Privacy policy
Lain IO is built so that we hold as little about you as possible. This policy explains what the app and LainCorp's relays handle. Our contact for privacy is support@lain.コム.
How Lain IO works
Lain IO is decentralized:
- Your account is a cryptographic key pair created on your phone.
- Your data is stored in a shared database (GunDB) that phones and relays sync between them.
- LainCorp runs the main relay, on Cloudflare. Community members may run other relays.
What we handle
- Account: your username and public key are public. Your password never leaves your phone. Your private key is stored encrypted with it.
- Public activity: posts, replies, likes, reposts, follows and your profile are public. They're signed by your key and synced through relays.
- Private messages: end-to-end encrypted with the Signal protocol. Relays store ciphertext only, for up to 30 days, until your contacts' devices fetch it. Attachments are encrypted on your phone before upload.
- Settings, blocks and Lain's memory: encrypted with your key before they're synced. Only you can read them.
- Lain (AI): the language model and voice run on your phone. Your conversations aren't sent to us.
- Images and videos: stored on our relay (Cloudflare R2) by their SHA-256 hash. Photos are re-encoded on your phone before upload, which strips location data. Public photos and videos are also published on IPFS, the public content-addressed network, at ipfs.lain.コム and listed in the public IPFS index (cid.contact) for as long as we host them. When a file expires or is removed, we stop serving it and withdraw it from the index. Anyone who already copied it may keep their copy. Direct-message attachments are encrypted on your phone and are never published.
- Recovery email (optional): if you add one, it's stored encrypted in your account.
- Reports: encrypted to our moderators. If you report a private conversation, the messages you report are included.
- Technical data: relays see your IP address and connection times to deliver data. Cloudflare processes this traffic for us. We don't build profiles from it.
What we don't do
No ads, no selling or sharing data for advertising, and no tracking across apps or websites.
How long we keep things
- Posts and their media: 30 days. When a post turns 30 days old, the top 1% of the month's posts (by verified likes and reposts) are kept indefinitely. The rest are deleted from our relays.
- Private message envelopes: up to 30 days.
- Your account: until you delete it.
Deleting your account
Delete your account in the app under Settings → Delete account, or see Delete your account. This wipes your profile, posts, settings, Lain data and messages from our relays. It releases your username, and our relay stops storing and serving anything signed by your account.
What we can't promise
Public content is synced to other people's devices and to relays we don't run, and they may keep copies. Deleting removes your content from LainCorp's relays and hides it in the Lain IO app. It can't recall every copy on someone else's device.
Age
Lain IO isn't for anyone under 17, and we don't knowingly collect data from them.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data. Most of this is available directly in the app. For anything else, email support@lain.コム.
Changes
We'll update this page, and the date above, when this policy changes.