1. About this policy
This policy covers the Lokal app and meetlokal.com, including visitors, Travelers and Lokals. It describes information used to provide local advice, conversations, guides, bookings, purchases and support.
2. Account and profile information
We receive the information you provide, such as your name, email, phone number, profile photo, city, languages and preferences. If you sign in with Apple or Google, we receive the account information made available through that sign-in method. We also use account and session identifiers to keep you signed in.
3. Conversations and shared content
We store conversations, questions, answers, uploaded files, stories, guides, reviews, saved items and booking details used by the service. Public profiles and published content are visible to their intended audience; messages are available to conversation participants. Authorized staff may access records to provide support, investigate reports and operate the service. Do not send passwords or sensitive identity or payment details in chats.
4. Purchases and Lokal earnings
On iPhone and iPad, Apple processes digital In-App Purchases. Lokal receives transaction identifiers, product information and verification results to grant access and keep purchase records, not your full Apple payment-card details. For Lokal verification and payouts, we process the identity, payout and tax information you submit and the status returned by the relevant provider. Other payment options, where available, are identified in checkout.
5. Device information and permissions
We use technical information such as device platform, push-notification tokens, language, session data and request logs to deliver the service and troubleshoot problems. Location is used when you choose a location feature and allow access. Camera, photos and files are used for the uploads you choose. You can change device permissions in system settings; some optional features then may not work.
6. Why information is used
Information is used to create and secure accounts, show relevant cities and offers, deliver purchases and conversations, manage bookings and payouts, send service messages, answer support requests, review safety reports and improve reliability. Depending on the processing and applicable law, the basis may be providing the requested service, consent, legal obligations or legitimate interests such as fraud prevention and service security. Optional marketing choices are separate from essential service messages.
7. Service providers and disclosures
Lokal uses hosting, storage, email-delivery, authentication, payment and notification services. Apple and Google support sign-in; Apple and Firebase support push delivery. Providers receive the information needed for their function. Reports and support requests may be shared with authorized staff and delivery providers. Information may also be disclosed when required by law or necessary to handle fraud, safety concerns or legal claims.
8. AI-assisted translation
Lokal uses OpenAI to translate messages and content such as stories and guide previews. Text needed for translation is sent to that provider and the translated result may be stored. This means translated content is processed outside Lokal’s own servers. Avoid putting sensitive personal information in content that may be translated. Translations may contain mistakes and do not change the original purchase terms.
9. Website analytics and local storage
meetlokal.com uses browser local storage and session storage for visitor and session identifiers. Website analytics include page activity, referring pages, campaign information, browser, language, time zone and approximate location. The server uses an IP-derived hash and sends the IP address to ipapi.co for approximate geolocation. Browser storage can be cleared through browser settings; this does not erase records already received by the server.
10. Retention and account deletion
You can request account deletion from the account settings in the app. Account access closes when the request is accepted; deletion of the account and associated personal data will be completed within 30 days of the request. A saved request is not confirmation of completed deletion. Keep the private status link to check progress and completion after signing out. A completion email is also sent when a verified delivery address remains available. Financial, fraud-prevention, safety or legal records may need to be retained where justified by applicable obligations; the 30-day completion window is not their retention period. Website event cleanup is configured for 180 days and session cleanup for 730 days; these are not retention periods for all other account data. Backup and provider records require separate handling and are not treated as erased just because a request was accepted.
11. Your choices and requests
You can edit supported profile details, choose notification and marketing preferences, and change device permissions. Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to certain processing, or withdraw consent for processing based on consent. We may need to verify your identity before responding. You may also contact the data-protection authority responsible for your region. Use the privacy contact shown here or Privacy & data requests in Contact Support.
12. International processing
Service providers and authorized operations may process information in countries other than yours. Applicable data-protection rights and transfer requirements depend on your location and the processing involved. Contact us for information about the providers and transfer arrangements relevant to your data.
13. Children and sensitive information
Lokal is a travel-advice service, not a service designed specifically for children. If you believe a child has provided personal information inappropriately, contact us so the account and information can be reviewed. Do not upload sensitive information about yourself or another person unless it is necessary for a supported verification or support process.
14. Security and policy updates
Access controls and secure connections help protect information, but no service can guarantee absolute security. Keep your account credentials private and report suspicious activity. Changes to this policy will be identified by its version and effective date. A policy notice is not itself consent to optional marketing or third-party AI processing.
Privacy contact
Ozan Coskun
Ozan@startupdev.me
For general product support, visit Contact.