Privacy Policy
Last updated: July 14, 2026 | https://lengandai.my.id
1. Data We Collect
- Account Data: username, email, full name, avatar, bio, location.
- Pi Network Data: pi_uid (unique Pi ID), pi_username, verification status obtained only after you approve Pi.authenticate() or OAuth.
- Pi Transaction Data: payment_id, amount, memo, txid, approve/complete status for Mainnet App Wallet.
- Technical Data: IP address, user agent, error logs for security and anti-spam.
- Content: posts, comments, messages, stories you create.
2. How We Use Data
- Provide secure login via email and Pi Network.
- Process User-to-App Pi payments (server-side approve & complete).
- Display profiles, friends, followers, and feed.
- Prevent fraud, duplicate accounts, and Pi payment manipulation.
- Send notifications about community interactions.
3. Pi Network Integration
3.1 Verification
Pi access token you provide is sent to https://api.minepi.com/v2/me with Authorization: Bearer <token> header to verify UID and username authenticity. We do not trust frontend data without server verification.
3.2 Payments
Payments use Pi SDK createPayment. Our server only calls official endpoints /v2/payments/{paymentId}/approve and /complete using a secret API Key stored server-side, never in the browser.
4. Storage & Security
Passwords are stored as hashes (password_hash). Pi tokens are not stored permanently, only login session. Pi API Key is server-side only and never exposed to frontend. We use HTTPS and CORS restricted to https://lengandai.my.id.
5. Data Sharing
We do not sell your data. Data is shared only with:
- Pi Network (for login verification & payments).
- Infrastructure providers (hosting, database) for operations.
- Law enforcement if required by Indonesian law.
6. Cookies & Local Storage
We use localStorage and sessionStorage to store login session (fb_session), theme preferences, and light cache. No third-party ad trackers.
7. Your Rights
- View, edit, and delete your profile.
- Request account and related data deletion (except transaction logs required for blockchain audit).
- Revoke Pi permission in Pi Browser → Settings → Apps.
8. Data Retention
Account data retained while account is active. Pi payment logs retained minimum 5 years for audit. Deleted user content removed within 30 days from backups.
9. Children
Service is not intended for children under 13. If found, account will be removed.
10. Changes
Changes will be announced in-app. Continued use after changes means acceptance of updated version.
11. Contact
Email: support@lengandai.my.id
Website: https://lengandai.my.id
Address: Badung, Bali, Indonesia
© 2026 LN COMMUNITY