01 Information we collect

We only collect what is needed to verify your identity and process your request with the relevant administrative office:

We do not use passwords. Sign-in and identity verification use one-time codes (OTP) sent by SMS or email instead.

02 Information we do not collect

• We do not track your GPS location
• We do not read your device contacts
• No third-party advertising or analytics SDKs, no advertising ID
• We do not sell or trade your personal data with any business

03 How we use information

• To verify your identity and authorize access to your own account
• To process and review your document request through the administrative hierarchy (sub-district/finance office → provincial oversight → system administrator)
• To issue certificates pre-filled with the data required on the official template
• To calculate and record fees related to your request (in Lao Kip, LAK)
• To prevent impersonation, duplicate registration, and fraud
• To keep the system stable and fix defects

We never use your data for advertising or for building a marketing profile.

04 Who sees or receives your data

Your data is shared only with:

• Officials directly involved in your request — at the level of the review hierarchy (sub-district officer, district finance office, provincial oversight, system administrator) that applies to the case, each limited to what their role needs
• Our cloud storage provider (Amazon Web Services, S3) — used only to host attached files; it does not use your data for its own purposes
• Other Lao government authorities, only where required by the law of Lao PDR

05 Data security

• All traffic between the app and our servers is encrypted with HTTPS/TLS
• National ID numbers are encrypted at rest with AES-256-GCM; they are never stored as plain text
• Your PIN is stored as a one-way hash — no staff member or system can view your actual PIN
• Session refresh tokens are kept only in your device's secure storage and never leave the app

06 Retention and deletion

We keep your account and request data for as long as your account is active, and for as long as Lao administrative recordkeeping rules require for official documents. Audit records for approved requests are retained indefinitely for transparency and legal traceability, as required by law.

You may request account closure or deletion of personal data that is not subject to a legal retention obligation using the contact details in section 11.

07 Your rights

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data (name, address, request details)
• Request deletion or account closure, subject to section 6
• Reset your PIN at any time through the in-app OTP flow, without needing your old PIN

08 Device permissions (camera)

The app requests camera access only for (1) scanning your ID card and (2) a face liveness check, both during registration/identity verification. These images are sent directly to our servers over an encrypted connection for verification purposes only — they are not used for any other purpose and are not shared with unrelated third parties.

09 Children's privacy

This service is built for citizens who hold a national ID card and is not directed at children. We do not knowingly collect data from children who do not hold a valid ID or lawful consent.

10 Changes to this policy

If we make a material change to this policy, we will update the "Last updated" date at the top of this page and notify you in the app where appropriate.

11 Contact us

If you have questions about this policy or want to exercise your rights, please contact: