Privacy policy

LConnect (operated by LConnect for Information Technology, an Egyptian company headquartered in Cairo, Arab Republic of Egypt) is the data controller for the personal data described in this policy. References to "we", "us", or "LConnect" mean that company. References to the "platform" cover the website at lconnectapp.com and the LConnect mobile apps on iOS and Android.

Our Data Protection Officer (DPO), appointed under Article 8 of Law 151/2020, can be reached at privacy@lconnectapp.com. The Egyptian Personal Data Protection Center (PDPC) is the competent authority for complaints about how we handle personal data.

We collect the following categories, only when you give them to us or when they're created by your use of the platform:

Account & profile

• Name, date of birth, gender, profile photo, bio.
• Phone number and email — verified at signup.
• National ID number and a scan of the document, used to verify you are who you claim to be (talent profiles only). The ID number itself is hashed at rest; the scan is encrypted and accessible only to our verification team.
• Work role, skills, languages, height/weight (talent), city/district.
• Portfolio media you upload (photos, video reels, audio).

Business accounts

• Company name, commercial registry number, tax ID, billing address, authorised signatory contact details.
• Bank or wallet details for payouts (talent) or invoicing (business).

Usage & device

• Pages and screens you view, features you use, applications you submit, bookings you make.
• Device model, operating system version, app version, language and region settings, crash logs, network type.
• IP address (used to detect fraud and to comply with anti-money-laundering obligations) and approximate location derived from it.

Mobile-app permissions

The LConnect mobile apps may ask for the following permissions. Each is opt-in and used only for the purpose described:

• Camera & Photos — to upload portfolio media or a profile photo. We never access your camera or library in the background.
• Microphone — only while recording an audio reel.
• Notifications — to deliver booking confirmations, casting invitations, and chat messages. You can revoke this at any time in your device settings.
• Location — coarse location only, used to surface relevant studios, locations and casting calls near you.
• Face ID / Touch ID / biometrics — handled entirely by your device; the biometric template never leaves your phone and we never see it.

Sensitive data

We do not knowingly collect data revealing health, religion, political views, or trade-union membership. If you choose to upload portfolio content that discloses such information, you consent to our processing it for the purpose of displaying it on your profile.

Under Article 4 of Law 151/2020 we may only process personal data on a lawful basis. We rely on:

• Performance of a contract — to operate your account, run bookings, deliver casting matches, process payments.
• Your consent — for marketing communications, optional analytics, optional cross-app advertising, and any sensitive data you choose to share. Consent can be withdrawn at any time without affecting prior lawful processing.
• Legal obligation — to comply with Egyptian tax, anti-money-laundering, and labour-protection laws (e.g. retaining payout records for the period required by the Tax Authority).
• Legitimate interests — to keep the platform secure, prevent fraud and abuse, debug and improve our service. We balance these interests against your rights and stop any processing that fails the balance.

We never sell your personal data. We share it only with:

• Other LConnect users — your public profile (the parts you chose to publish) is visible to verified businesses on the platform; bookings and casting applications are visible to the counterparty.
• Service providers ("processors")who run infrastructure on our behalf under written processing agreements: cloud hosting (Contabo, Frankfurt & Nuremberg, Germany), email delivery, SMS gateways, payment processors (Paymob, Egypt), crash reporting (Sentry / Rollbar), and performance analytics. Each processor is contractually limited to the purposes we set.
• Authorities — when we receive a valid order from an Egyptian court, the Public Prosecution, or the PDPC. We notify you unless the order forbids it.
• Acquirers — if LConnect is acquired or merges, your data transfers to the acquirer subject to this policy and PDPL safeguards.

Some of our processors host data outside Egypt — primarily in the European Union, which the PDPC recognises as offering an adequate level of protection. Where data is transferred to a country without an adequacy decision, we use the standard contractual clauses approved by the PDPC and obtain your explicit consent where required by Article 14 of Law 151/2020.

We retain data only for as long as we need it for the purpose it was collected:

• Active account data — for as long as the account is open.
• Account closure — deleted within 30 days, except for records we must retain by law (e.g. Tax Authority records — 5 years).
• Verification documents — kept only while the account is active and for 6 months after closure for fraud prevention, then deleted.
• Server logs — 90 days, then aggregated.
• Marketing consent records — 3 years from last interaction (so we can prove a valid consent existed).

We protect your data with industry-standard controls: TLS 1.2+ on all network traffic, encryption at rest for backups and verification documents, role-based access for our team, intrusion detection on the production environment, and independent annual penetration tests. No system is perfectly secure; if a breach occurs that is likely to harm your rights, we will notify you and the PDPC within 72 hours of discovery as required by Article 7 of Law 151/2020.

You have the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — delete your account and associated data, subject to lawful retention obligations.
• Restriction & objection — pause or stop specific processing, including direct marketing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, for any processing based on consent.
• Lodge a complaint — with the Egyptian Personal Data Protection Center (PDPC).

To exercise any right, email privacy@lconnectapp.com. We respond within 30 days. There is no charge unless the request is manifestly unfounded or excessive.

You can delete your account in either of two ways:

• From the mobile app — go to Settings → Account → Delete account. The deletion runs immediately; we send a confirmation email and erase your profile within 30 days (some financial records are retained as required by Egyptian tax law).
• From any device — email privacy@lconnectapp.com from the address on file. We confirm and complete the deletion within 30 days.

This satisfies Apple App Store Review Guideline 5.1.1(v): the in-app deletion is available without contacting us, and a web-based path exists for users who have lost access to the app.

On iOS, the LConnect app does not currently track you across apps and websites owned by other companies. If we ever introduce features that would, the app will present Apple's App Tracking Transparency prompt and the tracking will only happen if you grant permission. Denying tracking does not change the functionality of the app.

We use cookies and similar storage on the website. Categories, vendors, and controls are described in our cookies policy. The mobile apps do not use HTTP cookies; they use secure on-device storage for the auth token and a local consent flag. You can change your consent any time from the footer of the website.

LConnect is not directed to children under 18. We do not knowingly create accounts for, or process personal data of, anyone under 18 without verifiable consent from their legal guardian as required by Article 3 of Law 151/2020. If you believe we hold data about a minor without proper consent, contact privacy@lconnectapp.com and we will delete it.

We may update this policy as the product evolves or as the law changes. The "Last updated" date at the top tells you when the current version was published. Material changes are notified by email and (for app users) via an in-app banner the next time you open LConnect. Continued use of the platform after the change date constitutes acceptance of the revised policy.

Data protection questions, requests under the PDPL, or breach reports: privacy@lconnectapp.com.

The Egyptian Personal Data Protection Center (PDPC) — supervisory authority, subordinate to the Ministry of Communications and Information Technology — can be reached via www.pdpc.gov.eg.