Lani Misalucha Privacy Policy

The Service is operated by iPerform LLC, a wholly owned subsidiary of App Factory, Inc ("we", "us", "our"). iPerform LLC is responsible for your personal information (the "controller" under European and UK law).

iPerform LLC builds and runs the Lani Misalucha app and website for Lani Misalucha. Lani Misalucha provides the music and other content, but iPerform LLC operates the Service and handles your data.

Contact: iPerform LLC, 1541 Ocean Ave., Suite 200, Santa Monica, CA 90401, USA. Email Contact@iPerformApp.com (privacy) or Support@iPerformApp.com (support). Phone +1 (310) 744-1150.

Information you give us

• Account details: your name, email address, username and password. We store only a scrambled (hashed) form of your password, never the password itself.
• Sign in with Google or Apple: if you choose one of these, we receive an account id from Google or Apple and the name and email you allow them to share. With Sign in with Apple you can hide your email; we then receive only Apple's relay address.
• Profile photo: optional, only if you add one.
• Time zone: used to send reminders at a sensible time of day.
• Your activity and content: likes, favorites, playlists, comments, replies, video comments, live chat messages, reports you make and users you block.
• Support messages: what you send us through the support or contact form, or by email to our support address, plus your name and email.

Purchases

• In the app: memberships are bought through the Apple App Store or Google Play. Apple or Google takes your payment; we receive a record of the purchase (product, date, transaction id, store) so we can unlock your membership. We never see your card details.
• On the website: memberships are paid through PayPal, which may offer Apple Pay or Google Pay. PayPal takes your payment details; we receive the order record, amount and status. We never see your card details.
• Unfinished checkouts: if you start a website checkout and do not finish, we keep a short record of it (your account, name and email address, the plan and price, the time, and your IP address and browser) for up to 24 hours, and may send you a reminder email if you have agreed to such emails.

Information collected automatically

• Device information: a device id that our app creates, the device model, operating system and the device name. We use it to show you your signed-in devices and to protect your account.
• Push token: only if you allow notifications. It lets us send notifications to your device.
• IP address and browser information: used for security, fraud prevention, rate limits and, on the website, to record unfinished checkouts.
• Country: our hosting provider tells us which country a request comes from so we can show the right price. We do not store it.
• App integrity checks: the apps use Google Firebase App Check, Google Play Integrity and Apple App Attest to confirm requests come from a genuine copy of the app. These checks create short-lived tokens that we verify and do not store.
• Usage analytics: see section 5. Analytics includes your approximate location (city or region), worked out from your IP address by Google. We do not collect your precise location.

What we do not collect

We do not collect phone numbers, precise location, your contacts, or your advertising id. We do not send text messages (SMS). We do not show ads. We do not track you across other companies' apps or websites, so the apps do not show Apple's tracking prompt. We do not use a crash-reporting service.

We do not use your data for automated decisions that have legal or similarly significant effects on you.

We do not sell your personal information, and we do not share it for advertising.

• Lani Misalucha and people they authorize. Through the admin site they can see your name, username, email address, membership status and what you post, and they receive the messages you send them through the contact form. They use it only to run the Lani Misalucha community and Service.
• Other members. Your username, profile photo and the things you post in the Fan Club, video comments and live chat can be seen by other members.
• Our parent company, App Factory, Inc, which may access data to manage and support the Service, under this Policy.
• Service providers that run parts of the Service for us (listed below). They may use your data only to provide their service to us.
• Apple, Google and PayPal to process purchases and sign-ins that you start.
• The law and safety. When required by law or a valid legal request, or to protect the rights and safety of our members, the public or us.
• A business transfer. If iPerform LLC or the Service is merged, sold or reorganized, your data may move to the new owner, under this Policy.

We require everyone we share data with, including App Factory, Inc, to protect it at least as well as this Policy does.

Our service providers

In the apps we use Google Analytics for Firebase to see which screens and features are used and how the app performs. It uses an app-instance id, not your advertising id. You can turn it off at any time in the app under Settings > Share anonymous usage data.

On the website we use cookies and browser storage that are needed to keep you signed in, remember your settings and protect the site. These are always on. We also use Google Analytics 4 cookies, but only after you accept them in the cookie banner. You can change your choice at any time under Cookie settings at the bottom of the website.

Google Signals and advertising features in Google Analytics are switched off. We do not use advertising cookies.

