CLARITY
Legal
Privacy Policy
Last updated: 16 October 2026 · This policy applies to lyvo.app and all associated services.
Partner offers and referrals
We use your chosen code or link to apply the offer and administer the referral. We save a referral identifier in your browser between visits only if you choose to remember the offer, normally for 90 days, according to the window shown with the offer. Your storage preference is saved separately. We do not fingerprint your device. You can enter a code without accepting tracking.
After registration, the account’s referral and accepted offer are kept to administer the agreement, calculate commissions and prevent duplicate claims. The partner normally sees a reference, plan and commercial progress; a business name is shown only where LYVO permits it. Partners receive no operational records, employee data, supplier invoices or your payment methods. Customer-detail access ends when eligibility ends.
We remove expired visitor identifiers. Customer names are removed from referral records after the configured retention period, normally 90 days after access expires, unless a justified dispute hold applies. Financial evidence is retained separately with restricted access under accounting obligations and LYVO’s reviewed retention schedule. Use the contact details in this policy to request access, correction or erasure. Withdrawing tracking does not cancel an already accepted offer.
1. Who We Are
Lyvo is operated by Lyvo Ltd, a company registered in England and Wales. Our registered address and contact details are available at lyvo.app/contact. References to ‘Lyvo’, ‘we’, ‘us’, or ‘our’ in this policy refer to Lyvo Ltd.
We are the data controller for personal data collected through the Lyvo platform. We are registered with the Information Commissioner’s Office (ICO) in the United Kingdom.
For any data protection enquiries, contact us at: privacy@lyvo.app
2. What Data We Collect
2.1 Account Data
When you create a Lyvo account we collect:
- Full name
- Email address
- Business name and location(s)
- Billing address
- Password (stored encrypted — we never store plain text passwords)
- Google account information if you use Google Sign-In
2.2 Operational Data
Data entered by you or your staff while using the platform:
- Temperature logs, cleaning records, oil quality readings
- Opening, mid-shift, and closing checklist completions
- Delivery acceptance and rejection records
- Pest control inspection records
- Accident and incident reports
- Production logs including baked goods and wastage figures
- Staff names and job roles as entered by the account holder
- Staff certificate types and expiry dates
2.3 Technical Data
Automatically collected when you use the platform:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Login timestamps and session data
- Error logs
2.4 Communication Data
If you contact us or use our messaging features:
- Email correspondence with our support team
- Phone number if provided for RCS or SMS notifications
- RCS and SMS message delivery receipts
2.5 Payment Data
Subscription payments are processed by Stripe. We do not store your full card number or CVV. We retain billing details, provider references and invoice, payment and refund records needed to administer subscriptions and reconcile partner commissions. Partners who receive commission separately provide payout details; these are encrypted and access is restricted to authorised finance administrators. Stripe’s privacy policy applies to payment data: stripe.com/privacy.
2.6 Data From Delivery Platforms (Uber Eats, Deliveroo)
If you choose to connect your Uber Eats store or your Deliveroo restaurant to Lyvo, the platform shares the following with us. For Uber Eats you approve this on Uber’s own sign-in page; for Deliveroo the restaurant is connected to Lyvo through Deliveroo.
- The store or restaurant's name, address and platform identifier, so you can choose which of your Lyvo shops it belongs to
- The menu: item and add-on names, identifiers (such as product codes) and prices
- The orders: order number, time and status, and the items and add-ons sold with their quantities and prices
- Notifications the platform sends about those orders and about the connection
We do not keep the customer’s name, phone number, delivery address, loyalty details or order notes from these orders, even when the platform includes them. Your Uber sign-in is used once, to list your stores, and is not kept. We use this data only to record your sales, reduce your stock and show your reports. Lyvo does not accept, reject, change or cancel orders, and does not change your menu, prices, availability or store. Order records are deleted automatically about 13 months after we receive them, and the platforms’ notifications after 90 days; the sales already recorded in your account stay with your other sales records. All of it is deleted when your account is deleted. You can disconnect an Uber Eats store at any time from Settings › Business in Lyvo or remove Lyvo’s access in Uber Eats Manager; to disconnect a Deliveroo restaurant, contact us or Deliveroo. Each platform’s own privacy notice applies to the data it holds: uber.com/legal and deliveroo.co.uk/privacy.
