Privacy Policy
Last updated:
LAVI respects its users’ privacy and is committed to processing personal data clearly, securely and only to the extent necessary to provide and improve the platform’s services, in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations.
This policy explains the types of data LAVI may collect, the purposes for which it is used, how it is shared and retained, and the rights relating to it.
1. Data we collect
Depending on the features you use, LAVI processes:
- Your email address, mobile number, username and securely protected password credentials, together with verification and session information.
- Profile information you provide, including your name, avatar, biography, gender, date of birth and city.
- Saved items, follows, ratings, Community memberships and join requests, posts, comments, likes, selected post photos and messages you send.
- Temporary More sessions, participant names, choices and contributions; Meet Halfway coordinates and location accuracy only when you choose to share your location with that session.
- Event ticket types, orders, tickets, entry/check-in records, amounts, currency, payment and refund status, and payment-provider references and transaction metadata.
- Reports, blocking relationships and information you provide for support or safety investigations.
- Request and network information, including IP address, request time, requested path and query parameters, response status, referring page and browser/app user agent, together with session/security events and operational logs needed to operate and protect the service. Search terms sent in URL query parameters may therefore appear in access logs.
2. How we use data
We use this information to create and verify accounts, authenticate users, recover access, display profiles according to privacy settings, provide discovery and maps, operate Communities and messaging, save user choices, coordinate More sessions, issue and verify Event tickets, reconcile payments and refunds, investigate reports and prevent misuse.
Phone verification codes are sent through the configured SMS provider. The app does not read your SMS messages, contacts or microphone. Technical logs support service reliability and security; they are not a substitute for your privacy settings.
3. Location and selected photos
Location is optional and requested while you use a feature that needs it, such as nearby places, the map or Meet Halfway. LAVI Individuals does not track location in the background. You may deny or revoke permission and continue using features that do not need your location.
Map location is used to position the map and show nearby places. When you explicitly share location in Meet Halfway, the server stores that session's coordinates and accuracy to calculate meeting suggestions. Other participants receive suggestions and distance information, not a raw coordinate list. The location data is removed when the temporary session is deleted or expired sessions are cleaned up. Map tile providers receive network requests needed to display the map.
The photo picker lets you choose images to attach to a Community post. Only the images you select and submit are uploaded; LAVI does not upload your entire photo library. New post images are held for operator review before they become visible to other users; the post text can be published separately. The native Individuals app does not need camera, microphone, contacts, background-location or notification permission for its current features.
4. Public data and profile information
A user’s public profile may display information they choose to share, such as:
- Username
- Name
- Avatar
- Biography
- Statistics the user permits to be displayed
Email addresses, mobile numbers and dates of birth are not shown to visitors through the public profile.
LAVI provides settings to control the visibility of certain information, such as follows and saved items, according to the features available on the platform.
5. Communities, messages and safety
Posts, comments, selected images, Community information and your public identity are shown to people who are eligible to access them under the Community and profile rules. Messages are stored by LAVI and made available to the conversation participants; they are not advertised as end-to-end encrypted.
Reports identify the reported account or content and include the reason and any details you submit. LAVI uses these records to investigate and act on abuse. Blocking restricts social visibility and messaging between the accounts. Authorized operators may examine relevant information for support, security and moderation. Do not include unnecessary sensitive information in a post, message or report.
Place ratings are associated with your account and the place. Displayed averages and counts may be aggregated; updating a rating does not create a second current rating for the same account and place.
6. Sharing data with service providers
LAVI may engage technical service providers to process data to the extent necessary to provide the service, including:
- Hosting and operating systems
- Sending verification text messages
- Processing payments
- Technical and security services necessary for operation
Engaging a service provider does not give it the right to use data for independent purposes unrelated to the service, except as permitted by law and the relevant legal relationship.
7. Event tickets and payments
Tap processes payments for real-world Event tickets and other supported services. Payment details are entered through the payment provider's checkout. LAVI keeps the order, amount, currency, provider references, payment/refund status, ticket and accounting information needed to fulfil and verify the transaction. Payment processing is also subject to Tap's applicable terms and privacy policy.
Event entry records confirm use of a ticket. They are distinct from location-based Place check-ins, which are not a current LAVI feature. Financial and audit records may need to remain after account deletion; deleting an account does not itself cancel a ticket or initiate a refund.
8. Disclosure of data
LAVI discloses personal data only to the extent necessary and for a lawful purpose, such as:
- Providing a service requested by the user
- Working with authorized service providers
- Fulfilling a legal obligation or a request from a competent authority
- Protecting rights, systems or users where there is a lawful basis to do so
Disclosure must be limited to the minimum necessary to achieve its purpose.
9. Data retention and destruction
LAVI retains data for as long as necessary to achieve the purposes for which it was collected, or for periods required by law or contract where applicable.
When there is no longer a legal or operational need for the data, LAVI takes appropriate steps to destroy or anonymize it, taking account of the nature of the data and legal requirements.
10. Data transfers
If operating a service requires data to be processed or transferred outside the Kingdom, this must comply with applicable legal requirements and controls governing the transfer of personal data outside the Kingdom.
11. Data protection
LAVI applies appropriate technical and organizational measures to protect data against unauthorized access, use, alteration or disclosure, taking account of the nature of the data and processing risks.
Absolute protection cannot be guaranteed for any electronic service. Users must keep their login details confidential and must not share them with others.
12. User rights
Under applicable laws, and subject to the relevant circumstances and legal requirements, data subjects have the right to:
- Be informed about how and why their data is processed.
- Request access to their personal data.
- Request a copy in a clear, readable format where applicable.
- Request correction, completion or updating of inaccurate data.
- Request destruction of data when there is no longer a legitimate need to retain it, subject to legal exceptions.
- Withdraw consent where processing is based on consent, unless another lawful basis permits continued processing.
13. Exercising rights and contacting support
Manage available profile and privacy settings in your account. For privacy, account or service support, contact support@lavi.best. Include only information needed to explain your request; never send passwords, verification codes or full payment-card details.
14. Account deletion
In the native Individuals app, open Account, then Privacy and security, then Delete account. Review the consequences, enter your current password and explicitly confirm. Deletion does not require an SMS code.
Deletion immediately removes your Individuals capability, public profile and username, profile details, authored posts, comments, ratings, messages and personal social images, saved items, follows, memberships and personal temporary-session contributions, and revokes all existing sessions. Temporary sessions you own are removed. Personal media becomes inaccessible; stored files are erased through cleanup, including retries if needed.
Communities you own are archived and their identifying details and creator link are cleared. Your own content is removed. Other members' content remains in the inaccessible archive; ownership is not automatically transferred to another member. Other conversation participants' own messages are not erased as if they were yours.
For an account without unresolved Business obligations, identifying account details are cleared and required financial, ticket, transaction and audit records remain associated with a scrubbed internal account reference. Deletion does not cancel purchases, void tickets or create a refund, and you lose Individuals access to your tickets.
If you own a Business with unresolved commercial obligations or ownership responsibilities, your Individuals data is still removed immediately. The Business enters restricted closure. LAVI retains only the identity and Business access necessary to resolve existing rentals, paid-ticket fulfilment and check-in, settlements, financial records and ownership responsibilities. Normal Business activity, new offers, new Events and new sales are unavailable. Deletion does not automatically cancel or refund existing transactions or invalidate another customer's paid ticket or valid rental entitlement. Remaining account identity is anonymized after the obligations and ownership responsibilities are resolved.
Entity-owned Business or catalog records are distinct from personal social content. Retained records are handled according to the retention principles in this policy; no fixed legal retention period is asserted here. Contact support@lavi.best for help with deletion or restricted Business closure.
15. External links and services
LAVI may contain links or services from other websites or parties.
These services are subject to their providers’ policies and terms. A link to them does not mean that LAVI’s privacy policy automatically extends to their independent systems.
16. Policy updates
This privacy policy may be updated as services develop or legal requirements change.
The updated version is published with its last-updated date, and users are notified of material changes when required.
17. Language
This policy is available in Arabic, and an English translation may be provided for convenience.
If interpretations differ, the Arabic version is authoritative unless the law requires otherwise.