1. Who we are
Losta is a mobile application operated by Shenzhen Yaokemeng Technology Co., Ltd. (the "Company", "we", "us"). We are the data controller for the personal data processed through the Losta application and this website.
For any question about this policy or about your personal data, write to privacy@yaokemon.com.
2. Information we collect
2.1 Information you give us
- Account and profile data. Your sign-in identifier and the profile information you choose to provide: display name, avatar image, gender, date of birth, region, short bio and interest tags. Date of birth is used to confirm that you meet the minimum age and to calculate the age shown on your profile.
- Content you create. Posts, comments, images and other material you publish in the community feed, and the direct messages you send, including text, photos and voice attachments.
- Support and feedback. The content of messages you send to our support address or through the in-app feedback form, together with any contact address you include.
2.2 Information generated by your use of the app
- Interaction data. Who you follow, who follows you, likes, comments, blocks and reports, and whether you are currently online so that other users can see your status.
- Matching data. Records of voice-match requests and their outcome, such as whether a match was found and whether both participants chose to continue the conversation. This is metadata about the match; it is not the audio.
- Purchase data. Your balance of in-app virtual currency and virtual items, and the transaction records needed to keep that balance correct and to handle disputes or refunds.
2.3 Information collected automatically
- Device and technical data. Device model, operating system and version, app version, language and region settings, and a push notification token if you enable notifications.
- Diagnostic data. Crash reports and error logs, used to keep the app working.
- Approximate location. We infer an approximate region from your IP address for language and safety purposes. We do not collect precise GPS location.
2.4 Voice calls
Real-time voice is transmitted through our voice infrastructure provider, Agora. We do not record, store or listen to your voice calls. Only the transient signalling required to establish and end the call is processed. Content moderation of a voice call is not performed, which is one reason the app is limited to adults and provides in-call blocking and reporting.
3. Why we process your data
| Purpose | Data used | Legal basis (where GDPR applies) |
|---|---|---|
| Creating your account and delivering the core features: feed, private chat, voice matching, profile. | Account, profile, content, interaction, matching and device data. | Performance of our contract with you. |
| Keeping users safe: handling reports, enforcing blocks, removing prohibited content, protecting minors. | Interaction data, reports, content, device data. | Legal obligation and our legitimate interest in a safe service. |
| Maintaining, debugging and improving the app. | Diagnostic and device data, aggregated usage. | Our legitimate interest in operating and improving the service. |
| Processing in-app purchases and preventing fraud. | Purchase and device data. | Performance of our contract; legal obligation; legitimate interest. |
| Sending service and safety notifications. | Push token, account data. | Performance of our contract; consent where required. |
| Responding to your support or privacy request. | Correspondence data. | Performance of our contract; legal obligation. |
4. Who we share it with
We do not sell your personal information, and we do not share it with third parties for their own advertising purposes. We share data only with the processors that make the app work:
| Provider | Purpose |
|---|---|
| Supabase | Database, file storage, real-time updates and authentication bridging. |
| Google (Firebase) | Authentication, push notification delivery and app diagnostics. |
| Agora | Real-time voice transmission. |
| Apple App Store / Google Play | Processing in-app purchases and subscriptions under their own terms and privacy policies. |
We may also disclose data where we are legally required to do so, for example in response to a valid legal request, or where necessary to investigate serious abuse and protect our users. If we are ever involved in a merger or acquisition, data may be transferred as part of that transaction; we will notify you and this policy will continue to apply.
Other users see the information you choose to make public: your display name, avatar, bio, age, region, posts and comments, and your online status. Your private messages are visible only to you and the person you are messaging.
5. International transfers
Our service providers store and process data on servers located outside your country, principally in the United States and the European Union. Where we transfer personal data out of a region that restricts such transfers, we rely on appropriate safeguards, including the standard contractual clauses offered by our providers.
6. How long we keep it
- Account and profile data — until you delete your account.
- Content you published — until you delete it, or until your account is deleted, whichever is earlier.
- Voice call audio — never stored on our servers.
- Reports and abuse records — retained for up to 12 months after the report is closed, so that repeat offenders can be identified and so that we can respond to legal requests.
- Purchase and transaction records — retained for as long as tax and accounting law requires.
- Diagnostic logs — retained for a short period, normally under 90 days.
When we no longer need data, we delete it or make it anonymous. Data may persist briefly in encrypted backups before being overwritten on the normal backup cycle.
7. Security
We use industry-standard measures to protect your data, including encryption of data in transit, access controls on production systems, and the principle of least privilege for the services that touch your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant authority as required by applicable law.
8. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct data that is inaccurate — most of it can be edited directly in your profile.
- Delete your data. See our Account Deletion page.
- Object to or restrict certain processing, including processing based on our legitimate interests.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent, such as push notifications, which you can also switch off in your device settings.
- Lodge a complaint with your local data protection authority.
California residents. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You may exercise your rights of access, deletion and correction using the contact details below; we will not discriminate against you for doing so.
To exercise any of these rights, email privacy@yaokemon.com from the address associated with your account. We will respond within the period required by applicable law, normally within 30 days.
9. Children
Losta involves contact between strangers and real-time voice conversation. It is intended strictly for users aged 18 and over, and we do not knowingly collect personal data from anyone under that age. If we learn that a user is a minor, we will remove the account and its content. If you believe a minor is using Losta, report the account in the app or email support@yaokemon.com.
10. Do Not Track and third-party advertising
We do not serve third-party behavioural advertising in the app and we do not respond differently to browser Do Not Track signals, because we do not track users across third-party sites.
11. Changes to this policy
We may update this policy to reflect changes in the app or in the law. When we do, we will change the "Last updated" date above and, for material changes, notify you in the app. Continuing to use Losta after an update means you accept the revised policy.
12. Contact
Shenzhen Yaokemeng Technology Co., Ltd.
Privacy enquiries: privacy@yaokemon.com
Support enquiries: support@yaokemon.com