Privacy Policy

The controller for your data on Lukalia.lu is Boumans Jimi, 26, Im Dahl, L-9759 Knaphoscheid (Luxembourg). Questions? Write to us directly: kontakt@lukalia.lu.

We only take what Lukalia needs to work:

• Account: your name, email and password (stored encrypted only, we never see it in plain text). If you sign in with Google/Microsoft, only their access token, not your password with them.
• Listings: title, description, price, category, location and photos.
• Location: the region you choose to filter by. For a listing we only show the location approximately (rounded to about 2 km), never your exact address.
• Journey planner: if you search for an address as your start or destination, its name and position (accurate to about 11 m) appear in the web address of your search. That is what brings back the same journey after a reload or when you share it. The web address therefore ends up in your browser history and in our server logs, and anyone who receives a link you shared also receives that position. Your own location is never in there: we only note the words “My location”, and your device asks for the position again when the link is opened.
• Messages: we don’t read along. We only store your chats so they get delivered and you can find your history again. We only take a look if you or someone else reports something. Anything you have started but not sent yet, your recently used emojis and the skin tone you chose are kept only on your device, not by us. They are deleted when you log out. The emoji search runs entirely on your device. If you react to a message with an emoji, everyone in that chat sees it, with your name just like when you write. You can take your reaction back at any time. If you delete your account, we delete your reactions. If you edit a message, the others only see the new version, marked “edited”. Lukalia keeps the previous version so that reports can be checked; only the Lukalia team can see it, and only when a report is made. It is deleted when you take the message back and when you delete your account. A notification that has already been sent to a phone cannot be recalled. You can remove your own message for everyone up to 2 days after sending; after that everyone only sees “Message removed”. “Delete for me” and “Clear chat” only work for you: Lukalia remembers which messages you no longer want to see, and the others still see them.
• Groups: if you join a group, you appear there with the name you chose under “Name in your groups” (without a choice of your own, with your account name), along with your replies to events and, if you wrote it when joining, your line “Who are you?”. The people running a group can note a corrected version of your name in their list (for example the full surname when two first names are the same). Only the people running that group see this version, never the other members; it is included in your data export. Anyone not in the group sees no name of yours there. In groups with a chat, the members see what you write there, with your group name. If you leave the group, what you wrote stays there for the others. If you write to someone from the group one-to-one, only the two of you see it. If the main manager closes a group with at most two people, the group is deleted with all its dates, announcements and messages, including the one-to-one chats from it. Messages reported to us stay in the report as evidence. For your phone calendar you get your own link per group. Whoever has it sees the title, time and place of that group’s dates, no names. You can replace it at any time, the old one then stops working, and it stops as soon as you leave the group.
• Venue, club or company as a team: if you run a venue, club or company together with others, the others in the team see your name (as in groups) and your role. If you ask to co-manage through an invitation link, the main manager sees your name and your email address, so they know whom they are confirming; the others in the team only see that a request is waiting. If the request is declined or you withdraw it, we delete it. If you leave the team, your listings for that entry and their chats go to the main manager. When an entry ends (the last person leaves, the main manager ends it, or we end it), we delete contact and company details, the team, open requests and the invitation link. What stays is the entry’s name and type, when it was checked, and our log.
• Messages to a venue, club or company: if you write about a listing of a venue, club or company, your message goes to the entry: everyone in its team reads it and can reply. Whoever replies or reacts appears to you under the entry’s name, never their own. If you are in the team yourself, you see the chats about all of the entry’s listings, including the others’, and everyone has their own unread count. If you leave the team, you no longer see these chats. If you block an entry, nobody from its team can write to you any more, and your “Blocked” list shows the entry, not the person behind it. You can also write to a checked venue or club without a listing (“Send a message” on its page); the same applies.
• Replies and attendance: your replies to dates (yes, no, maybe) are seen by the people running the group; the group decides whether the other members see them too. The line you write with a “no” is only seen by the people running the group. We delete replies 8 weeks after the date. Guests without an account who reply via a date link appear there only with the name they type, which is deleted after the same period. If a group counts attendance, the people running it record after each date who was there, together with your reply from before, without the reason for a “no”. Only the people running the group see this, never the other members and not you either; it is included in your data export, though. We delete it 12 months after the date. In groups for children, after 8 weeks only the number per child, season and type of date remains (for example “11 of 12 trainings”); when the next season starts, we delete these numbers too. When someone running the group changes a reply, we keep the previous state for “Undo”; names and reasons in it are deleted after one day. If you tap “Reply later” at the top of your dashboard, we remember that just for you: nobody in the group sees it, and we forget it one day after the date.
• Technical: IP address, device and time. These are generated automatically while browsing and protect us from abuse.
• Statistics (anonymous): so we can see where Lukalia helps and where it struggles, we internally tally what happens, for example how many listings are added or what people search for. These are plain totals, not profiles about you. From your login we also roughly remember the city (from the IP address, never your exact address). Everything stays with us, is never sold and never used for advertising.

