Privacy Policy

Last updated: October 21, 2026

Introduction

At LURKE, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

Who We Are

LURKE is published and operated by NaviStack LLC. For privacy or legal questions, contact info@navistack.app. For app support, contact support@lurke.app.

Information We Collect

We collect information you voluntarily provide to us, such as:

• Account credentials and profile information
• Email address and contact information
• Instagram usernames you choose to track
• Device information and app usage data
• Communication preferences

How We Use Your Information

We use the information we collect to:

• Provide and maintain our tracking services
• Send you notifications about account activity
• Respond to your inquiries and support requests
• Improve and personalize your experience
• Comply with legal obligations
• Prevent fraud and ensure security

Data Security

We implement industry-standard security measures to protect your personal information. However, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

Third-Party Services

LURKE integrates with Instagram to provide tracking services. We only access public information and do not store Instagram passwords. Please review Instagram's privacy policy for information about their data practices.

Website analytics

Optional Google Analytics 4 and PostHog help us understand website visits, guide engagement, public-profile search and scan steps, free-tool use, plan selection, checkout handoffs, redemption-page engagement, and clicks to the App Store or Google Play. Neither analytics tool loads unless you choose “Accept analytics.” If you reject, neither loads. We store your choice in this browser. Previous analytics acceptances do not enable the new website-to-app attribution setup; we ask you to choose again.

When enabled, these services may collect page views, campaign information, browser and device details, approximate location, and a first-party browser identifier. We do not send entered Instagram usernames, profile results, email addresses, payment details, or RevenueCat redemption-link contents to website analytics. PostHog uses explicit interaction events; automatic interaction capture and session recording are disabled. Google Analytics remains disabled on scan and redemption routes. A checkout click or redemption-page visit is not recorded as a confirmed purchase. Advertising storage and personalization signals remain denied.

With your analytics opt-in, we may also create a random website journey identifier, valid for up to 30 days. We pass it to RevenueCat in checkout campaign metadata and to AppsFlyer OneLink for app-store clicks. This lets us connect website activity with verified purchases and redemptions, attributed installs and app opens, without merging your website analytics identity into an app account. We keep these outcomes distinct. Rejecting disables these identifiers and uses direct store links. Withdrawal clears the browser journey, disables further handoffs, and requests server-side revocation; failed withdrawal requests are retried on later visits. An in-flight request may already have completed. Previously collected events are not retroactively removed by withdrawal. This optional linkage does not change purchase access or account identity. Our server-side attribution ledger is cleaned daily after 90 days; it contains no payment or redemption-token data. Analytics events follow the analytics service’s retention settings. See AppsFlyer’s privacy policy.

Separately, our hosting provider Cloudflare provides cookieless Web Analytics that counts page loads in aggregate: the page path, the referring site, approximate country, browser type and page performance. It does not use cookies or local storage, does not build visitor profiles, and does not include Instagram usernames. See Cloudflare's Web Analytics overview.

You can change your analytics choice at any time. Read Google's Analytics data collection notice and PostHog's privacy policy for more information.

Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Opt out of marketing communications

Children's Privacy

LURKE is not intended for users under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at support@lurke.app.