Privacy Policy

How Lamin collects, uses, and protects personal data.

Version 2026-07-20 · Effective 20 July 2026

This Privacy Policy explains how the Lamin mobile application and its backend service (“Lamin”, “we”, “us”) process personal data. It covers two different groups of people:

Users — people who install and use the app.
Registered vehicle keepers — people whose details appear in the vehicle registry Lamin searches. Most of them are not users and never chose to be here.

Important — we publish third-party personal data.

Lamin’s core feature returns information about the registered keeper of a looked-up vehicle, which may include their full name, phone number and address. That is personal data about someone who is usually not the person searching. If you are a vehicle keeper and want your data removed or restricted, see section 8 — you have that right and we will act on it.

1. Who we are

Lamin is operated from Lebanon. For any privacy question, data request, or complaint, contact support@lamin.app. We aim to answer within 30 days.

2. Data we collect about you (the user)

We collect only what the service needs to run:

Account identifier. A Firebase user ID, created when you first open the app. If you never sign in, this is an anonymous ID not linked to your identity.
Phone number — only if you verify one to sign in. Used to identify your account across devices and to let you recover it.
Email address — only if you sign in with a provider (such as Google) that gives us a verified address.
Display name — only if you choose one. We do not copy the name from your Google or Apple account.
Passcode — if you set one, we store only a salted hash of it, never the passcode itself.
Credit balance and purchases, including your garage slots.
Your garage — any vehicles you add, and whether you pay to hide them.
Your community activity — Hay Lamin posts, replies, votes and any photos you upload.
Search history. Every plate lookup is logged with your account ID, the plate, the outcome and the credits spent. See section 6.
Top-up records — the amount, and the blockchain transaction ID you submit.
Push notification token, if you allow notifications.
Technical data — IP address and request logs, kept briefly to operate the service and prevent abuse.

We do not sell your data, and we do not use it for advertising or profiling.

3. Data we return about vehicles and their keepers

A successful plate lookup may return: the plate, make, model, year, colour, chassis (VIN) and engine number, usage type, first registration year, acquisition date, whether the registration is out of service, and the registered keeper’s full name, phone number and address.

This information comes from a Lebanese vehicle-registration dataset. We did not collect it from the keeper, and the keeper did not give it to us.

4. Why we process data (lawful basis)

To provide the service you asked for — your account, credits, garage, posts and lookups (performance of a contract with you).
To keep the service working and safe — rate limits, abuse prevention, fraud checks on top-ups (our legitimate interests).
To meet legal obligations where they apply.

For registry data about vehicle keepers, we rely on legitimate interests in operating a vehicle lookup service. That basis can be objected to, and we will stop processing your data on request unless we have compelling grounds not to — see section 8.

You are separately responsible for having a lawful reason to look up any particular plate and for what you do with the result. See the Terms.

5. How long we keep data

Account data — until you delete your account.
Plate search history — 90 days, then deleted automatically.
One-time codes — deleted within an hour of expiry.
Top-up records — kept while your account exists, as the record of a payment.
Hay Lamin questions — shown for one year from the day they are asked, then hidden from the board and from search. A question names a plate, so it is a small record of somebody’s car and of the fact that it was asked about; that stops being useful long before it stops being a trace.
Replies and photos — until you delete them or your account, and hidden with the question they belong to.

Deleting your account removes your row and everything that cascades from it: your garage, posts, replies, votes, push tokens and search history.

6. Who we share data with

We use a small number of processors, and share only what each one needs:

Google Firebase — authentication and push notifications.
Twilio — only to send a one-time code by SMS, when that is enabled.
Our hosting provider — the server the service runs on.

We do not sell personal data or share it with advertisers or data brokers.

Blockchain payments are public. If you pay by USDT, the transaction is recorded on a public blockchain that we neither control nor can erase. Anyone can see the sending wallet, the amount and the time. Do not use a wallet you need to keep private.

7. How we protect data

Traffic is encrypted in transit (HTTPS). Passcodes are stored only as salted hashes. The service is reachable only through our reverse proxy and web application firewall. Lookups are rate limited per account, per network and service-wide to make bulk extraction impractical. Access to the operator dashboard requires a separate password and is limited to us.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority where the law requires it.

8. If you are a registered vehicle keeper

You did not sign up for Lamin, and you still have rights over your data. You can ask us to:

Tell you what we hold about you;
Correct anything inaccurate;
Remove you from search, so your plate returns no keeper details;
Object to our processing your data at all.

Email support@lamin.app with the plate number and enough information for us to confirm the vehicle is yours. We will suppress a plate on request and free of charge, and we do not require you to create an account to ask.

If you also use the app, the in-app “hide my car” feature exists as a convenience. It is not a substitute for this right, and we will never charge you to exercise it.

9. Your rights as a user

You can access, correct, export or delete your data. The fastest route is Settings › Delete account in the app, which erases everything immediately. You can also use lamin.sou2lkel.shop/delete-account if you no longer have the app installed, or email us. You may also complain to your local data-protection authority.

10. Children

Lamin is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will delete it.

11. International transfers

Our processors (Google, Twilio) operate globally, so your data may be processed outside Lebanon. They are bound by their own data-protection commitments as our processors.

12. Changes to this policy

If we change this policy materially, we will raise its version, and the app will ask you to read and accept the new version before you continue using it. The version and effective date are shown at the top of this page.

13. Contact

Questions, data requests, or complaints: support@lamin.app.