Privacy Policy
Last updated: 10 September 2026
1. Who we are
Lavo ("we", "us") is operated by [Company name], [address], [country]. Contact: [privacy@lavo.app]. We are the data controller for the personal data described here.
2. What we collect
- Account data you give us: display name, room label, and optionally an email address, password hash or passkey credential.
- House data: house name, machines, opening hours, bookings, waiting-list entries. Bookings are visible to all members of your house.
- Technical data: IP address, browser type and language, cookies needed to keep you signed in and to remember your language.
- Push subscription: if you enable notifications, the browser endpoint and keys required to deliver them.
3. Why we use it
To provide the service (showing the schedule, sending reminders and waiting-list updates), to keep your account secure, to comply with law, and, if enabled, to show a limited amount of advertising. Legal bases under GDPR: performance of a contract (Art. 6(1)(b)), legitimate interest in running and securing the service (Art. 6(1)(f)), and consent for push notifications and non-essential cookies (Art. 6(1)(a)).
4. Anonymous use
You can use Lavo without creating an account. In that case we store a random identifier in a cookie on your device and no email address. Clearing the cookie ends that session.
5. Sharing
We do not sell personal data. We share it only with processors that help us run the service (hosting, email delivery, push delivery) under data-processing agreements, and with authorities when legally required. Advertising partners, where enabled, may set their own cookies; you will be asked for consent first.
6. Retention
Bookings are deleted 14 days after they end. Accounts and houses are kept until you delete them or after [24] months of inactivity. Server logs are kept for [30] days.
7. Your rights
You can access, correct, export or delete your data, object to processing, and withdraw consent at any time. Leave a house or delete your account from the "Me" screen, or email us. You can complain to your local data-protection authority.
8. Security
Data is encrypted in transit (TLS). Passwords are hashed. Admin actions require a house PIN. No system is perfectly secure; tell us at [security@lavo.app] if you find a problem.
9. International transfers
Data is stored in [the EU]. If a processor is outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses.
10. Children
Lavo is not directed at children under 16. We do not knowingly collect their data.
11. Changes
We may update this policy. Material changes will be announced in the app. Continued use after the effective date means you accept the new version.