Account privacy notice

1. Responsibility and contact

KARAM BEN — Founder & Sole Developer operates this account pilot for latlongCALL. Contact latlongcall@gmail.com for account support or privacy requests. The project is not yet a registered company. This notice describes the account pilot, not the proposed future marketplaces.

2. Information used

We process your email address, display name, chosen teacher or school journey, interface language, authentication records and the version and time of your terms and privacy choices. Authentication uses a password hash held by Supabase, session cookies and confirmation or recovery tokens. Security systems also process technical request information such as IP address, time and browser information. Do not send passwords to support.

3. Why it is used

We use account information to create and protect your account, verify your email, deliver essential account messages, recover access and investigate support or security issues. We record the choices you submit and the relevant notice version. Selecting a role is onboarding intent, not a grant of permissions. The pilot does not use your account information for advertising or marketing emails.

4. Services and overseas processing

Hostinger hosts the web app. Supabase provides authentication and the database in Tokyo, Japan. Resend routes account emails through Tokyo but stores customer data, including message content and delivery logs, in the United States. Your email provider also processes delivery and keeps your mailbox copies. These services involve processing outside Vietnam. Registering does not publish a worker profile or share your account with schools. Access is limited to account services and authorized support or security work.

5. Cookies and temporary drafts

Essential cookies keep you signed in and secure account actions; a preference cookie remembers your language. While registering, the browser may temporarily retain only an unfinished display name and role for up to 30 minutes. Passwords, email addresses and login tokens are not stored in that draft. Signing out clears the app's account-related browser state.

6. What this pilot does not collect

The account pilot does not collect live location, passports, qualification files, payment details or children's records. Maps and worker examples in the vision presentation are illustrative. Future location sharing, verification, media and payment features will need separate explanations and controls before activation.

7. Retention and requests

We keep account and acceptance records while the account is open. We check the support inbox each working day. You may request access, correction, deletion, restriction or withdrawal of consent. After verifying an account-closure request, we restrict access promptly and complete ordinary deletion from active application records within 30 days, including the linked acceptance receipt. Minimal support-case records are deleted 90 days after resolution. If specific records must be preserved for an actual security investigation or legal obligation, we restrict their use, record the reason and review date, and explain the exception when permitted. A shorter applicable legal deadline takes precedence. Withdrawing required processing consent may require closing the account. Never send a password or identity document to support.

8. Service logs and backup copies

Server logs rotate automatically: web logs retain 14 daily rotations; system logs retain four weekly rotations, with empty logs skipped. The system journal is limited to seven days, but forwarded system-log copies follow the weekly schedule. Resend currently retains email and log data for 30 days and backups for seven days on the configured free plan. Supabase may retain up to seven daily backup copies on its free plan; that practice is not guaranteed. Provider security records and backup copies follow the relevant service retention and deletion processes. Closing an app account does not instantly erase provider backups or copies in your mailbox. We request provider assistance where needed and prevent a restored backup from silently reactivating a closed account.

9. Your choice and safety

Account processing consent is requested separately from agreement to the terms and is not preselected. No marketing consent is requested or inferred. You may read the public vision without creating an account. Access controls and protected connections reduce risk but cannot eliminate every security risk. Tell support if you suspect unauthorized access; never email a password, recovery token or identity document.

Account and privacy support