Privacy Policy

Effective October 14, 2026

This Privacy Policy explains how LMKdev (a d/b/a of LMK Management LLC, “LMKdev,” “we,” “us”) collects, uses, discloses, and protects information in connection with our websites, software products, and services (collectively, the “Services”). By using the Services, you agree to this Policy.

1. Information we collect

Information you provide. Contact details (name, email, phone) when you reach out or create an account; account and profile information; content you submit to a Service; and payment information processed by our payment provider (see §4).

Information collected automatically. Usage and device data such as IP address, browser type, pages viewed, and timestamps, collected through standard logs and cookies or similar technologies.

Forms on lmkdev.com. The “start a project” form sends us your name, business, email, budget and message; the “notify me” forms send us your email and the product you asked about. Both arrive as an email in our inbox (Google Workspace) and a short entry in our hosting provider’s request logs; we use them only to reply. Beta sign-ups are covered in §12.

Legal bases (EU/UK visitors). We use your information to do what you asked (contract or steps before one: replying to a form, running a beta you joined), with your consent where we ask for it (beta sign-up emails), and for our legitimate interests in keeping the Services secure and understanding aggregate use (bot protection, cookieless page counts). You can withdraw consent at any time.

2. How we use information

• To provide, operate, secure, and improve the Services;
• To process transactions and send related confirmations and notices;
• To respond to inquiries and provide customer support;
• To send service and, where permitted, marketing communications (you may opt out anytime);
• To detect, prevent, and address fraud, abuse, and security issues; and
• To comply with legal obligations and enforce our terms.

3. Cookies & similar technologies

On lmkdev.com we set one cookie, and only if you pick a language: lmk_lang remembers that choice for a year. It is strictly necessary for the feature you used, so there is no cookie banner. We set no advertising or analytics cookies and load no ad pixels.

In our other Services (for example an app’s sign-in) we may use cookies or similar storage to keep you signed in and remember preferences. You can control cookies through your browser settings; disabling some may affect functionality.

Website analytics. lmkdev.com uses Vercel Web Analytics and Vercel Speed Insights to count page views and measure how fast pages load. They set no cookies, don’t follow you to other sites, and give us only aggregate numbers (for example, “how many people opened the beta page today”). Forms on the site are protected from bots by Vercel BotID, which checks the browser making a request; it is not used for advertising or to identify you.

4. Payments

Payments are processed by Stripe. We do not store full payment-card numbers; Stripe’s handling of your payment data is governed by Stripe’s privacy policy. We receive limited transaction details (e.g., confirmation, last four digits, billing metadata) to operate billing.

5. How we share information

We do not sell your personal information and do not share it for cross-context behavioral advertising. We share it only with: (a) service providers who process data on our behalf under contract (e.g., hosting, payments, email, analytics); (b) authorities or other parties when required by law or to protect rights, safety, and security; and (c) a successor in connection with a merger, acquisition, or asset sale, subject to this Policy.

Our service providers (all in the United States): Vercel (hosting, logs, cookieless analytics, bot protection), Supabase (database), Resend (email delivery), Google Workspace (our inbox), Apple TestFlight (beta builds) and Stripe (payments for client work). Each processes data only on our instructions.

6. Data retention

We keep personal information only as long as necessary for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements, then delete or de-identify it.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your information, to opt out of certain processing or marketing, and to not be discriminated against for exercising these rights (including under the CCPA/CPRA and the GDPR). To exercise any right, contact us at privacy@lmkdev.com. We will verify the request (usually by replying to the email address we hold) and respond within one month (EU/UK) or 45 days (US states), and tell you if we need longer. You may use an authorized agent. If you are in the EU or UK you also have the right to lodge a complaint with your local data-protection authority.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach that affects your information we will notify you and the authorities as the law requires. Found a vulnerability? Email security@lmkdev.com (see security.txt); we welcome good-faith reports and will not pursue researchers who act in good faith.

9. Children

The Services are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.

10. International users

We operate in the United States. If you access the Services from outside the U.S., you understand your information may be processed in the U.S., where data-protection laws may differ from those in your country. For EU/UK data we rely on the transfer safeguards our providers offer in their data-processing terms, such as the European Commission’s Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

11. App-specific notes: Truno

On your device. Truno keeps your values, the people you’re getting to know and your notes on your iPhone. We don’t receive them. There are no analytics or advertising trackers.

Optional encrypted backup. If you sign in with LMKdev ID and turn backup on, your data is encrypted on your iPhone with a key only you hold before it’s sent. We store a sealed copy we cannot read, plus your LMKdev ID email.

“Would You Rather, For Real.” An open game you play with someone who knows they’re playing. Your answers and theirs are encrypted on each device; the key travels only inside the link you share, so we store sealed answers we cannot read. The person you invite sees exactly what will be shared before sending and can decline. Either of you can delete the answers at any time; unanswered invitations expire after 30 days.

Library packs. Truno downloads signed lists of values from us. Downloading them sends nothing about you beyond the standard request information described in §1.

“Suggest for everyone.” If you choose to suggest one of your own values, we receive only the text you see on screen before sending (the value, your words about it and, if you add them, a first name and city for credit). A person reviews every suggestion; if it’s added to Truno’s library, your credit appears only if you gave one.

Anonymous title signal (off by default). If you turn on “Help improve the Library” in Settings, Truno sends only the titles of values you wrote yourself — no descriptions, people, notes, account or device identifiers. We keep a count per title, not who sent it, and look only at titles sent by at least three people. A short-lived, hashed form of your IP address is used to limit abuse and is deleted within two hours. You can turn it off at any time.

12. Beta sign-ups on lmkdev.com

What we collect. When you sign up to test an app at lmkdev.com/beta (or on an app’s page) we store: your name, your email address, the devices you said you use (iPhone, iPad, Apple Watch), the apps you picked, your optional note about why you want in, your language, your age confirmation, the version of this policy you agreed to and when, and a one-way hashed form of your IP address (used only to stop abuse; we can’t turn it back into your address).

Why. Only to run the betas you asked for: to confirm your email address is yours (we send one confirmation link — nothing happens until you click it), to let Ryan review and approve testers, to add your email to that app’s Apple TestFlight beta (Apple then emails you the invite; Apple’s handling is covered by Apple’s privacy policy), and to email you about those betas — a confirmation, a “you’re in” note, and at most occasional notes about big test builds. No newsletter, no marketing lists, never sold or shared with anyone else.

Where it’s kept. In our database (Supabase, United States), locked so that only our own server code can read or write it, and in Apple’s TestFlight once you’re invited. Emails are sent through our email provider (Resend).

How long. If you never confirm your email, your sign-up is deleted automatically after 7 days. Requests we decline are deleted after 30 days. Otherwise we keep your sign-up while the betas you joined are running, and delete it within 12 months of the app’s public release or of your last beta activity, whichever comes first.

Delete it any time. Every email we send has a link to see your sign-up and delete everything in one click — that removes your sign-up from our records and removes you from the TestFlight betas we added you to. You can also email privacy@lmkdev.com.

Age. Beta testers must be 13 or older (16 or older in the EU and UK). For apps made for kids, and for 18+ apps, only an adult can sign up — for a kids app that is the parent or guardian, who installs it for their family. We don’t knowingly collect information from children.

13. Changes

We may update this Policy from time to time. We will revise the “Effective” date above and, where appropriate, provide additional notice.

14. Contact

Questions about this Policy or your information: