Privacy Policy

1. Who is responsible for your data

LOBBR Technologies Inc., a corporation incorporated under the Canada Business Corporations Act, is responsible for the personal information described here. In this policy, “LOBBR”, “we” and “us” mean that company.

2. What we collect

When you create an account: your name, email address, phone number and, if you add one, a profile photo.

As you use LOBBR: the sessions you join or host, your reliability marks and the ratings other players leave you, messages you send in session chat, and records of payments.

Hosts additionally provide venue details and the information Stripe needs to pay them, which they give to Stripe directly.

3. Location

LOBBR uses your device location for two things, both only while you are using the app:

• Finding sessions near you, when you sort the feed by distance. Your position is used to order what you see and is not stored as a location history.
• Checking in, where a host has enabled it. We compare your position to the venue’s to confirm you are there, and keep the result — whether you checked in — not the coordinates.

We never show your location to other players, and you can decline the permission and keep using the app.

4. How we use it

To run the service: matching players to sessions, taking and releasing payments, keeping the reliability system honest, and sending you the notifications you have asked for.

We do not sell your personal information, and we do not use it to build advertising profiles.

5. What other players can see

Your display name, profile photo, reliability standing and the ratings you have received are visible to people you play with. Your email address, phone number and payment details are not.

You can hide your profile from discovery in your settings.

6. How your sign-in works

You sign in with Google, with Apple, or with an email address and password. When you use Google or Apple, we receive your basic profile details from them and never see your password for those accounts. When you use an email and password, we store the password only in hashed form and cannot read it.

We use Google Firebase for two specific jobs: sending the SMS code that verifies your phone number, and delivering push notifications. It is not what signs you in.

7. Who else handles your information

We share information only with the providers needed to run the platform:

• Stripe — payments, refunds and host payouts. Your card details go to Stripe and never reach our servers. For hosts, Stripe separately collects identity documents and bank details for its own tax and anti-fraud obligations; in that role it acts as an independent controller of that data, under Stripe’s own privacy policy.
• Amazon Web Services — hosting, databases and stored images.
• Google — Firebase for phone verification and push notifications, and Maps for venue locations and session images.

We may also disclose information where the law requires it.

8. Keeping and deleting your data

We keep your information while your account is open. You have two options for closing it, and they do different things:

• Deactivate hides your account and stops it being used. Nothing is erased, and signing back in restores it.
• Delete is permanent. We anonymise your identity: your name, email, phone and photo are removed, and the sessions, chat messages and ratings you left behind stay attributed to a deleted user so that other people’s history stays intact.

Both are available in the mobile app under Profile, and in the web Dashboard under Account.

Two things survive a deletion. Payment records we are required to keep for tax and accounting are retained for as long as the law requires. And information Stripe holds about a host’s payout account is not ours to erase — it is kept under Stripe’s own retention rules, as described above.

9. Your rights

You can ask us what personal information we hold about you, ask for a copy of it, ask us to correct something that is wrong, or ask us to delete it. Write to the address below and we will respond within 30 days.

10. Children

LOBBR is not intended for anyone under 16, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will remove it.