Privacy Architecture & Telemetry Rules

This document outlines the zero-friction data architecture governing the LuKul Atelier ecosystem. By accessing our public terminals, submitting applications, or initializing a client protocol, you are bound by these rules. We process the absolute minimum amount of telemetry required to optimize system performance and authenticate authorized personnel.

1. Dual-Core Infrastructure (Server Locations)

Our ecosystem utilizes a proprietary "Dual-Core" architecture, splitting public telemetry from deep-storage biometric data to ensure maximum security.

• Core A (Public Edge): Powered by Google Cloud Platform (Firebase) and Cloudflare. This layer handles static routing, asset delivery, and initial form submissions. Data is temporarily processed before injection into the master vault.
• Core B (Isolated Vault): Powered by Supabase (AWS backend). This is the encrypted database housing isolated client protocols, biometric telemetry, and authentication keys. Only authorized coaches and specific clients possess the symmetric keys required to access these subnets.

2. Stealth Analytics (Cookieless)

We do not deploy invasive third-party trackers. We have permanently deprecated Google Analytics in favor of Umami Analytics. Our telemetry system is fully anonymized and tracks only bare-metal metrics (page resolution, device type, bounce rate) entirely without the use of cookies.

Because zero cookies are injected onto your hardware, we do not require—nor utilize—legacy cookie consent modals.

3. Form Submissions (Semantic Implied Consent)

When you submit a contact form or request Beta Access, you provide Personally Identifiable Information (PII), specifically your Name and Email Address. By initializing these actions, you explicitly grant consent for us to store this data securely on our servers solely for the purpose of direct communication and B2B correspondence.

4. Zero-Friction Application (Client Protocol Data)

If you are an initiated client utilizing the LuKul Application (`/app`), your macrocycle data, e1RM logs, and biological analytics are encrypted at rest. We do not sell, rent, or distribute this data to any third party under any circumstances. You retain total ownership of your biometric footprint.

5. Autonomous Rights Execution

Under the GDPR (Article 17 and Article 20), you maintain full control over your data ledger.

• Right to Portability: Authenticated users may export their complete dataset via the `UNIVERSAL CSV EXPORT` system built directly into their terminal dashboard.
• Right to Erasure: To initiate a total purge of your footprint from our architecture, you may issue a formal `PURGE DOSSIER` request via your coach, or contact administration terminal at bespoke@lukulatelier.com.