Privacy Policy

1) Who we are (Responsible party / Controller)

Company: LANU DIGITAL LTD
Company number: 16573482
Registered office: 124 City Road, London, England, EC1V 2NX
Contact email: admin@lanu.app

We have also registered and paid the UK ICO data protection fee for LANU DIGITAL LTD.

2) What information we collect

We may collect the following categories of information:

• Account information: name, email address, password (stored in encrypted/hashed form), login timestamps.
• Subscription and billing: plan type, subscription status, purchase history. Payment card details are processed by our payment provider (e.g. Stripe) and are not stored on our servers.
• Profile and preferences: preferences you set in the app (e.g., your home location, interests, favourites, saved lists). You may optionally add family member details (such as children's names, ages, interests, and dietary or accessibility needs) to receive more relevant recommendations. This information is entirely optional.
• Location information: approximate or precise location if you choose to enable location features (e.g. for distance/travel-time). You can disable location permissions in your device/browser settings.
• User-generated content: reviews, venue submissions, comments, messages or uploads you choose to provide.
• Technical and usage data: device type, browser type, IP address, pages viewed, clicks/events, and diagnostic logs (for security and performance).
• Support communications: messages you send to our support channels.

3) How we use your information (purposes)

• Provide and operate the Service (accounts, listings, search, favourites, submissions).
• Process subscriptions, manage entitlements, and prevent fraud.
• Personalise recommendations and improve content relevance.
• Enable location-based functionality (only if you opt in).
• Respond to support requests and communicate service-related messages.
• Maintain security, prevent abuse, and diagnose technical problems.
• Measure usage and improve product performance (analytics).

4) Legal bases for processing (UK GDPR)

Where UK GDPR applies, we process personal data under one or more of these legal bases:

• Contract: to provide the Service you request (account, subscriptions, core features).
• Legitimate interests: to secure and improve our Service, prevent fraud, and understand usage (balanced against your rights).
• Consent: where required, e.g. certain marketing communications or optional features (like precise location).
• Legal obligation: where we must comply with applicable laws (e.g. accounting/tax, lawful requests).

5) POPIA (South Africa)

Where POPIA applies, we process personal information for lawful purposes connected to the Service, and we take reasonable steps to ensure your information is processed lawfully and securely. You may have rights to access, correct, object to, or request deletion of your personal information (see “Your rights” below).

6) Sharing your information

We may share personal information with:

• Payment provider: we use a third-party payment provider (e.g. Stripe) to process payments and manage subscriptions. We receive limited billing metadata (not full card details).
• Analytics provider (PostHog): we use PostHog to understand how the Service is used (e.g., page views and interaction events) so we can improve the product.
• Service providers ("operators" / processors): hosting, database, email delivery, error monitoring (e.g. Sentry), and media storage (e.g. Cloudinary) providers who process data on our instructions.
• Maps/location providers: if you use location features, we may send limited location data to mapping APIs to calculate distance/travel times.
• Legal and safety: where required to comply with law, enforce our Terms, or protect users and the Service.

We do not sell your personal information.

7) International transfers

Our providers (including analytics providers) may process data in the UK, South Africa, the EEA, the United States, or other countries. Where required by applicable law, we take steps to ensure appropriate safeguards are in place for cross-border transfers.

8) Data retention

We retain personal information only for as long as needed for the purposes described above, including:

• Account data: retained while your account is active, and for a reasonable period after deletion to handle disputes and legal obligations.
• Billing records: retained as required for accounting/tax and audit purposes.
• Security logs: retained for a limited period to protect the Service and investigate abuse.
• Analytics data: retained according to our analytics configuration and provider settings.

9) Your rights

UK GDPR (where applicable): you may have rights to access, correct, delete, restrict processing, object, and data portability.

POPIA (where applicable): you may have rights to be notified about collection, access your information, request correction/deletion, and object to processing in certain circumstances.

To exercise your rights, contact us at admin@lanu.app. We may need to verify your identity before responding.

10) Complaints

If you’re in the UK, you may be able to complain to the UK Information Commissioner’s Office (ICO). If you’re in South Africa, you may be able to complain to the Information Regulator.

11) Children's information

Our Service is intended for adults. You must be 18+ to create an account.

To personalise recommendations for family outings, you may optionally add details about your children (such as name, age, interests, dietary requirements, or accessibility needs). This information is used solely to tailor suggestions and is never shared with third parties for marketing. You can update or remove this information at any time from your profile settings.

12) Security

We use reasonable technical and organisational measures designed to protect personal information. However, no method of transmission or storage is 100% secure.

13) Cookies and analytics (PostHog)

We use cookies and similar technologies for core functionality (for example, session management) and to understand how people use the Service. At launch we use PostHog for analytics, which may set cookies or similar identifiers to measure usage (for example, pages viewed and interactions). You can usually control cookies through your browser settings. If we implement non-essential cookies that require consent in your jurisdiction, we will provide a consent mechanism.

14) Changes to this policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date and, where appropriate, notify you of material changes.

15) Contact

Questions or requests? Email us at admin@lanu.app.