Privacy Policy

1. Overview & Scope

Localoy (“Localoy”, “we”, “our”, or “us”) operates the Localoy ecosystem, which includes our marketing and web application at localoy.app, our mobile applications on iOS and Android, our Partner Portal (partner.localoy.app), and our conversational AI concierge (“Loco AI”).

This Privacy Policy applies to all individuals who browse our website, create an account, purchase tickets, make dining reservations, claim loyalty perks, or communicate with our services. By using Localoy, you acknowledge the practices described in this document.

2. Information We Collect

We collect information necessary to deliver seamless city discovery, verified admissions, and personalized curation. We categorize this data into information you provide directly and information gathered automatically:

3. How We Use Information

We process your data strictly for legitimate operational, security, and curation purposes:

• Fulfilling Admissions & Reservations: Generating secure QR passes, confirming table bookings with host restaurants, and recording check-ins.
• Tailored Discovery: Highlighting experiences, upcoming performances, and perks that match your neighborhood and stated taste preferences.
• Powering Loco AI: Synthesizing your constraints (budget, vibe, timing, dietary needs) into cohesive, actionable city itineraries.
• Security & Abuse Prevention: Verifying single-use ticket redemption tokens, preventing scalping or automated coupon abuse, and maintaining platform uptime.
• Transactional Notifications: Delivering booking confirmations, reschedule notifications, and gate reminders (which you can manage in your Notification Settings).

4. Sharing & Disclosure

We do not sell personal data. We disclose information only under strict operational boundaries:

5. Security & Analytics Architecture

We implement industry-grade technical safeguards to defend customer data:

• Encryption Everywhere: All data transmitted between your browser or mobile device and Localoy servers is encrypted using modern TLS (HTTPS) protocol.
• Pseudonymous Analytics: Analytics telemetry decouples user identity using namespaced tokens. Partner analytics dashboards report aggregate numbers (e.g. “42 check-ins tonight”) rather than personal identities.
• Separation of Concerns: Administrative access is protected by role-based access controls (RBAC) and comprehensive audit logging.

6. Data Retention & Account Erasure

We retain your personal information only as long as your account remains open or as necessary to fulfill active bookings and legal reporting requirements.

Account Deletion: You have the unconditional right to delete your Localoy account. You can trigger account closure within the mobile app settings or by writing to [email protected]. Upon confirmation, your personal profile, hypes, and personalization criteria are permanently purged from active databases.

7. Your Rights & Choices

8. Loco AI & Automated Processing

Loco AI is our local intelligence companion designed to help you discover events, dining, and activities across Dhaka. When you interact with Loco AI, your input prompts are processed to generate contextual recommendations.

Loco AI suggestions do not make automated legal or financial determinations regarding your account. We do not use your confidential private messages or payment histories to train public machine learning models.

9. Children’s Privacy

Localoy is intended for general audiences aged 13 and above. We do not knowingly solicit or collect personal information from children under 13. If you believe a child has provided us with personal information without parental consent, please notify us immediately at [email protected], and we will promptly delete the data.

10. Changes to This Policy

We may periodically revise this Privacy Policy to reflect platform features, legal requirements, or security enhancements. When changes are published, we will revise the “Effective Date” at the top. For substantial changes, we will provide prominent notice through our application or via email prior to the changes taking effect.

11. Campaigns & Giveaways

When Localoy runs an in-person campaign or giveaway — such as the Coupon Jackpot — taking part means we handle a little more information, and we tell you exactly what at the time.

• To check it is you: a phone number verified by a one-time code we send by SMS (only to numbers that already belong to a Localoy account), or the QR pass in your app shown to our team.
• From your account: the details you already gave Localoy — name, phone number, email, date of birth, gender, area, interests and preferences — and counts of how you use the app (for example, how many places you have saved), so we can understand who takes part.
• From the campaign: when and how you took part, the result of your spin and whether the prize was collected, a coarse read of your device, and any answers you choose to give to optional questions.
• Offers and updates: we only contact you about offers if you tick the box saying so, and we record which version of the notice you saw when you did.

Each person gets one turn: a spin, plus any extra spins that turn gives them. We keep this information for a limited time after the campaign ends (12 months unless the campaign says otherwise), then delete it. You can ask us to delete it sooner, or to delete your account entirely, at localoy.app/delete. We never sell this information.