Privacy Policy

Data we process

Account and profile: email address, name or username, optional age, confirmation of being at least 18 and the date of that confirmation, optional gender, photo, city, bio and interests. Activity: Linkiz, participation, invitations, favourites, groups, messages, photos and voice notes shared in messaging, ratings, reports, blocks, absence declarations and disputes. Venue search: the query, search area, selected venue and venue identifier. Missing-venue reports: the name, type, address or area, optional coordinates, website, phone number and comment provided. Local waiting list: the email address and city or neighbourhood you provide, with explicit consent. Venue applications: venue name, type and address, manager’s name and contact details, optional website and submitted description. Technical data: session, device, security logs and notification settings.

Phone and address book

When you verify by text, Supabase and Twilio process your phone number to send and check the code. It remains private. The “Phone verified” badge confirms access to that number, without verifying identity or age. Discovery by phone number is on by default and can be disabled under “Phone and contacts”.

Address-book synchronisation is optional and needs your permission on iPhone or Android. Only the numbers of accessible contacts are transmitted to find matches; their names, photos and other information are not sent. Fingerprints protected by a secret key are stored to recognise existing contacts and those who join later. A match can create a reciprocal friendship when both members allow discovery. Blocks and removed friendships prevent automatic re-adding. No invitation text is sent automatically.

Fingerprints expire after 90 days without a refresh and are cleaned up daily. You can stop synchronisation and clear its data in your settings; existing friendships are kept. Denying or revoking the phone permission stops access to the address book; server-side deletion takes place when the app next connects. Contact-joined notifications can be disabled separately.

Location

Your location is used to search for public venues, calculate distances and suggest proximity alerts. You can decline access and enter a city, neighbourhood or venue instead. A Linkiz’s public sharing page shows only an approximate area; signed-in members can see the exact venue before deciding whether to join. A member’s personal position is never published.

Purposes and legal bases

Our contract with you allows us to manage accounts, participation and messages. Confirmation that you are at least 18 is required to use member features and is used to apply the eligibility requirement. Leaving your age blank does not replace this confirmation. Consent covers location and notification permissions and optional preferences. If you join a neighbourhood waiting list, your consent is used only to tell you when Linkevia opens there; that information is not reused for marketing without fresh consent. Venue application information is used to assess the venue and respond to the contact request as a pre-contractual measure requested by its manager. Legitimate interests cover safety, abuse prevention, service improvement and moderation. Legal obligations may require us to retain certain records.

Performance measurement

A random sample of visits sends technical measures such as rendering speed, responsiveness and visual stability so that Linkevia can improve the service. The record contains a generic route with no search parameter or account identifier; Linkiz numbers are replaced with a generic label. An opaque, short-lived fingerprint is used only to limit abuse and is not written to the measurement log. The technical retention period for these logs must remain limited and will be formally approved before commercial launch.

Recipients and hosting

Members can access data only under the applicable visibility rules. Messaging media is kept in private storage and is opened only through short-lived access after permissions are checked again. Image location metadata is removed before the image is made available. To prevent abuse, photos published on a profile, a Linkiz or in messaging, as well as Linkiz text, may appear in a preventive review queue even when no report has been made. Only authorised safety and moderation staff can access that queue; opening private media uses a short-lived link and is logged. This review does not automatically expose the rest of a conversation. If content is reported or moderated, an isolated copy may be placed in a private evidence vault to preserve the necessary evidence.

Essential technical providers include OpenAI Sites and Cloudflare to distribute the website, Supabase for the database, authentication and private storage, Expo Push Notification Service, Apple Push Notification service and Firebase Cloud Messaging to deliver notifications, Google Maps Platform and Geoapify to find public establishments, and OpenFreeMap to display the native map. Depending on the feature used, these services may receive an IP address, technical device information, a notification token, a venue query and the required area or coordinates. Venue searches and location are sent only when the corresponding feature is used. Display of Google data is subject to the Google Maps Terms and Google Privacy Policy. We do not sell advertising profiles.

Retention and deletion

Account data and messaging attachments are kept while the account is active and they are needed for the conversation. Daily usage statistics linked to the account are retained for no more than 730 days. Interrupted uploads and files that are never attached to a message are cleaned up during a later messaging operation or when the account is deleted. A deletion request blocks the account and starts the process immediately. To prevent a media transfer that has already started from escaping deletion, the final storage and authentication pass waits for a technical window of at least 70 minutes and is then run by the automated process; it may be retried after a temporary failure. Linkiz organised by that member are cancelled, profile data, private messages and original messaging files are deleted, and historic group messages are anonymised to preserve conversations.

Preventive review alone does not create a permanent copy of media. If content is reported or moderated, its isolated evidence copy may remain after account deletion: it is deleted no later than 90 days after the case is opened, or sooner, no later than 30 days after the case is resolved or dismissed. A local waiting-list registration is kept for no more than three years and can be withdrawn at any time by emailing contact@linkevia.com. Venue applications that do not result in a contract are kept for no more than three years after submission or the latest contact from the prospective customer. Reports and only the information necessary to process them may be retained longer where safety or the law requires it.

Your rights

Under “Data and privacy”, you can download a JSON export of your structured data and attachment metadata, or delete your account. This automatic export does not contain the binary photo and voice-note files. Whether you are a member or a professional contact, you can request access, a complete copy, correction, deletion, restriction, objection or portability by emailing contact@linkevia.com. Full formal details of the data controller will also be published in the legal notice before commercial launch.