Privacy Policy · Lago Pulse

Lago Pulse is built, hosted and managed by Highfivery Studio ("we", "us", "our"). This Privacy Policy explains what Lago Pulse collects, why, who can see it, how long we keep it and the choices you have. It takes effect on October 8, 2026, and applies to lagopulse.com and the Lago Pulse app you can add to your Home Screen. Questions: info@lagopulse.com.

The short version

Browsing needs no account and no personal information.
Reports are published anonymously: never your name, email or account, only a block-level location, after review. We remove names and contact details from what you write before anyone else sees it.
We do not build profiles of people. We count how many different neighbors raised a topic using hashes that change every week, not identities.
No ads, no third-party trackers, no analytics scripts, and we never sell or rent your information or share it for advertising.
To spot what the community is talking about, we read posts from the public Facebook Pages of local institutions and from local community groups we belong to. We never store or show who wrote a group post, and the app shows only topic counts, never the posts.
Card payments are handled by Stripe. We never see your card number.
You can delete your account at any time, and you can ask us for a copy of your information or to delete it.

What we collect

We collect only what Lago Pulse needs to work. What that is depends on what you do.

When you browse

A device cookie. On your first visit we set a random identifier in a secure, httpOnly cookie named lp_did. It contains no personal information. We never store the identifier itself. When you send something, we store only keyed hashes of it (codes that cannot be turned back into the identifier without our secret key). We use them to limit abuse, such as a few reports per hour from one device, and to count different voices on a topic (see "No profiling" below).
A hash of your IP address. For rate limits on reports, searches and alerts sign-ups, we use a keyed hash of your IP address. We do not store your raw IP address in our database.
Server logs. Our hosting providers (Vercel and Supabase) keep standard technical logs, which include IP addresses, browser type and the pages requested, for a limited time to keep the service secure and reliable.
Searches. Questions you type into search or "Ask" are used to find an answer and are not saved to our database.
Your device's settings. Choices like theme, text size, map mode and layout are stored on your device (see "Cookies and storage").

When you send a report

What you tell us: the category, the role you choose (for example "Parent or guardian" or "Prefer not to say"; we never ask for your name), what you wrote, the date and part of the day, and whether the post was removed from a Facebook group.
An optional map pin and street. If you tap "use my location", your browser asks your permission first and the location is used only for that report. The exact pin stays private. Only a point rounded to about 150 meters (a block, or wider for sensitive reports) and a block-level street label, such as "20400 block of Lohman Ford Rd", can be published.
An optional photo. Your device strips location and camera data from the photo before it is uploaded. Photos are stored privately, seen only by moderators, and never published.
Before anyone else sees it, we remove names, email addresses and phone numbers from your text. Moderators can see your original text and exact pin so they can review the report fairly.
The device and IP hashes described above, a weekly voice token, and, if you are signed in, a private link to your account. Issue signals count how many of the voices on a topic came from signed-in neighbors, as a total. Your account is never shown with a report.
A reference code (like LP-XXXXX) so you can check the report's status. Anyone with the code can see whether it is pending, published or declined.

When you create an account

Your email address, used to send six-digit sign-in codes and important account notices.
An optional password. It is stored by our authentication provider as a salted hash; we never see it.
Anything you choose to add: a first name (only you see it; other residents never do), a neighborhood, topics and issues you follow, alert topics, quiet hours and time zone, and display preferences such as theme and text size so they follow you between devices.
Basic account records kept by our authentication provider, such as when you signed up and last signed in.

When you turn on alerts

Your browser's push subscription (a unique address and encryption keys that let us send notifications to that device), the topics you chose, your quiet hours and time zone, a rough device type (such as "iOS" or "Windows") and a record of which alerts were sent to that subscription. No account is needed. If you are signed in, the subscription is linked to your account.

When you send feedback, a correction or a source suggestion

Feedback: your message, the page you were on, an optional screenshot, and the diagnostics you leave checked (device type, browser, app version, screen size, theme, text size and reduced-motion setting). You can uncheck any of them. If you are signed in, the feedback is privately linked to your account. If you ask us to email you when something is fixed, we keep your email address for that.
Corrections: what you think is wrong, your suggested fix, the page it is about, and an email address if you choose to give one.
Source suggestions: the link, what kind of source it is, what it covers and any note you add. We only accept public pages and groups that anyone can see without joining.

