Privacy Policy

LOKKR (“we”, “us”) operates a nightlife, events and social connection platform built for the LGBTQ+ community, launching in Toronto. This policy covers the LOKKR web app and site (together, the “Platform”). You can browse events, venues and editorial without an account; the member features described below only apply once you join.

Account

• Username, display name and email address
• Password, stored only as a hash — never in plain text
• Your confirmation that you are 18 or older

Profile

• Bio, headline and the profile fields you choose to fill (age, height, body type, position, tribes, what you're looking for, interest tags, ethnicity)
• Your current mood, if you set one
• Profile photos, and the private Vault photos you upload
• Your Nightlife DNA panels — sounds, scenes and habits you tell us about

Location

• A location you set on purpose, used for the nearby-people grid and the map
• Venue check-ins you make, which expire on their own after a few hours
• Distances between you and other members, computed from those locations

Location is opt-in and revocable. With no location set you are simply off the grid. The “me” dot on the map stays on your device and is never sent to us.

Photos, media and posts

• Profile and Vault photos
• Drip posts and 24-hour stories, with their captions, tags, likes and comments
• Photos and voice notes sent in chat
• Teases — the photo or text you send, in its obscured and full forms

Communications and activity

• Direct messages, including quick phrases you save
• Event RSVPs, saves, interest you express in other attendees, and connections
• Guest lists and After Hours parties you host, join or request
• Tempt List picks — private to you, never shown to the person you pick
• Profile views — recorded so suggestions can rank better, and never shown to anyone as a “who viewed you” list
• Support tickets, reports you file, blocks you set
• Sign-in activity, device and browser type, push-notification subscriptions

Purchases

LOKKR is free to use. Merch is sold through our Shopify store: when you check out, Shopify collects and processes your payment and shipping details under its own privacy policy. We never see or store your card number.

• Running the platform: your account, your profile, the events you save, the people you connect with.
• Discovery: showing you people nearby and suggestions such as the Fling Forecast, ranked from your own activity.
• Communication: messages, in-app notifications and, if you opt in, push notifications and email.
• Safety: detecting fraud, spam and abuse, and enforcing the Content Rules.
• Moderation: automatically reviewing photos, posts, messages and profile text for rule violations, with human review of what the systems flag.
• Improvement: understanding which features are used so we can make them better.
• Legal: complying with the law and responding to lawful requests.

Other members

Your public profile, the photos you mark public, your posts and stories, and the messages you send are visible to other members according to your settings. Scout Mode lets you hide sections of your profile from everyone except the members you unlock it for. Vault photos are only visible to members you have granted access. Anyone you block can no longer see you or reach you.

Service providers

We rely on a small set of providers to run the Platform:

• Neon — the database that stores your account and activity
• Cloudflare R2 — storage for photos, voice notes and media
• Railway — hosting for the app
• Google (Gemini) and xAI (Grok) — automated content moderation and AI features such as translation
• Resend — transactional email (welcome, password reset, security alerts)
• Shopify — merch checkout and order fulfilment
• CARTO — the map tiles; loading the map tells their servers the area you are viewing, not who you are
• PostHog — product analytics, when enabled: page views only, no session recording

Legal requirements

We may disclose information when the law requires it, to protect our rights, or to prevent harm to a member or the public.

• Passwords are hashed before storage and never kept in plain text
• Everything travels over HTTPS
• Sign-in is rate-limited, with progressive lockout after repeated failures
• Staff access to the back office requires multi-factor authentication
• Vault and chat media are never public URLs — every view is checked against who is allowed to see it

• Location: set it, move it or remove it any time; no location means you are off the grid
• Scout Mode: choose which profile sections stay hidden, and unlock them for specific members
• Vault: grant, deny and revoke access to your private photos, one member at a time
• Blocking: a block cuts every path between you and that member, both ways
• Notifications: choose what reaches your inbox, your phone and your email
• Your data: download a copy of what we hold about you from the More menu
• Unsend: delete a message you sent, including its photo or voice note, at any time

We keep your data for as long as your account is active. To delete your account, contact support and we will remove your personal information — email, photos, posts, profile — and anonymize what must remain for safety and fraud records, such as moderation history and reports. Messages you sent stay visible to the people who received them, attributed to a former member.

Content removed by moderation is kept only long enough to review an appeal, then deleted.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Have your data deleted
• Object to how it is processed
• Receive a portable copy
• Withdraw consent where processing relies on it

To exercise any of these, write to [email protected].

We use essential cookies and local storage for:

• Keeping you signed in
• Remembering your preferences, such as filters and chat language
• Security features

If analytics are enabled we use PostHog to count page views. We do not record sessions or replay what you do on screen.

LOKKR is strictly for people 18 and older. We do not knowingly collect data from anyone under 18, and an account found to belong to a minor is deleted along with its data. Many of the venues we list are 19+ under Ontario law; the age on the event page is the venue's, not ours.

LOKKR is operated from Canada. Our database and media storage run on providers with infrastructure in the United States, so by using the Platform you agree to your information being transferred to and stored there, with the safeguards those providers offer.

We may update this policy. Material changes are announced in the app or by email, and continuing to use LOKKR after they take effect means you accept them.

Questions about privacy or our data practices: [email protected]