• Account and security emails (sign-in and verification codes, password resets, receipts, account deletion) are part of the Service and cannot be turned off while you have an account.
• Notification emails about new content, live streams, tour dates and replies to your posts are part of your membership. You can turn them off at any time in Settings or with the link at the bottom of each email.
• Other emails (membership reminders, "we miss you" messages, unfinished-checkout reminders, news and offers) are sent only if they are switched on for Lani Misalucha and you opted in, either with the box at sign-up (unticked by default) or with the "News and offers" switch in Settings. You can turn them off at any time with that switch or with the unsubscribe link in each email. We keep the date and time of your choice as a record of your consent.
• Push notifications are sent only if you allow them on your device. You can turn them off in your device settings.

We may keep data longer if the law requires it or to deal with a legal claim.

You can delete your account and data at any time:

• In the app: Settings > Delete Account.
• On the website: sign in and go to Settings > Delete Account.
• Without signing in: go to https://lanimisalucha.io/delete-account, enter your email address, and confirm using the link we email you.
• Need help? Email Support@iPerformApp.com from the address on your account.

Deletion takes effect immediately, and your data is permanently erased within 24 hours. We delete your profile, profile photo, email address, likes, favorites, playlists, comments and replies, blocks, reports, support messages, notifications, devices and push tokens. The only things that remain are:

• purchase and transaction records, which tax law requires us to keep, showing only a transaction number, amount and date, never your name or email;
• backups, which are erased automatically within 30 days. If a backup is ever restored, we delete your account again at once;
• copies of support messages and emails in our team's email inbox, which we delete when you ask us to at Contact@iPerformApp.com.

Deleting your account does not cancel or refund a pass you bought in the App Store or Google Play. Our memberships in the app are one-time passes that do not renew, so nothing further is charged. Refunds for store purchases are handled by Apple or Google under their refund policies. Deleting the app from your phone does not delete your account.

If you signed in with Apple, you can also stop sharing your Apple ID with us in your Apple ID settings (Sign in with Apple).

Everyone, wherever you live, can:

• see and correct your details in the app or website Settings;
• get a copy of your data, in a common machine-readable format (portability), by emailing Contact@iPerformApp.com;
• delete your account (section 8);
• turn off analytics, marketing emails and notifications (sections 5 and 6);
• ask questions or complain to us at Contact@iPerformApp.com.

We may ask you to confirm your identity before acting on a request. We answer within 30 days (45 days for California requests), and we will tell you if we need more time as the law allows. We will not treat you differently for using your rights.

If you are in the EEA, the UK or Switzerland

You also have the right to restrict or object to our use of your data (including any use based on legitimate interests), and to withdraw consent at any time without affecting what we did before. You can complain to your local data protection authority. The legal bases we rely on are listed in section 3.

If you are a California resident

In the last 12 months we collected these categories of personal information: identifiers (name, email, username, account and device ids, IP address); customer records (name, email); commercial information (purchases); internet or other electronic activity (use of the Service, analytics); approximate location (from IP address); visual information (profile photo, if added); and the content you post. Our sources, purposes and recipients are described in sections 2 to 4, and how long we keep each category in section 7.

We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA, as amended by the CPRA). We use sensitive personal information (your account login) only to provide the Service and keep it secure, so the right to limit its use does not apply. You have the right to know, access, correct and delete your personal information, and to use an authorized agent. Send requests to Contact@iPerformApp.com.

We are based in the United States. Your data is stored and processed in the United States and other countries where our providers operate. These countries may have different data protection laws from yours. When we transfer data out of the EEA, the UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) or our providers' certifications under the EU-U.S. Data Privacy Framework.

All connections to the Service are encrypted (HTTPS). Passwords are hashed. Paid media is available only to signed-in members with an active membership. Access to our systems is limited to the people who need it and protected with strong sign-in. No system is perfectly secure, but if a breach affects you, we will tell you as the law requires.

The Service is not for children. You must be at least 13 years old to use it, or at least 16 if you live in the European Economic Area (EEA) or the UK. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email Contact@iPerformApp.com and we will delete it.

The Service may link to other websites and services, such as social media or ticket sellers. Their own privacy policies apply, not this one.

We may update this Policy. We will change the effective date at the top and, for important changes, tell you in the app or by email before they take effect.