We also keep a device hash with feedback and use device hashes to rate-limit all three.

When you support Lago Pulse

Stripe processes the payment on its own checkout page. Stripe collects your card details, email address and billing information; we never receive your card number. From Stripe we store the amount, currency, whether the gift is monthly, your tier, the status of a monthly gift, and Stripe's customer, subscription and checkout identifiers. If you were signed in when you gave, the gift is linked to your account so you can manage it. Amounts are never shown publicly.

If you choose to appear on the supporters wall, we show only the name you pick (or "Anonymous neighbor"), your tier and the month you started. The supporter heart on your profile ring is a setting stored on your device.

To understand what is happening around town, Lago Pulse collects some posts from Facebook. You don't need to do anything for this, and it does not involve your Lago Pulse account or device.

Public institution Pages. We collect recent posts from the public Facebook Pages of public institutions and organizations, such as the city, police, fire and EMS district, school district, utilities, county and chamber of commerce. We store the organization's name, the post text, links, media addresses (URLs), timestamps and engagement counts (such as reactions, comments and shares).
Local community groups. We also collect posts from public-interest local Facebook community groups that our operator is a member of. We store the post text, when it was posted, its topic, engagement counts and the post's address (URL). We do not store the author's name or profile link. Instead we store a salted, one-way hash of the author's identifier. It lets us group posts from the same account to remove duplicates, catch spam and measure volume, and it cannot be reversed to identify anyone.

How this information is used:

Never shown in the app. Lago Pulse does not display these posts. The app shows only totals, such as how many posts mentioned a topic this week. Community signals are counts of topics, not posts.
Behind the scenes only. We use the collected posts for debugging, quality checks and aggregate analysis. They are kept on our servers and can only be read server-side; they are never sent to your browser.
Deleted automatically. Group posts are deleted after 30 days, and public Page posts after 90 days.

If you think a post of yours was collected and you want it removed sooner, email info@lagopulse.com with the post's link and we will delete it.

No profiling

Lago Pulse is built not to know who you are.

Device hash. A keyed hash of your device cookie lets us block repeat abuse from one device without knowing whose device it is.
Weekly voice token. To show how many different people raised a topic, we use a second hash whose key changes every week. Tokens from different weeks cannot be linked to each other, so we cannot follow one person's reports over time.
IP hash. A keyed hash of your IP address is used only for rate limits.

We do not combine Lago Pulse data with data from other sources to learn about individuals (the author hash on collected group posts is used only to group posts by the same account, never to identify or follow a person), we do not make automated decisions about people that have legal or similarly significant effects, and we do not use your information for targeted advertising.

Cookies and storage on your device

We use only what Lago Pulse needs to work. There are no advertising, analytics or third-party tracking cookies.

Device cookie (named lp_did, kept about 13 months): the random device identifier described above.
Sign-in cookies (named sb-…-auth-token): keep you signed in if you have an account. They are removed when you sign out.
Local storage (names starting with lp.): your theme, text size, map mode and layout choices, whether you dismissed the install prompt, the supporter heart setting, and an unsent report you started (so you don't lose it). These stay on your device and you can clear them in your browser settings.
Offline cache: Lago Pulse's service worker saves app files and recently viewed pages on your device so the app opens quickly and works offline.

Because we don't track you, there is nothing to opt out of with "Do Not Track" or Global Privacy Control signals, but we respect them all the same.

How we use information

We use information to run Lago Pulse and for nothing else:

to show local information and keep your settings;
to receive, redact, review and publish reports, and link them to issues;
to count distinct voices on community topics (as totals only);
to send the sign-in codes, account notices and alerts you asked for;
to read and answer feedback, fix mistakes and log corrections;
to prevent abuse, spam and attacks, and keep Lago Pulse secure;
to process gifts and show the supporters wall to those who opted in; and
to meet legal obligations.

We do not sell or rent your information, share it for cross-context behavioral advertising, or use it for advertising of any kind.

What is public

Published reports: the redacted text, category, role, block-level location and date.
Totals, such as how many reports or different neighbors raised an issue.
The corrections log: reference codes, status and our public notes (not your email).
Monthly moderation statistics on the Transparency page.
Supporters wall entries for people who chose to be listed.