We need your account, listings and chat so that Lukalia works for you (Art. 6(1)(b) GDPR). Security and spam protection are our legitimate interest (Art. 6(1)(f)). The anonymous statistics and the rough login location also rely on this basis, so we can improve Lukalia for the region. Some things are required by law (Art. 6(1)(c)). The email that notifies you of new messages can be switched off anytime (Profile → Security).

We pass nothing on for advertising and sell nothing. A few technical service providers help us run things:

• Neon: database (in the EU).
• Vercel: website, photo storage and the optional speed measurement.
• Brevo: our emails.
• OpenStreetMap: turns places into coordinates (via our server).
• CARTO: the map tiles; your browser loads them directly, which sends your IP address to CARTO (see point 9).
• echo.lu: Luxembourg’s official events platform provides us with the events and their photos. We copy the photos to our own storage (Vercel) and serve them ourselves. Your browser loads nothing from echo.lu or Google.
• Sentry: reports technical errors to us, without personal data. From the web address where an error happened we cut off everything after the question mark, so search terms and places too.

The essential ones always run: your language, your chosen location and your login. No advertising, no tracking. We ask you first about two optional things: the error reports and the speed measurement from point 4. Both stay off until you agree. You can change your mind at any time via “Cookie settings” at the bottom of every page.

What your phone remembers when you arrive through a date link and are not in the group: when you reply or tap “Reply later”, your browser remembers the key of this link on your device, no content. It makes your date appear at the top of the dashboard. If you only open the link, it remembers nothing of it. If you reply without an account, these are added: a random device key, the name you type, your replies, a “Reply later” and the fact that we have already welcomed you. All of this sits in your browser, not with us. Your phone sends us the device key when you open a date link or reply (that is what lets you change your reply later), and the keys of the remembered links when the dashboard refreshes your dates. What comes back is the title, time, place, the name of the group and numbers, never other people’s names. Your phone forgets a remembered link as soon as the date is over, cancelled or deleted, and after 120 days at the latest. If you tap “Not …?” under your name, the phone forgets your name, the device key and your replies; with us the replies stay saved, as described above under “Replies and attendance”. If you clear the site data in your browser, everything is gone from the phone. If you share a phone, the next person can see there which dates were opened.

Only as long as needed. As long as your account exists, your account and listings stay. If you delete your account, your data is anonymised and your listings disappear. Chat images are deleted automatically after 30 days. Replies to dates in groups are deleted 8 weeks after the date, and who was there after 12 months (in groups for children after 8 weeks, then only numbers remain until the next season).

You can access, correct, delete or take your data with you, or object to its use (Art. 15 to 21 GDPR). Most of it you can do yourself right away under Profile → Security: download your data, pause your account or delete it. Explained step by step, including what stays and what goes: delete your account. Otherwise: kontakt@lukalia.lu.

If something isn’t right, you can lodge a complaint with the Luxembourg data protection authority: Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.public.lu. Better still, have a quick word with us first. Most things sort out directly.

Via the map (CARTO), your IP address may leave the EU. This is covered by the EU Standard Contractual Clauses.

Passwords are stored encrypted only. Before saving, we strip the hidden location and camera data (EXIF) from your photos. Your exact address is never shown publicly.

If you turn on push notifications (Profile → Notifications), we store a technical subscription address from your browser for your device, two keys used to encrypt the message, and roughly your device type. For the notification to pop up on your phone, it travels through your browser’s push service — Google for Chrome/Android, Apple for Safari/iPhone, Mozilla for Firefox. Some of these providers are located outside the EU (covered by the EU Standard Contractual Clauses, see point 9). It’s optional, you can switch it off at any time, and the subscription address is removed as soon as you sign out or delete your account.