Naloku Website Privacy Policy

1. Plain-language summary

Naloku LLC's website is a static, informational website. We do not run analytics, we do not set cookies, we do not host advertising, and we do not include third-party trackers. The only data we receive about you in connection with the website is what your browser tells our hosting provider when you load a page (your IP address and the request you sent), and anything you choose to send us by email. The detail follows.

2. Information our hosting provider sees automatically

The website is hosted on Cloudflare Pages. As with any internet-facing service, when your browser loads a page from naloku.com, Cloudflare's servers receive:

• (a) the IP address of your device or your network's gateway, as visible to any internet-facing service;
• (b) the page or asset you requested (the URL path);
• (c) standard request headers such as user-agent (browser identifier), language preference, and referrer (the page you came from, if any);
• (d) the time of the request.

This information is processed by Cloudflare under Cloudflare's own privacy and security practices, including operational logging used to defend against abuse and to operate the network. Cloudflare's privacy policy is available at https://www.cloudflare.com/privacypolicy/. Naloku LLC does not retain a separate copy of this access data and does not maintain its own analytics over it.

3. Cookies, local storage, and similar technologies

The website does not set cookies and does not run client-side scripts that fingerprint your browser or device. The website uses your browser's local storage for one purpose only: to remember the accessibility preferences you select using the "Accessibility" panel in the footer (your selected font and text-size choice). This data is stored on your device, never transmitted to Naloku LLC or to any third party, and you can clear it at any time by pressing "Reset" in the Accessibility panel or by clearing site data in your browser settings. If a future version of the website introduces additional uses of cookies, local storage, or similar technologies, this Policy will be updated and the change will be communicated as described in Section 9.

4. Email contact

If you choose to email Naloku LLC at any address published on the website (such as contact@naloku.com for general inquiries or privacy@naloku.com for privacy-related requests), Naloku LLC will receive your email address, the message text, and any attachments you include. We process this information solely to respond to your message. We do not add your email address to a marketing list, and we do not share it with third parties except where required by valid legal process.

5. Information we do not collect through the website

The website does not collect, receive, or store the following:

• (a) names, postal addresses, telephone numbers, or other personally identifying information from website visitors who do not contact us directly;
• (b) account credentials or registered-user accounts (no account is required, and none can be created through this website);
• (c) payment-card numbers, bank-account numbers, or any other financial-account information;
• (d) location data beyond the coarse geographic information that is intrinsic to the IP address visible to our hosting provider;
• (e) device-stable advertising identifiers or any data passed to advertising networks;
• (f) any information stored or generated by the Kōkua mobile application — the website and the App are separate, and the App does not communicate with the website.

6. Children

The website is not directed to children under the age of thirteen (13), or the equivalent minimum age in the user's jurisdiction. Naloku LLC does not knowingly process information from children under that age through the website.

7. Legal bases for processing (Users in the European Economic Area, United Kingdom, and Comparable Jurisdictions)

Where Naloku LLC processes any personal data within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") or the United Kingdom General Data Protection Regulation in connection with the website, the legal bases are:

• (a) Legitimate interests (Art. 6(1)(f) GDPR): operating and securing the website, including responding to direct communications and defending against abuse;
• (b) Legal obligation (Art. 6(1)(c) GDPR): compliance with valid legal process.

Naloku LLC does not process special-category data within the meaning of Art. 9 GDPR through the website. Naloku LLC does not engage in automated decision-making producing legal or similarly significant effects through the website.

8. Your rights

Users in the European Economic Area, the United Kingdom, California, and other jurisdictions with comparable laws have rights of access, rectification, erasure, restriction, portability, and objection with respect to their personal data. Because Naloku LLC processes very little data through the website, in most cases the only data we hold about a user is the email correspondence the user has voluntarily sent us. To exercise any right, contact us at privacy@naloku.com.

Users in the European Economic Area and the United Kingdom have the right to lodge a complaint with their national supervisory authority. Users in California have the right to be free from discrimination for exercising their rights under the California Consumer Privacy Act.

9. Changes to this Policy

Naloku LLC may modify this Policy from time to time. Material changes will be reflected by an updated "Last Updated" date and, where the change affects user rights, by publication of a notice on the website for not fewer than thirty (30) days before the change takes effect, except where a shorter period is required by law.

10. Contact

Naloku LLC may be contacted regarding this Policy at:

• Email: privacy@naloku.com
• Postal address: Naloku LLC, 2801 Denton Tap Rd Apt 1523, Lewisville, TX 75067, United States

Naloku LLC has not designated a Data Protection Officer under GDPR Art. 37 because the criteria requiring designation are not met. Naloku LLC has not designated an EU/UK Article 27 representative because the website's processing is not within the threshold requiring such designation.