Privacy Policy

Effective date: October 23, 2026

1. Overview

This Privacy Policy explains how Light Years Network, LLC, a Delaware limited liability company ("LYN", "we", "us"), collects, uses, and shares information when you use the LYN – Light Years Network iOS app and the website at lightyearsnetwork.com (together, the "Service"). LYN is the controller of your personal information for the Service. If you have questions, contact us at support@lightyearsnetwork.com.

2. Information we collect

Information you give us

• Phone number. Used to send you a one-time sign-in code and to identify your account. We also store a one-way hash of your number so that friends who have your number in their contacts can find you.
• Profile. Your display name and, if you add one, a profile photo.
• Invite code. The code you used to join and, where it was minted by a member, who invited you.
• Content. Posts, comments, the bullish or bearish tag and ticker attached to each post, reactions, your watchlist, and any positions you log manually (ticker, side, entry price, and date). We never connect to a brokerage or bank and never see your actual holdings.
• Social graph. Friend requests, friendships, blocks, and reports you make.
• Settings. Your visibility choices (friends only, friends of friends, whether friends of friends can see your watchlist and portfolio) and notification preferences.
• Support messages. Anything you send us by email.

Contacts (optional)

If you choose to find friends from your contacts, the app reads phone numbers from your address book on your device, converts each number into a one-way SHA-256 hash, and sends only those hashes to our servers to compare against the hashes of existing members. We do not upload contact names, emails, or photos. Hashes of numbers that do not match a member are not stored; they are discarded as soon as the comparison is complete. You can decline the contacts permission and still use every other feature, and you can revoke it at any time in iOS Settings › Privacy › Contacts.

Information collected automatically

• Device and app data. Device model, iOS version, app version, language, and a push-notification token, so we can deliver notifications and fix crashes.
• Crash reports. If the app crashes, Firebase Crashlytics sends us a report with the device model, iOS version, app version, and a stack trace, plus a Crashlytics installation identifier. Crash reports do not include your posts or contacts.
• Log data. IP address, timestamps, and request details recorded by our cloud provider when the app talks to our servers. Used for security, abuse prevention, and debugging.
• Usage within the Service. Which posts you view or react to, so the app can show you what's new. The app ships with Google Analytics for Firebase, but analytics collection is turned off in our configuration. We do not use advertising SDKs or trackers.
• Derived figures. We compute display-only figures from your content and third-party market data, such as the change in an asset's price since you posted about it, and aggregate counts such as which tickers are trending among members. Aggregates do not identify you beyond what your visibility settings already allow.

What we do not collect

We do not collect precise location, email addresses, financial account credentials, brokerage data, government identifiers, or advertising identifiers. We do not track you across other apps or websites.

3. How we use information

• To create and secure your account and sign you in.
• To show your content to the people you have chosen, based on your visibility settings.
• To suggest friends you may know and to show who invited whom.
• To send notifications you have enabled (friend requests, replies, activity from friends, market moves on your watchlist).
• To moderate the Service: act on reports, hide reported content, enforce blocks, and enforce our Terms.
• To keep the Service secure and prevent fraud, spam, and abuse.
• To detect, investigate, and preserve records of suspected market manipulation, insider trading, or other unlawful activity on the Service, and to respond to inquiries about it.
• To provide support and respond to your requests.
• To manage subscription entitlements if you purchase LYN Premium.
• To comply with legal obligations.

We do not use your information for targeted advertising and do not sell it.

4. How we share information

• With other members, per your settings. Your display name, photo, posts, comments, reactions, and friend list are visible to your friends. If you allow it, friends of your friends can see your posts and comments and, only if you turn on the separate switch, your watchlist and positions. Members you have invited can see that you invited them.
• With service providers who process data on our behalf under contract (Section 5).
• For legal reasons. If required by law, subpoena, court order, or other legal process; in response to a lawful request or inquiry from law enforcement or a financial regulator such as the U.S. Securities and Exchange Commission, FINRA, or the Commodity Futures Trading Commission; to report suspected market manipulation, insider trading, fraud, or other unlawful conduct; or to protect the rights, safety, or property of LYN, our users, or the public.
• In a business transfer. If LYN is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months.

