When you create a Lento account, we collect the information you voluntarily provide: your display name, email address, date of birth (to verify you are 18 years of age or older), profile photo, country of residence, aesthetic preferences you set, and any personal bio you choose to write. If you register via Apple Sign-In or Google, we receive a limited profile dataset authorized by you and that provider.

We automatically collect device model, operating system version, unique device identifiers, IP address, mobile carrier, app version, crash logs, and performance diagnostics to maintain service quality and diagnose technical issues.

We record how you use the Service: bracelets created, community bracelets you view or interact with, features accessed, creators you follow, search queries, and session frequency and duration. This data informs product improvements and optional personalization.

If you contact our support team, submit a report, or participate in surveys, we retain the content and metadata of those communications for resolution and service improvement purposes.

All payments are processed exclusively by Apple App Store or Google Play. We do not store your payment card details. We receive only anonymized transaction confirmation tokens and purchase entitlement data to activate in-app premium features such as expanded bead libraries or design tools.

We use your information to authenticate your account, deliver the bracelet design experience, save and sync your creative collection across devices, operate community features, enforce content policies, process purchases, and provide all core Service functions.

Your design selections and history power the bracelet assembly experience, including the surprise-effect generation that produces unique creative outcomes with each assembly. Design pattern preferences and history are used solely to improve your in-app creative experience and are not shared with external partners.

Where you choose to share bracelets publicly, your submitted content populates community feeds and enables discovery by other users. Public creation data may be aggregated to display trending design styles within the community.

Your creation history, viewing patterns, and preferences are used to personalize community recommendations, surface designs you may find inspiring, and adapt the platform experience. See Section 6 for details on personalization.

We process behavioral signals and user reports to detect and prevent prohibited content, harassment, and policy violations within community features.

Aggregated and de-identified usage data is analyzed to improve design tools, community features, and overall platform performance.

With your consent where required by applicable law, we may send promotional communications about new bead collections, seasonal design themes, and platform features. You may withdraw consent at any time via in-app settings or the unsubscribe link in any email.

We process personal data as necessary to comply with applicable laws, respond to valid legal process, enforce our Terms of Service, and protect the safety of our users and the public.

Bracelet design parameters (bead selections, arrangements, and settings) and generated design images are stored on our secure cloud infrastructure and associated with your account. You may organize your creations into collections, favorite them, or delete them at any time from your personal studio.

Each bracelet design can be set to Private (visible only to you) or Public (visible in the community feed). You may change the visibility of any design at any time from its settings. Designs are Private by default; publishing to the community is always an explicit choice you make.

Lento's design assembly may include randomized visual effects that produce a unique outcome each time you complete a creation. These effects are generated at the moment of assembly and are recorded as part of your saved design. No personal identifiers are used in the randomization process.

You may request an export of your creative collection at any time from your account settings or by emailing service@lento.casa. Exports include your design parameters and images in a portable format suitable for personal archiving.

By publishing UGC publicly on Lento, you grant us a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, reproduce, display, and distribute your content within the Service and in connection with promoting Lento, subject to your visibility settings. This license persists for a commercially reasonable period following deletion. This license does not include the right to sell your designs to third parties for their independent commercial use.

Community-shared UGC is subject to automated screening and human review for compliance with our Community Guidelines. Content that violates our policies — including inappropriate imagery in bracelet titles or descriptions, offensive content, harassment, or copyright-infringing material — will be removed. Accounts responsible for violations may face suspension or termination.

You may delete any published design or UGC at any time. Deleted content is removed from public view within 48 hours, from production servers within 30 days, and from backup archives within 90 days.

Public bracelet designs appear in Lento's community feed for other users to discover, appreciate, and be inspired by. Public designs include your display name, the design image, any title or description you have written, and reactions or comments from other users.

Other users may react to or comment on your public designs. Comments are associated with the commenter's display name and are visible to all viewers of that design. You may moderate and delete comments on your own designs at any time.

You may follow other creators whose style resonates with you. Follower relationships are visible in your profile activity unless you set your profile to private. You may unfollow other creators at any time.

Where Lento allows viewing others' designs for inspiration, doing so does not grant you rights to reproduce or claim ownership of another creator's original work. Community designs are protected by these Terms and applicable intellectual property law.