3. How We Use Your Data
3.1 To Provide the Service
- Creating and managing your account
- Processing and storing your operational logs
- Generating compliance reports and audit trails
- Sending operational alerts (temperature warnings, missed tasks, certificate expiry reminders)
- Processing subscription payments
- Enabling multi-location management
3.2 To Improve the Service
- Analysing usage patterns to identify features that need improvement
- Diagnosing technical issues from error logs
- Understanding which modules are most and least used
3.3 To Communicate With You
- Sending transactional messages (receipts, account confirmations, password resets)
- Operational alerts via RCS, SMS or email based on your notification preferences
- Product updates and feature announcements (you can opt out at any time)
- Responding to support requests
3.4 Legal Obligations
- Complying with applicable law, regulation, or legal process
- Responding to lawful requests from public authorities
- Protecting the rights, property, or safety of Lyvo, our users, or others
4. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
- Contract: Processing necessary to provide the Lyvo service you have subscribed to
- Legitimate interests: Improving the platform, preventing fraud, sending relevant product updates
- Legal obligation: Complying with applicable UK law
- Consent: Where you have explicitly opted in to specific communications — you can withdraw consent at any time
5. RCS and SMS Messaging
If you provide a phone number and enable mobile notifications, Lyvo will send operational alerts via RCS (Rich Communication Services) or SMS. These messages are strictly transactional and include:
- Temperature out-of-range alerts
- Missed shift task notifications
- Staff certificate expiry warnings
- End-of-day shift summaries
- Incident report notifications
We do not send marketing messages via RCS or SMS. You can opt out of mobile notifications at any time in your account settings at lyvo.app/settings or by replying STOP to any message. Messaging is delivered via Twilio. Standard carrier message and data rates may apply.
6. Data Sharing
6.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal data to any third party for marketing purposes, ever.
6.2 Service Providers
We share data with trusted third-party providers who process it on our behalf under strict data processing agreements:
- Stripe — payment processing
- Twilio — RCS and SMS delivery
- MongoDB Atlas — database hosting
- Cloudflare — security and content delivery
- Clerk — authentication and user management
6.3 Legal Requirements
We may disclose your data if required by law, court order, or governmental authority, or where necessary to protect the rights and safety of Lyvo or others.
6.4 Business Transfers
If Lyvo is acquired by or merged with another company, your data may be transferred as part of that transaction. We will notify affected users in advance.
6.5 Delivery Platforms
When you connect Uber Eats or Deliveroo, we exchange data with Uber Technologies, Inc. and Roofoods Ltd (Deliveroo) and their affiliates only as described in section 2.6. For Uber Eats we tell Uber which of your stores Lyvo reads, and stop when you disconnect. For Deliveroo we confirm to Deliveroo that each accepted order reached Lyvo (a receipt that does not change the order). We do not send either platform any of your other Lyvo data.
7. Data Retention
Private accounting and operational records remain available while your account is active, subject to specific retention rules for each service. Cancellation of a subscription does not itself erase the account. When LYVO records an account-erasure request, access and shared contribution are disabled immediately. The scheduled hard-delete process starts after 30 days and retries incomplete file removal. A documented, time-limited legal hold can postpone deletion. Shared-recognition records follow the shorter and separate periods in the notice above. We do not treat a general food-safety purpose as an automatic right to keep every account record for three years.
You may request earlier deletion of specific data by contacting privacy@lyvo.app, subject to any legal retention obligations.
8. Your Rights Under UK GDPR
As a UK data subject you have the following rights:
- Right of access: Request a copy of all personal data we hold about you
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data (‘right to be forgotten’)
- Right to restriction: Request that we limit how we use your data
- Right to data portability: Receive your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests
- Rights related to automated decision making: We do not make solely automated decisions that significantly affect you
To exercise any of these rights, contact us at privacy@lyvo.app. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.
9. Cookies
Lyvo uses cookies and similar tracking technologies to operate the platform. We use:
- Essential cookies: Required for login sessions and platform functionality — cannot be disabled
- Analytics cookies: To understand how the platform is used — you can opt out
- Preference cookies: To remember your settings and display preferences
You can manage cookie preferences through your browser settings or our cookie consent banner on first visit.
10. Security
We take the security of your data seriously. Our measures include:
- All data encrypted in transit using TLS 1.2 or higher
- All passwords hashed using industry-standard algorithms
- Access to production systems limited to authorised personnel only
- Regular security reviews and vulnerability assessments
- Automated monitoring for suspicious activity
No system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.
11. International Transfers
Some of our service providers operate outside the UK and EEA. Where we transfer data internationally, we ensure appropriate safeguards are in place including Standard Contractual Clauses approved by the UK ICO or equivalent adequacy decisions.
12. Children’s Privacy
Lyvo is a business-to-business platform intended for use by adults operating food businesses. We do not knowingly collect data from anyone under the age of 16. If you believe a minor has provided data to us, contact privacy@lyvo.app immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice within the platform at least 14 days before the changes take effect. The date at the top of this document shows when it was last updated.
14. Contact
For any privacy-related questions or to exercise your rights:
- Email: privacy@lyvo.app
- Website: lyvo.app/privacy
For complaints to the supervisory authority: ico.org.uk — Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.