Privacy Policy

Last updated: 2026-01-11

This Privacy Policy explains how the Lazzo app ("we", "our", "the app") collects, uses, and shares information when you use the app and related services.

1) What the app does

Lazzo helps you create and share invites and memories (e.g., events with friends), including features such as:

• creating/managing events
• invite links and QR codes
• sharing photos/videos (optional)
• event location (optional)

2) Information we collect

A) Account data (required to create an account)

• Name
• Email address

B) Profile information (optional)

• Profile photo/avatar
• Birthday
• City/location (text only, not precise coordinates)

C) Content you provide

• Photos and/or videos you upload to events
• Text you enter (e.g., event titles, notes, chat messages)

D) Location (optional, only when using the app)

• If you allow it, we may use your location only while you are using the app to help you select your current location when creating an event
• We do not track your location in the background

E) Technical and usage data

• Basic information required for the app to function (e.g., internal identifiers, device information)
• Error logs and performance diagnostics to improve the app

3) How we collect information

We collect information when you:

• create an account or sign in
• edit your profile (add profile photo, birthday, city)
• create or participate in events, invites, and memories
• upload photos/videos or send messages
• grant permissions to access camera, photos, location, or calendar

4) How we use information

We use information to:

• provide and operate the app (accounts, events, invites, memories)
• sync your content across devices
• improve and secure the service (security, abuse prevention, bug fixing)
• customer support (respond to requests)

5) Device permissions

The app may request the following permissions on iOS:

• Camera: to take photos/videos during events
• Photos/Media Library: to select and upload photos/videos from your device; to save event memories to your gallery
• Location (When In Use): to help you select your current location when creating an event. We only access location while you are actively using the app, not in the background
• Calendar: to add events to your device calendar
• Notifications: to receive alerts about events, messages, and activities (optional)

You can change or revoke these permissions anytime in your device Settings.

6) Who we share information with

We share information only as needed to operate the app, with service providers ("processors"), such as:

• Supabase (authentication, database, and file storage) — stores your account data, profile information, event data, photos, and messages on secure cloud servers
• Vercel (hosting for web pages) — hosts web pages for event invites and policies

We currently do not use third-party analytics, advertising, or crash reporting services.

We do not sell your personal data to third parties.

7) Where information is processed

Your data may be processed and stored on servers outside Portugal/the EU (depending on service provider infrastructure). We use service providers that comply with industry-standard security practices and, where applicable, appropriate safeguards for international data transfers (e.g., standard contractual clauses).

8) Data retention

• We keep your data for as long as your account is active.
• If you delete your account, we permanently delete your personal data (account information, profile, photos) within 30 days, unless we must keep it for legal or security reasons (e.g., abuse prevention).
• Some data may be retained in backups for a limited period but will not be accessible or used.

9) Security

We take security seriously and use technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS)
• Secure authentication (email OTP, passwordless login)
• Access controls and secure storage practices
• Row-level security policies in our database to ensure users can only access their own data and the data of groups they belong to

No system is 100% secure, but we continuously work to reduce risks and protect your information.

10) Your rights

Depending on your region (including the EU/Portugal), you may have rights such as:

• access, correction, deletion
• restriction or objection
• data portability

To exercise your rights, contact: realeventapp@gmail.com.

11) Deleting your account and data

You can delete your account and data:

• in the app Settings using Delete Account; or
• by emailing realeventapp@gmail.com.

After your request, we permanently delete your personal data within 30 days, unless we must keep it for legal or security reasons.

12) Children

Lazzo is not intended for children under 13 years of age (or the minimum age required by local law in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us at realeventapp@gmail.com so we can delete it.

13) Changes to this policy

We may update this policy. If changes are material, we will notify you in the app or on our website.

14) Contact

For any questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:

Email: realeventapp@gmail.com