal data collected about them.
• the right to request deletion of stored data, subject to legal requirements.
• the right to opt out of certain types of data collection and processing.

users can exercise these rights by contacting lighthouse support or accessing the privacy settings within their account. lighthouse responds to verified ccpa requests within the legally mandated timeframe.

5. cookies & tracking technologies

types of cookies used

lighthouse uses cookies and similar tracking technologies to enhance user experience, improve security, and optimize platform performance. cookies are small text files stored on a user's device that help lighthouse recognize returning users, retain preferences, and analyze platform engagement. the types of cookies used include:

• essential cookies. these cookies are required for basic platform functionality, including authentication, fraud prevention, and security. they help users log in securely, maintain session integrity, and prevent unauthorized access. without these cookies, lighthouse would not function properly.
• analytics cookies. lighthouse uses analytics tools, such as google analytics, to measure user engagement, track feature usage, and optimize platform performance. these cookies collect anonymized data on how users interact with the platform, such as time spent on different features and navigation patterns.
• personalization cookies. these cookies enable lighthouse to tailor user experiences, including matchmaking recommendations and content suggestions. personalization cookies help refine search results, enhance the relevancy of displayed connections, and ensure a seamless user journey based on previous interactions.

lighthouse does not use cookies to track users across external websites or serve targeted third-party advertisements.

user control

users have control over how cookies and tracking technologies are used within lighthouse. the available options include:

• opt-out of non-essential cookies. users can adjust their browser settings to block or delete non-essential cookies. however, disabling certain cookies may limit platform functionality, such as personalized recommendations or seamless authentication.
• modify in-app preferences for tracking limitations. users can manage cookie preferences and tracking settings within lighthouse's account settings. this allows users to disable certain analytics and personalization features without impacting core platform functionality.

lighthouse ensures that users are informed about the use of cookies upon their first visit to the platform and provides options to manage their preferences.

6. data sharing & third-party integrations

no data sharing with advertisers or affiliates

lighthouse does not sell, rent, or share personal data with advertisers, marketing affiliates, or research organizations. the platform operates on a privacy-first model, ensuring that user information is not monetized through third-party ad networks or commercial partnerships.

third-party service providers

lighthouse integrates with third-party services for essential platform functionality, including authentication, analytics, and ai-driven matchmaking. these services process user data under strict security and privacy agreements to ensure compliance with applicable laws. third-party integrations include:

• google, facebook & apple apis. used for authentication, social logins, and optional profile enhancements.
• openai api. supports ai-driven matchmaking, content personalization, and moderation tools.
• analytics tools (google analytics, etc.). collect anonymized usage data to improve platform performance and optimize matchmaking algorithms.

lighthouse ensures that data shared with third-party providers is limited to what is necessary for platform functionality and does not expose sensitive user information beyond what is required for service integration.

in-app purchases

lighthouse processes all in-app transactions through apple and google's payment processors, ensuring that payments are secure, encrypted, and compliant with global financial regulations. lighthouse does not store or process credit card information directly. instead:

• apple app store (for ios users) and google play store (for android users) handle all financial transactions.
• lighthouse does not have access to full payment details but may receive transaction confirmations from these payment providers for subscription or service validation.
• any billing inquiries or refund requests related to in-app purchases must be directed to apple or google, as they handle payment processing independently.

by using lighthouse, users acknowledge that financial transactions occur exclusively through third-party payment providers and that lighthouse does not assume liability for external payment processing issues.

7. user rights under ccpa

lighthouse is committed to upholding user rights under the california consumer privacy act (ccpa) for california residents. users have the right to access, control, and manage their personal data in accordance with these regulations.

7.1 ccpa rights (for california users)

if you are a california resident, you have the following rights under the california consumer privacy act (ccpa):

• right to know. you can request details about the types of personal data collected, how it is used, and whether it is shared with third parties.
• right to delete. you can request the deletion of your personal data, subject to certain legal obligations that may require retention (e.g., fraud prevention, compliance).
• right to opt-out. although lighthouse does not sell user data, you have the right to opt out of data-sharing activities that could be classified as "sale" under ccpa definitions.

california users can exercise these rights by submitting a request to lighthouse support. verification may be required to protect user privacy and prevent fraudulent requests.

lighthouse does not discriminate against users who exercise their privacy rights, and access to platform features remains unaffected by data rights requests.

