Privacy Policy

Last updated: May 2, 2026

1. Introduction

lolooit ("we", "our", or "us") operates applications and services including GreenPay (grpay.ca). We are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

We may collect the following types of information:

  • Account information (name, email address) when you register
  • Authentication data managed through AWS Cognito
  • Transaction and usage data related to the services you use
  • Device information (device type, operating system, unique identifiers)
  • Log data (IP address, access times, app interactions)

3. Biometric Data

Our GreenPay application uses Amazon Rekognition for face-based verification. We do not store any photos or facial images on our servers. Biometric processing is handled entirely by AWS Rekognition in real-time, and no images are retained after the verification process is complete.

4. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our services
  • Authenticate users and manage accounts securely
  • Process transactions and manage loyalty programs
  • Send important notifications about service changes
  • Analyze usage patterns to enhance user experience
  • Comply with legal obligations

5. Data Storage and Security

All data is stored securely on Amazon Web Services (AWS) infrastructure located in Canada and the United States. We use encryption at rest and in transit, and implement industry-standard security measures including AWS IAM, VPC isolation, and encrypted databases (Amazon Aurora, DynamoDB) to protect your information.

6. Third-Party Services

Our applications use the following AWS services to operate:

  • AWS Cognito for authentication and user management
  • Amazon Rekognition for biometric verification (no image storage)
  • AWS Lambda and API Gateway for serverless processing
  • Amazon Aurora and DynamoDB for secure data storage

These services operate under the AWS Privacy Policy.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only when required by law, to protect our rights and safety, or with your explicit consent.

8. Data Retention

We retain your personal data only for as long as necessary to provide our services and fulfill the purposes described in this policy. You may request deletion of your account and associated data at any time.

9. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time
  • Request a copy of your data in a portable format

10. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: