Privacy Policy
Last updated:
LAVI respects its users’ privacy and is committed to processing personal data clearly, securely and only to the extent necessary to provide and improve the platform’s services, in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations.
This policy explains the types of data LAVI may collect, the purposes for which it is used, how it is shared and retained, and the rights relating to it.
1. Data we collect
Depending on how you use the services, LAVI may collect:
- Account data, such as your email address, mobile number and username.
- Profile data you choose to add, such as your name, avatar, biography, gender, date of birth and city.
- Verification, login and session data needed to protect your account.
- Preferences, saved items, follows and ratings you create on the platform.
- Booking, ticket, order and payment data when you use services that require it.
- Attendance data when you use Check-in.
- Location data when you expressly grant permission to use a location-dependent feature, such as verifying proximity to a particular place.
- Technical data needed to operate and protect the service, such as request, device and browser information, network address, and operational and security logs to the extent necessary.
- Any data you voluntarily provide when contacting LAVI or using platform features.
2. Purposes of processing
We use data for purposes related to providing LAVI services, including:
- Creating, verifying and managing accounts.
- Enabling login and account recovery.
- Displaying profiles according to users’ privacy settings.
- Enabling search and discovery of places, events and communities.
- Saving users’ preferences and saved content.
- Managing follows, ratings, tickets and check-ins.
- Verifying eligibility for certain actions, such as geographical proximity when using Check-in.
- Sending verification codes and necessary operational messages.
- Carrying out financial transactions and paid services when available.
- Maintaining platform safety, preventing misuse, and investigating errors and technical issues.
- Developing and improving the user experience and appropriately measuring service performance.
3. Location data
LAVI does not continuously request users’ location.
When you use a feature that requires location, such as checking in at a place, the app or browser requests your permission at the time of the action.
For Check-in verification, your current location is used to verify your proximity to the place. Under the platform’s current design, raw user coordinates are not retained as a permanent movement trail; the verification outcome, distance, location accuracy and check-in time may be retained to the extent necessary to substantiate the action.
You may refuse location permission, although some location-dependent features may then be unavailable.
4. Public data and profile information
A user’s public profile may display information they choose to share, such as:
- Username
- Name
- Avatar
- Biography
- Statistics the user permits to be displayed
Email addresses, mobile numbers and dates of birth are not shown to visitors through the public profile.
LAVI provides settings to control the visibility of certain information, such as check-in counts, follows and saved items, according to the features available on the platform.
5. Ratings and interactions
When you rate a place, LAVI retains the rating associated with your account and that place.
The platform may display average ratings and rating counts in aggregate form.
You may update your rating using the available features; doing so does not create duplicate ratings for the same user and place.
6. Sharing data with service providers
LAVI may engage technical service providers to process data to the extent necessary to provide the service, including:
- Hosting and operating systems
- Sending verification text messages
- Processing payments
- Technical and security services necessary for operation
Engaging a service provider does not give it the right to use data for independent purposes unrelated to the service, except as permitted by law and the relevant legal relationship.
7. Payments
When a paid service is offered, payment may be processed by an external payment provider.
The payment transaction may also be subject to the payment provider’s terms and privacy policy.
8. Disclosure of data
LAVI discloses personal data only to the extent necessary and for a lawful purpose, such as:
- Providing a service requested by the user
- Working with authorized service providers
- Fulfilling a legal obligation or a request from a competent authority
- Protecting rights, systems or users where there is a lawful basis to do so
Disclosure must be limited to the minimum necessary to achieve its purpose.
9. Data retention and destruction
LAVI retains data for as long as necessary to achieve the purposes for which it was collected, or for periods required by law or contract where applicable.
When there is no longer a legal or operational need for the data, LAVI takes appropriate steps to destroy or anonymize it, taking account of the nature of the data and legal requirements.
10. Data transfers
If operating a service requires data to be processed or transferred outside the Kingdom, this must comply with applicable legal requirements and controls governing the transfer of personal data outside the Kingdom.
11. Data protection
LAVI applies appropriate technical and organizational measures to protect data against unauthorized access, use, alteration or disclosure, taking account of the nature of the data and processing risks.
Absolute protection cannot be guaranteed for any electronic service. Users must keep their login details confidential and must not share them with others.
12. User rights
Under applicable laws, and subject to the relevant circumstances and legal requirements, data subjects have the right to:
- Be informed about how and why their data is processed.
- Request access to their personal data.
- Request a copy in a clear, readable format where applicable.
- Request correction, completion or updating of inaccurate data.
- Request destruction of data when there is no longer a legitimate need to retain it, subject to legal exceptions.
- Withdraw consent where processing is based on consent, unless another lawful basis permits continued processing.
13. Exercising rights
Users can manage some of their data directly through account settings.
For other privacy-related requests, use the official communication channels provided by LAVI.
14. Deleted accounts and data
Requests to delete accounts or data are handled in accordance with legal requirements and retention obligations relating to transactions, rights or financial records, where applicable.
LAVI may retain certain records that must be kept by law or to protect rights for an appropriate period, after which it handles them in accordance with legal requirements.
15. External links and services
LAVI may contain links or services from other websites or parties.
These services are subject to their providers’ policies and terms. A link to them does not mean that LAVI’s privacy policy automatically extends to their independent systems.
16. Policy updates
This privacy policy may be updated as services develop or legal requirements change.
The updated version is published with its last-updated date, and users are notified of material changes when required.
17. Language
This policy is available in Arabic, and an English translation may be provided for convenience.
If interpretations differ, the Arabic version is authoritative unless the law requires otherwise.