Lento uses your creation history, viewing patterns, aesthetic preferences, and engagement signals to surface community designs and creators we believe will inspire you. Personalization enhances discovery within the app.

Your creative preferences, design history, and behavioral signals are not used to build an advertising profile or shared with jewelry brands, bead retailers, or third-party advertising networks without your explicit consent.

You may disable personalized recommendations at any time in Settings > Privacy > Personalization. Lento will then present a non-personalized, editorially curated community feed. Your core design tools are unaffected.

We share personal information with trusted third-party service providers supporting our operations: cloud infrastructure providers, CDN services for image delivery, payment processors, analytics platforms, customer support tools, and content moderation systems. All providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.

We do not sell your personal information, your bracelet designs, or your creative history to any third party, including jewelry brands, bead manufacturers, craft retailers, or data brokers.

In the event of a merger, acquisition, or asset sale, your data may transfer to the acquiring entity. We will notify you in advance before your data becomes subject to a materially different privacy policy, giving you the opportunity to request account deletion.

We may disclose your information to law enforcement or government authorities when required by applicable law, valid legal process, or where necessary to protect the safety of any person. Where legally permitted, we will notify affected users prior to such disclosure.

Your display name, profile photo, and publicly shared bracelet designs are visible to all Lento users. You may set your profile or individual designs to private in your account settings at any time.

Mobile analytics SDKs measure app performance and feature engagement, configured with privacy-preserving settings including anonymized event collection and suppression of advertising identifiers absent your consent.

Design images and user photos are stored on cloud infrastructure and delivered via CDN providers to ensure fast, reliable loading. These providers process delivery metadata as technical intermediaries under data processing agreements.

Apple Sign-In and Google authentication are governed by their own terms and privacy policies. Our use of data from these services is limited to account creation and basic profile population.

Third-party AI-assisted content safety tools are used to screen UGC for prohibited content. These tools process only data necessary for safety review under strict confidentiality obligations.

We retain your personal information and creative collection for as long as your account is active. Accounts with no login activity for 24 consecutive months will receive a dormancy notice; following the notice period, inactive data may be anonymized or deleted.

Your bracelet designs and creative collection are retained for the life of your account. You may delete individual creations or your entire collection at any time. Deleted design data is removed from production servers within 30 days and from backup archives within 90 days.

Financial transaction records are retained for a minimum of seven years to comply with applicable accounting, tax, and consumer protection obligations.

Records of content moderation actions, user reports, and enforcement decisions are retained for up to 36 months after account closure.

Aggregate, irreversibly anonymized usage data may be retained indefinitely for product research and development.

We implement TLS 1.2+ encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict role-based access controls, and automated anomaly detection to flag unusual access patterns for review.

Data access is restricted on a need-to-know basis, requires multi-factor authentication, and is comprehensively audit-logged. All personnel with data access receive regular data protection training and sign confidentiality agreements.

We conduct regular security assessments and third-party penetration testing. Report security vulnerabilities responsibly to service@lento.casa.

In the event of a personal data breach posing risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours where required by law and inform affected users without undue delay.

Lento uses session tokens, local storage, and analytics SDKs (not traditional browser cookies) to maintain your authenticated session, remember preferences, and sync your creative collection across devices.

On iOS, we request ATT consent before accessing your IDFA. On Android, we respect your opt-out via device advertising settings. Advertising identifiers are used only to measure our own user acquisition campaigns and are not shared for third-party behavioral advertising.

Our website may use standard browser cookies for session management and analytics, manageable via your browser settings.

Lento serves a global community of beadwork enthusiasts and operates cloud infrastructure across multiple regions. Your personal data may be transferred to and processed in countries other than your country of residence, which may have different data protection standards.

For transfers from the EEA, UK, or Switzerland to countries lacking an adequacy decision, we rely on EU Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum (IDTA). Equivalent safeguards apply to other cross-border transfers.

Where applicable national laws impose mandatory data localization requirements, we take reasonable steps to store and process the required data categories within the mandated territory.

Request a copy of personal data we hold, including your full creative collection metadata, via in-app settings or by emailing service@lento.casa with subject "Data Access Request."