8. children's privacy & age restrictions

lighthouse is designed for users aged 14 and older and does not knowingly collect data from children under this age. by using lighthouse, users confirm that they meet the minimum age requirement of 14 years.

• lighthouse does not have a parental consent mechanism for minors under 14. users between 14 and 17 years old can create an account without parental approval.
• if lighthouse becomes aware that a user under 14 years old has registered, their account will be immediately terminated, and any associated data will be permanently deleted.
• parents or guardians who suspect that their child has used lighthouse without meeting the age requirement can contact support to request data removal.

lighthouse strongly encourages young users to exercise caution when engaging with others on the platform and to follow online safety best practices.

9. data security measures

lighthouse prioritizes the security and privacy of user data by implementing robust security measures to prevent unauthorized access, data breaches, and fraudulent activities. our security framework includes encryption, access control, and continuous risk monitoring to safeguard user information.

encryption & secure storage

lighthouse uses industry-standard encryption protocols to protect stored and transmitted data. this ensures that sensitive user information, including personal details and communication history, remains secure from unauthorized access. data is stored on secure, compliant servers, with measures in place to prevent breaches, hacking attempts, and malicious activity.

access control

lighthouse offers multiple secure authentication methods:

• phone number with otp: every login attempt requires a one-time passcode sent to the registered phone number, ensuring multi-factor authentication. unauthorized access is significantly reduced since accounts are tied to verified mobile numbers.
• social authentication: users can authenticate via google or apple sign-in, leveraging those platforms' security measures.

users do not create or store traditional passwords, reducing the risk of credential theft or phishing attacks. authentication is handled through verified phone numbers or trusted third-party identity providers.

risk mitigation & fraud prevention

lighthouse continuously monitors for suspicious activity, policy violations, and fraudulent behavior using real-time detection systems. our risk mitigation strategies include:

• automated threat detection to identify unusual login attempts or unauthorized access.
• content moderation and abuse detection to filter out harmful, misleading, or deceptive activities.
• regular security audits to evaluate vulnerabilities, apply security patches, and enhance system resilience.

by maintaining proactive security monitoring and strict authentication protocols, lighthouse ensures that user data remains protected from cyber threats and unauthorized access.

10. ai transparency & automated decision-making

lighthouse integrates artificial intelligence (ai) and machine learning to enhance user experience, improve matchmaking, and moderate platform interactions. we believe in transparency, fairness, and accountability when using ai-driven features.

responsible ai usage

lighthouse ensures that ai is used exclusively to enhance user experience and not for discriminatory profiling or intrusive surveillance. our ai systems are designed to:

• improve user engagement and personalization without bias or unfair treatment.
• provide transparency in decision-making, allowing users to understand why certain recommendations or moderation actions occur.
• comply with ethical ai principles, ensuring that automated processes do not result in unfair or discriminatory outcomes.

lighthouse continuously refines its ai systems to ensure accuracy, fairness, and user trust.

11. amendments to this privacy policy

lighthouse reserves the right to modify or update this privacy policy at any time to reflect changes in legal requirements, regulatory obligations, platform features, or internal data handling practices.

• updates may be necessary due to changes in privacy laws (such as ccpa or other applicable regulations), technological advancements, security improvements, or modifications to lighthouse's services.
• any significant changes that materially impact users' rights or how their data is processed will be communicated in advance through email notifications, in-app messages, or announcements on the lighthouse platform.
• users are encouraged to review this privacy policy periodically to stay informed about how their data is being handled.

continued use of lighthouse after policy updates constitutes acceptance of the revised terms. if a user disagrees with any updates, they may exercise their right to deactivate or delete their account as outlined in this policy.

12. contact information

for any privacy-related inquiries, requests, or complaints, users can contact lighthouse's privacy team through the following channels:

address:

my lighthouse llc

200 n green st.

3rd floor

chicago, il 60607

email: support@hellolighthouse.com

lighthouse is committed to responding to privacy-related requests in a timely manner, in compliance with applicable data protection laws. users may also contact us for assistance with exercising their rights under ccpa or any other applicable privacy regulations.