← Back to home

Privacy Policy

Effective 13 May 2026 · Last updated 3 August 2026

In short: we collect what LOQI needs to work: your email, the places you pin, and the location you ask recommendations for. We store your account and content in the EU, we never sell your data, and you can have it deleted any time at privacy@loqimaps.com. LOQI Recommendations are powered by Anthropic (Claude) and Google, so some of what you search is shared with them to answer your request.

1. Introduction

This policy explains what personal data LOQI processes, why, on what legal basis, how long we keep it, and who we share it with. It covers both the LOQI website (loqimaps.com, including the waitlist) and the LOQI mobile app.

This is a plain-language summary of how we handle your data. It is not a substitute for legal advice. Because LOQI processes location and user content, we recommend having the final version reviewed by a qualified professional.

2. Who we are (data controller)

LOQI is operated by Grande Developers, a Dutch general partnership (vennootschap onder firma), registered with the Netherlands Chamber of Commerce (KvK) under number 42091088, based in Amsterdam, the Netherlands.

For any privacy or legal question, or to exercise your rights, contact us at privacy@loqimaps.com.

3. What data we collect and why

We only collect what we need to run LOQI. Per category we describe the purpose, the legal basis under the GDPR, how long we keep it, and who we share it with (see sections 4 to 9).

Account data

  • Your email address, to sign you in, manage your account, and send transactional email.
  • Your password is never stored in a readable form. Authentication runs through Supabase Auth; passwords are stored hashed and we cannot see them. If you sign in with Google or Apple, we do not manage a password at all.
  • Your profile photo, username and display name.
  • With social login: the name and avatar the provider (Google or Apple) passes to us.

Content you create

  • Pins (saved places): name, location or coordinates, category, notes and photos.
  • Ratings and likes.
  • Shared maps and who takes part in them.
  • Follow relationships (who follows whom).

Location

  • The location of the places you pin.
  • The area or location you request recommendations for.

Location is sensitive data. We use it only for the map and recommendation features, not for anything else.

Usage and technical data

  • Basic usage data needed to run the app (which actions you take), used to show your feed and notifications.

Website and waitlist data

  • If you join the waitlist on loqimaps.com: your email, an approximate IP address and user agent (via our host), the signup timestamp, and the tier or position assigned to you.

4. Why we collect it and legal basis (GDPR)

We rely on the following legal bases under Article 6(1) GDPR:

  • Performance of a contract (Art. 6(1)(b)) for core functions: creating and running your account, storing your pins, showing your feed, and delivering features you use.
  • Consent (Art. 6(1)(a)) where it applies, such as location and the opt-in to LOQI Recommendations. You can withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f)) for keeping the service secure and working (for example basic technical logging).

5. LOQI Recommendations

LOQI Recommendations are powered by AI (Anthropic, Claude) through a server-side Supabase Edge Function (recommend-spots). The app never talks to an AI service directly; the API keys are server-side secrets. The models used are claude-sonnet-4-6 and claude-haiku-4-5. We also use Google Places (New) for place data and reviews.

What we send to Anthropic when you request a recommendation

  • The free-text search you type.
  • The location or area you want the recommendation for.
  • From friends' pins: the name, category and note of candidate places.
  • Google review snippets of candidate places, so they can be ranked.

Claude uses a web-search tool to answer, which means your search query may also reach the open internet through Anthropic.

What we send to Google: place searches and the retrieval of reviews and metadata.

According to Anthropic's commercial terms, data submitted through their API is not used to train their models. We state this based on their current published terms; because provider terms can change, this should be verified against their live commercial terms.

Your control: in the app you can exclude your own pins from recommendations and trending using the privacy toggle.

6. How Plus and Max are billed

The Plus and Max subscriptions are billed through Apple's in-app purchases (App Store) and Google's in-app purchases (Play Store). Apple's and Google's billing, cancellation and refund rules apply, not ours: cancellation and refunds run through your own App Store or Play Store account. We do not process or store any payment details or card numbers.

7. Who we share data with (processors)

We share data only with the providers that help us run LOQI:

  • Supabase, for hosting, database and authentication.
  • Anthropic and Google, for recommendations (see section 5).
  • Apple and Google, for payments (see section 6).
  • Resend, for sending transactional email.
  • Meta (Facebook and Instagram), for advertising measurement and audiences, only after you have given consent.

We never sell your personal data.

8. Data location and international transfers

Our database and authentication (Supabase) run on AWS in the eu-west-1 (Ireland) region, so within the EU. The personal data we store, being accounts, pins, locations and photos, stays in Europe.

For recommendations, some data is sent to Anthropic and Google, both US companies, which means a transfer outside the EU takes place. If you accept marketing cookies, advertising data is also sent to Meta, a US company, which is another transfer outside the EU relying on the EU-US Data Privacy Framework. Where such transfers occur, they rely on the recipient's transfer safeguards (typically the EU Standard Contractual Clauses or the EU-US Data Privacy Framework). This should be confirmed against each provider's current data-processing terms.

9. Data retention

We keep your account data and content for as long as your account exists. If you request deletion, we remove your personal data. Waitlist data is kept until you request deletion, or up to 90 days after launch once a reward has been claimed or declined, or until LOQI ceases operating.

10. Your rights

Under the GDPR you have the right to access, correct, delete, and port your data, to object to processing, and to withdraw consent. You can exercise any of these by emailing privacy@loqimaps.com, and you can have your account deleted. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Cookies and tracking

We use Vercel Analytics, which does not use cookies. For advertising, we use the Meta Pixel and Meta Conversions API to measure how our ads perform and to reach relevant audiences. These load only after you accept marketing cookies in our consent banner. If you decline, no Meta tracking runs and no Meta cookie is set. You can change your choice any time through the Cookie preferences link in the footer. We do not use Google Analytics. The advertising tracking relies on your consent under Article 6(1)(a) GDPR, which you can withdraw at any time.

12. Children's privacy

LOQI is not intended for children under 16. We do not knowingly collect data from anyone under 16.

13. Security

  • Passwords are hashed via Supabase Auth.
  • Access to data is protected with Row Level Security, so users only see their own data and what is shared with them.
  • API keys are kept server-side and never shipped in the app.
  • Data is stored within the EU (Supabase, AWS eu-west-1).

14. Changes

If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify you.

15. Contact

Questions about your privacy? Email privacy@loqimaps.com.