Correct inaccurate personal information directly in account settings. For data that cannot be self-corrected, contact us and we will action the correction within 30 days.

Request deletion via Settings > Account > Delete Account or by emailing us. See Section 20 for full account deletion details.

Request your creative collection and personal data in a structured, machine-readable format suitable for personal archiving or transfer to another platform.

Object to or request restriction of processing in certain circumstances. We pause relevant processing while assessing your objection.

Withdraw consent for marketing or personalization at any time via in-app settings or by contacting us, without affecting prior lawful processing.

Email service@lento.casa with "Privacy Rights Request" in the subject, your registered email, and a description of your request. We verify your identity and respond within applicable legal timeframes.

For EEA and UK users, Lento acts as the data controller of your personal information under the GDPR and UK GDPR respectively.

We process your data under: (a) contractual necessity (to provide the Service); (b) legal obligation (regulatory compliance); (c) legitimate interests (safety, service improvement, fraud prevention), where not overridden by your rights; and (d) consent (for marketing and optional personalization).

You may lodge a complaint with your national data protection supervisory authority if you believe your data has not been handled lawfully. We encourage you to contact us first to attempt direct resolution.

California residents have rights under the CCPA as amended by the CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. Lento does not sell personal information and does not share it for cross-context behavioral advertising.

Exercising your California privacy rights will not result in denial of services, different pricing, or reduced quality of experience.

California residents may designate an authorized agent by providing written proof of authorization. We verify both agent and resident identity before processing any request.

Brazilian users have rights under the Lei Geral de Proteção de Dados (LGPD) including confirmation, access, correction, anonymization, deletion, portability, and withdrawal of consent.

We process Brazilian users' data based on contract performance, legal obligation, and consent where applicable.

Brazilian users may lodge complaints with the Autoridade Nacional de Proteção de Dados (ANPD) where they believe data processing violates the LGPD.

Lento is designed for users who are 18 years of age or older. We implement date-of-birth verification at registration and apply additional detection measures to accounts suspected of being operated by minors. Confirmed underage accounts are immediately and permanently terminated with all associated data deleted.

If you are a parent or guardian and believe a minor has created a Lento account, contact us immediately at service@lento.casa. We will investigate and, where confirmed, permanently delete the account and all associated data without delay.

All in-app purchases are processed exclusively through Apple App Store or Google Play. Lento does not store your payment card details. We receive only anonymized transaction confirmation tokens and entitlement data to activate premium features.

If Lento offers premium features (such as expanded bead libraries, exclusive materials, advanced design tools, or additional storage): access is non-transferable between accounts; non-refundable except as required by applicable law or app store policy; and may be forfeited upon account termination for cause.

Transaction records are retained for a minimum of seven years to satisfy applicable accounting, tax, and consumer protection requirements.

Lento may send push notifications for: reactions or comments on your designs, new content from creators you follow, platform announcements, seasonal design themes, and account security alerts.

Control notification types in Settings > Notifications or via your device OS settings. Disabling all notifications may cause you to miss important security alerts.

Transactional emails (account confirmations, purchase receipts, security alerts) are essential for Service operation. Marketing emails are optional and may be unsubscribed from at any time.

Delete your account at any time via Settings > Account > Delete Account, or by emailing service@lento.casa with subject "Account Deletion Request."

Your profile, creative collection, published designs, community posts, comments, and all associated data are removed from public view within 48 hours and from production servers within 30 days. Backup archives are purged within 90 days of the next scheduled rotation.

Certain data is retained where required by law: transaction records (up to 7 years); safety and moderation records (up to 3 years); data subject to a legal hold. All retained data is isolated and processed only for the specific legal purpose requiring its retention.

Material changes are communicated at least 14 days before taking effect via in-app notice, push notification, and/or email to your registered address. Non-material corrections may be made without advance notice.

Continued use of Lento after any revised Policy's effective date constitutes acceptance. If you do not agree, delete your account before the changes take effect.

Prior versions are available upon request at service@lento.casa.

For questions, data rights requests, or privacy concerns:

• Email: service@lento.casa
• Subject: "Privacy Inquiry — [Your Name]"

We acknowledge inquiries within 5 business days and respond within 30 days.