Privacy Policy

1. §01

   Who runs lokal

   lokal is built and run by one indie developer. There is no parent company, no marketing department, and no growth team. Every email you send goes to the person who writes the code.

   For any privacy question, write to hi@lokall.app.

2. §02

   What we collect

   We collect a small amount of data to make lokal work:

   • Account data. Your email address, your display name, and (if you sign in with Google) your basic Google profile (email, name, profile picture URL). We do not store your Google password.
   • Screenshots you upload. The original master screenshots and the translated outputs lokal generates for you.
   • Job metadata. The languages you picked, the AI model you used, the quality preset, and the result status.
   • Billing data. Your Stripe customer ID, subscription status, plan, and renewal date. We do not store full card numbers.
   • Basic technical logs. IP address and user agent for security and abuse protection. Kept short term.
3. §03

   What we do not collect

   • We do not run any third-party analytics.
   • We do not run advertising trackers.
   • We do not record your screen, your clicks, or your session replays.
   • We do not sell your data. To anyone. Ever.
4. §04

   How we use your data

   Your data is used only to:

   • create and manage your account;
   • translate and redraw your screenshots when you ask for it;
   • show you your history and let you re-download your work;
   • send service emails (sign-in links, receipts, refund replies);
   • fix bugs you report and prevent abuse.

   We do not use your screenshots or your account data to train any model.

5. §05

   Third parties we share data with

   To run the service, lokal uses a small number of trusted processors. These are not advertising partners. We never sell your data and we never share it with anyone outside this list.

   • OpenAI — when you pick GPT Image 1.5 or GPT Image 2, lokal sends the screenshot and the source/target language to OpenAI to generate the translated image. OpenAI's API terms say data sent to the API is not used to train their models by default.
   • Google (Gemini / Nano Banana) — when you pick Nano Banana 2 or Nano Banana Pro, lokal sends the screenshot and the language pair to Google's image API to generate the translated image. Google's API terms similarly do not allow training on API data without consent.
   • Stripe — handles all subscription and one-off payments. Stripe stores your payment method on its own infrastructure. lokal only stores your Stripe customer ID and subscription status.
   • Hosting provider. The lokal application, database and stored screenshots run on a cloud hosting provider. The exact provider and region are listed in the lokal documentation and are kept up to date.
   • Email provider. Used to send sign-in magic links and receipts.

   If you ever need a current, exact list of providers (a "sub- processor list" in legal terms), email hi@lokall.app.

6. §06

   How long we keep things

   • Account data. While your account is open. When you delete your account, the data is removed from active storage within 30 days.
   • Screenshots and outputs. While your account is open, or until you delete the workspace. Then within 30 days.
   • Billing records. Kept as long as required by tax and accounting law in the operating country (typically several years).
   • Logs. A short rolling window for debugging and abuse prevention.
7. §07

   Cookies

   lokal uses one type of cookie: a session cookie that keeps you signed in. There are no advertising cookies and no third-party tracking cookies.

8. §08

   Your rights

   You can ask, at any time, to:

   • see the data lokal has on you;
   • get a copy of it;
   • correct it;
   • delete it (you can do this yourself in Settings);
   • object to a specific use of the data, or restrict how it is used.

   You can also lodge a complaint with the data protection authority in your country.

9. §09

   International transfers

   When you run a translation job, the screenshot may travel to AI providers located in the United States. By using the service you accept that this transfer is needed to provide the result.

   For users in the European Union or United Kingdom, the providers we use have public mechanisms (such as standard contractual clauses) to allow these transfers in line with GDPR.

10. §10

    Security

    • Traffic is served over HTTPS only.
    • Screenshots are stored on the hosting provider with access limited to the lokal backend.
    • Provider API keys (for OpenAI, Google, Stripe) are stored encrypted on the server and are never exposed to the browser.
    • We aim to follow common-sense security: short-lived sessions, least-privilege access, and quick patching of dependencies.

    No system is perfectly secure. If you find a security problem, please email hi@lokall.app before posting it publicly.

11. §11

    Children

    lokal is not designed for children under the age of 13 (or under 16 in countries where local law sets a higher age of digital consent). Do not use the service if you are below that age.

12. §12

    Changes to this policy

    When this policy changes in a meaningful way, registered users will be told by email and through a notice in the app at least 14 days before the new version applies. Small fixes are done in place.

13. §13

    Contact

    For any privacy question, write to hi@lokall.app. You will get a real answer from the person who built lokal.

Items marked [...] still need to be filled in by the operator before publishing.