Nothing else you send is public.

We share information only with service providers that run Lago Pulse for us, under contracts that limit what they can do with it:

Supabase (database, sign-in and private file storage), in the United States (AWS us-east-2, Ohio).
Vercel (hosting and server functions), in the United States.
Stripe (payments), which handles your payment details under its own privacy policy.
Resend (email delivery), which sends sign-in codes and account emails on our behalf.
Your browser's push service (for example Apple, Google, Mozilla or Microsoft), which delivers alerts to your device. Alerts are encrypted so the push service cannot read them.

Moderators and staff of Highfivery Studio can see private report details, feedback and corrections in order to review them. We do not share private report details with the city, the county, LVISD, police or any other agency.

We may disclose information if the law requires it, for example a valid subpoena or court order. We read such requests carefully, push back on ones that are overly broad, and tell affected people where the law allows. Because we store hashes rather than identities, there is often little we could disclose. If Lago Pulse is ever transferred to a new operator, this policy will continue to apply to information collected under it.

AI

Issue summaries are generated by an AI model from public documents such as agendas, minutes and official notices. We never send residents' reports, private details, account information or searches to an AI model. The model and prompt version are listed on the Transparency page.

How long we keep it

Public social media posts: community group posts 30 days and public Page posts 90 days, then deleted automatically.
Rate-limit counters: only for the window they cover (a minute to a day), then replaced.
Reports: published reports stay as long as they are useful to the community. The private original text, exact pin and photo are kept only as long as needed to review the report and handle questions about it, and are deleted within 12 months after review. Declined reports are deleted within 12 months.
Feedback, screenshots and corrections: up to 12 months after they are resolved. Public correction notes stay in the corrections log.
Source suggestions: until reviewed, and as long as an accepted source is in use.
Push subscriptions: until you turn alerts off, or the push service tells us the subscription no longer works.
Accounts: until you delete them.
Moderation log: a record of each moderation decision is kept to keep moderation accountable.
Gift records: as long as required for accounting and tax purposes.
Hosting logs: for the limited period our providers keep them.

Your choices and rights

Delete your account any time in Account settings. Your profile, follows and alert settings are deleted. Reports, feedback and gift records you sent stay, but are no longer linked to you. Alerts on a device keep working anonymously until you turn them off there.
Turn alerts off any time in Lago Pulse, or in your browser or device settings.
Choose diagnostics when you send feedback, and leave out a photo, location or email whenever they are optional.
Manage or cancel a monthly gift with "Manage or cancel a monthly gift" on the Support page, or email us.
Clear your device's data in your browser settings to remove the device cookie and local settings.
Ask us for a copy of your information, to correct it, to delete it, or to remove a published report that identifies you, by emailing info@lagopulse.com. We may ask you to confirm you control the email address on the account.

Texas residents. You may have rights under the Texas Data Privacy and Security Act, including to confirm whether we process your personal data, to access, correct and delete it, to get a portable copy, and to opt out of sale, targeted advertising and profiling (we do none of these). We respond within 45 days. If we decline your request, you can appeal by replying with "Appeal" in the subject line, and we will answer within 60 days. If you are not satisfied with the appeal, you can contact the Texas Attorney General at texasattorneygeneral.gov. We will not treat you differently for using your rights.

Children

Lago Pulse is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has sent us information, email info@lagopulse.com and we will delete it.

Security

We use encryption in transit (HTTPS) for every connection; database security rules so private fields such as original report text, exact pins and emails can be read only by our servers and moderators; private storage with short-lived links for photos and screenshots; keyed hashes instead of raw identifiers; and a staff-only moderation area. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by Texas law.

Where your information is stored

Lago Pulse is run from and stored in the United States, and is intended for people in Lago Vista, Jonestown, Point Venture and the surrounding area. If you use it from elsewhere, your information will be processed in the United States.

Changes

We may update this policy as Lago Pulse changes. We will change the "Last updated" date above, and for significant changes we will show a notice in the app before they take effect. We will not use information in a materially different way than described here without telling you first.

Contact

Highfivery Studio, operator of Lago Pulse. Email info@lagopulse.com. This policy is governed by the laws of the State of Texas.