Data Register

Data Processing Register

In the spirit of transparency and in accordance with Law Nº 058/2021, this register outlines our personal data processing activities. It details the types of data we collect, why we process it, the legal basis for doing so, and who might receive it.

Data Subjects	Personal Data	Purpose of Processing	Lawful Basis	Recipients
Users (Creators, Music Lovers, Advertisers)	Account & Identity: Name, username, email, password (hashed), profile picture, bio, website, date of birth, user ID.	Service Provision, Account Management, Authentication, Age Verification, User-to-User Interaction.	✅ Contractual Necessity ✅ Legal Obligation	Other Users (public profile), Cloud Provider (Firebase).
Users	User-Generated Content: Audio/video files (beats, songs, teels), images (posts, stories), comments, messages, and associated metadata.	Content Publishing, Community Interaction, Service Functionality.	✅ Consent ✅ Legitimate Interest	Other Users (public content), Cloud Provider (Firebase).
Users	Financial & Transactional Data: Payout details (bank/momo), earnings data, ad campaign budgets, transaction records, proof of payment.	Creator Payouts, Financial Compliance, Fraud Prevention & Automated Risk Assessment, Advertising Services.	✅ Contractual Necessity ✅ Legal Obligation ✅ Legitimate Interest	Payment Processors, Financial Institutions, Cloud Provider (Firebase).
Users	Usage & Engagement Data: Likes, shares, streams, views, follows, content reports, watch history.	Analytics, Service Improvement, Content Recommendation, Ad Targeting.	✅ Legitimate Interest ✅ Consent	Analytics Providers, Advertising Partners.
Users	Technical Information: IP address, device information, cookies, mobile advertising IDs.	Security, Fraud Prevention, Analytics, Service Functionality, Audit Logging.	✅ Legitimate Interest ✅ Legal Obligation	Cloud Provider (Firebase), Analytics Providers.
Users	Communications: Support requests, feedback, direct messages.	Customer Support, Platform Moderation, User-to-User Communication.	✅ Contractual Necessity ✅ Legitimate Interest	Cloud Provider (Firebase).

Data Transfer Outside Rwanda

To provide a reliable, secure, and globally accessible service, LopRok utilizes Google's Firebase platform. This means your data is processed and stored on a global cloud infrastructure, primarily in data centers located in the United States. This is necessary for the performance, security, and scalability of the application. We ensure that all data transfers are conducted with appropriate safeguards that meet international data protection standards.

Data Protection Measures

We implement multi-layered security to protect your data, including encryption, strict access controls via Firestore Security Rules, and reliance on Google Cloud's certified, secure infrastructure.

Data Processing Register

Data Subjects	Personal Data	Purpose of Processing	Lawful Basis	Recipients
Users (Creators, Music Lovers, Advertisers)	Account & Identity: Name, username, email, password (hashed), profile picture, bio, website, date of birth, user ID.	Service Provision, Account Management, Authentication, Age Verification, User-to-User Interaction.	✅ Contractual Necessity ✅ Legal Obligation	Other Users (public profile), Cloud Provider (Firebase).
Users	User-Generated Content: Audio/video files (beats, songs, teels), images (posts, stories), comments, messages, and associated metadata.	Content Publishing, Community Interaction, Service Functionality.	✅ Consent ✅ Legitimate Interest	Other Users (public content), Cloud Provider (Firebase).
Users	Financial & Transactional Data: Payout details (bank/momo), earnings data, ad campaign budgets, transaction records, proof of payment.	Creator Payouts, Financial Compliance, Fraud Prevention & Automated Risk Assessment, Advertising Services.	✅ Contractual Necessity ✅ Legal Obligation ✅ Legitimate Interest	Payment Processors, Financial Institutions, Cloud Provider (Firebase).
Users	Usage & Engagement Data: Likes, shares, streams, views, follows, content reports, watch history.	Analytics, Service Improvement, Content Recommendation, Ad Targeting.	✅ Legitimate Interest ✅ Consent	Analytics Providers, Advertising Partners.
Users	Technical Information: IP address, device information, cookies, mobile advertising IDs.	Security, Fraud Prevention, Analytics, Service Functionality, Audit Logging.	✅ Legitimate Interest ✅ Legal Obligation	Cloud Provider (Firebase), Analytics Providers.
Users	Communications: Support requests, feedback, direct messages.	Customer Support, Platform Moderation, User-to-User Communication.	✅ Contractual Necessity ✅ Legitimate Interest	Cloud Provider (Firebase).

Data Transfer Outside Rwanda

Data Protection Measures

We implement multi-layered security to protect your data, including encryption, strict access controls via Firestore Security Rules, and reliance on Google Cloud's certified, secure infrastructure.