Privacy Policy

The controller responsible for data processing is LunchConnect.

Contact: contact@lunchconnect.app

Depending on how you use LunchConnect, we may process:

• account and sign-in data
• profile information such as display name, bio, city and company
• your availability status
• invitations and related actions
• Open Tables you create, join or interact with
• messages you exchange with other users
• optional location data if you enable location features
• technical data linked to push notifications if you opt in
• technical data required to keep LunchConnect stable, secure and reliable

We use this data to:

• create and manage your account and sign you in
• show who is available and help you discover people
• send and manage invitations and in-app chat
• run the Open Tables feature
• show colleagues in the “My Company” networking area when a company is entered on a profile
• improve platform stability and security
• send push notifications when you have turned them on
• prevent abuse and misuse of the service

Depending on the feature, processing is based on:

• Article 6(1)(b) GDPR where processing is necessary to provide the service
• Article 6(1)(a) GDPR where users voluntarily enable location or push notifications
• Article 6(1)(f) GDPR for security, abuse prevention and technical stability

Sharing location is optional. You can switch it on or off in the app when the feature is available.

If enabled, location is used to suggest nearby people or places. LunchConnect is not intended to show your exact GPS coordinates publicly to other users.

How location appears in the product can change as we improve the app; you stay in control of whether location sharing is on.

Notifications are optional. You can turn them off in your browser, in your device settings or, where available, in LunchConnect.

Data used to deliver push notifications is only used to send notices related to LunchConnect.

Chat works between users inside LunchConnect.

Private messages between users are not shared with companies, employers or HR departments.

The “My Company” section highlights people who added the same company to their profile. It is meant so colleagues can find each other voluntarily on LunchConnect.

It does not give employers access to private chats. LunchConnect is not an employee monitoring tool.

We host LunchConnect with Vercel and use Supabase for authentication, database and related backend services. Sign-in and account emails you receive from the platform are handled through Supabase’s infrastructure as part of running the service.

These providers process data only on our instructions and only as technical service providers, to the extent needed to operate LunchConnect.

We store data while your account exists and as long as we need it to provide LunchConnect.

Some information may be kept longer where the law requires it, or for security and abuse prevention. You can ask us to delete your data; we will respond in line with applicable law.

Where the GDPR applies, you may have the following rights in relation to your personal data:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object
• right to withdraw consent
• right to lodge a complaint with a supervisory authority

For privacy questions, write to:

• contact@lunchconnect.app

This privacy policy may be updated when LunchConnect adds new features or service providers.