5. Service providers

6. Push notifications

Notifications are optional. iOS asks for your permission before we can send any. Inside the app you can choose which kinds you receive (friend requests, replies, friend activity, and market moves), and you can turn them off entirely in iOS Settings › Notifications › LYN.

7. How long we keep information

• Account, profile, content, and settings: for as long as your account exists. Deleting your account (Me › Delete Account) removes them from the live Service immediately.
• Backups: deleted data may persist in encrypted backups for up to 30 days before being overwritten.
• Contact hashes: not stored beyond the matching request.
• Server logs: up to 90 days.
• Reports and moderation records: up to 12 months after resolution, so we can act on repeat abuse.
• Legal holds: longer where the law requires, where needed to resolve a dispute, or where we have preserved records in connection with suspected market manipulation or other unlawful conduct, an investigation, or a regulator or law-enforcement inquiry. This can include content you have deleted or content from a deleted account.

8. Your choices and rights

• Visibility. Change who can see your activity, watchlist, and portfolio at any time in Me › Your Activity.
• Block and report. Available on every post and profile.
• Contacts and notifications. Managed in iOS Settings.
• Access, correction, and deletion. You can view and edit your profile in the app and delete your account in Me › Delete Account. You can also email us to request a copy of your data, a correction, or deletion.
• How to make a request. Email support@lightyearsnetwork.com from an address you control and tell us the phone number on the account. We will verify the request by sending a code to that number. An authorized agent may submit a request on your behalf with written permission from you. We respond within 45 days, and will explain if we need more time. We will not discriminate against you for exercising your rights. If we decline a request, you may appeal by replying to our decision, and we will respond to the appeal within 45 days.

9. Notice for California residents

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you additional rights. In the last 12 months we have collected the following categories of personal information:

We do not collect precise geolocation, biometric, health, or financial-account information, and we do not draw inferences to build a profile about you. We use sensitive personal information only to provide the Service, so no "limit the use of sensitive personal information" right applies. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing information of consumers under 16.

You have the right to know what personal information we collect and how we use and share it, to access it, to correct it, to delete it, and not to be discriminated against for exercising these rights. Submit requests as described in Section 8.

Global Privacy Control. Because we do not sell or share personal information, there is nothing to opt out of. Where a browser or device sends a Global Privacy Control signal, we treat it as an opt-out request.

"Shine the Light" (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct-marketing purposes.

Do Not Track. Our website does not use tracking cookies and does not respond to browser "Do Not Track" signals, because there is no tracking to disable.

10. Residents of other U.S. states

If you live in Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you may have rights to access, correct, delete, and obtain a copy of your personal information, to opt out of targeted advertising, sales, and certain profiling, and to appeal a denied request. We do not engage in targeted advertising, sales, or profiling with legal effects. We process sensitive data (the contents of your posts and your phone number) only with your consent, which you give by choosing to post and by signing in. Submit requests and appeals as described in Section 8.

11. Children

The Service is for adults 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 13, or from anyone under 18. If you believe a minor has created an account, email support@lightyearsnetwork.com and we will delete the account and its data.

12. Users outside the United States

The Service is operated from the United States, and your information is stored and processed in the United States by Google Cloud. If you use the Service from the European Economic Area, the United Kingdom, Switzerland, or another region with data-protection laws, note the following:

• Legal bases. We process your information to perform our contract with you (providing the Service), for our legitimate interests (security, abuse prevention, improving the Service), with your consent (contacts access, push notifications), and to comply with legal obligations.
• Your rights. You may request access, rectification, erasure, restriction, portability, and may object to processing or withdraw consent at any time without affecting prior processing. You may also lodge a complaint with your local supervisory authority.
• Transfers. Transfers to the United States rely on Google's participation in the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, and on the European Commission's Standard Contractual Clauses in Google's data processing terms.

13. Security

Your information is encrypted in transit (TLS) and at rest by Google Cloud. Access to production data is restricted to the people who need it to run the Service. Sign-in uses one-time codes rather than passwords. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

14. Changes to this policy

We may update this policy as the Service evolves. We will post the new version here with a new effective date and, for material changes, notify you in the app before they take effect.

15. Contact us

Light Years Network, LLC
131 Continental Dr, Suite 305
Newark, DE 19713, United States (registered office)
Email: support@lightyearsnetwork.com
Web: lightyearsnetwork.com