LUCKY MEAL
Free on iOS
bg pixel

Privacy Policy

Effective date: 2 September 2026

This Privacy Policy explains how adlerlagune OG ("LuckyMeal", "we", "us", or "our") handles personal data when you use the LuckyMeal app, website, application forms, and related services (the "Services"). Our provider details are available in the Imprint.

1. Data we collect

  • Account and profile data, such as your provider account identifier, email address, display name, avatar, and account type.
  • Precise or approximate foreground location when you choose to grant location access, plus locations you search for or select.
  • App activity, including restaurant and deal spins, saved results, preferences, onboarding state, and account actions.
  • Creator information and content you submit, such as social profile details, profile images, and review media.
  • Restaurant and creator application data, including business, contact, social-media, and operational information.
  • Technical and security data, such as IP address, request and error logs, app and operating-system version, device type, and diagnostic events.

LuckyMeal does not request background location. You can deny or withdraw optional device permissions in your device settings, although nearby discovery or media selection may then be limited.

2. How we use data

  • Provide accounts, authentication, and session restoration.
  • Find nearby restaurants and deals, run discovery spins, show maps, and save activity you ask us to retain.
  • Operate creator profiles and process uploaded creator media.
  • Review restaurant and creator applications and communicate about them.
  • Maintain, secure, troubleshoot, and improve the Services and prevent fraud or abuse.
  • Meet legal obligations and enforce our terms.

3. Legal bases for processing

Where the GDPR or similar law applies, we process data as needed to perform our contract with you, based on your consent for optional permissions, for our legitimate interests in operating and securing the Services, and to comply with legal obligations. You may withdraw consent at any time without affecting earlier processing.

4. Service providers

We use providers that process data for the purposes described above:

  • Google for sign-in, maps, place information, and location-based search features.
  • Cloudflare for application delivery, security, serverless processing, media storage, and video processing and delivery.
  • PlanetScale for managed PostgreSQL database hosting.
  • Expo and EAS for app builds, distribution, updates, and related mobile infrastructure.
  • Vercel for website hosting and privacy-conscious website analytics.
  • Discord for delivery of restaurant and creator application form submissions to our internal team.
  • Apple when you use Sign in with Apple on a supported platform.

Their own terms and privacy notices may also apply when you directly use their services. We do not sell personal data or use it for third-party targeted advertising.

5. Sharing

We share data with the service providers above under appropriate instructions and safeguards, with restaurants or creators when needed to provide a feature you request, and with authorities or advisers when required by law or reasonably necessary to protect rights, safety, and security. If our business is reorganised, data may be transferred subject to applicable law and continued protection.

6. International transfers

Some providers may process data outside your country. Where required, we use recognised safeguards such as adequacy decisions or standard contractual clauses and supplementary protections.

7. Retention

We retain account and app data while your account is active and for as long as needed to provide the Services. Application submissions are retained while we evaluate and manage the relevant relationship. Security logs, records required by law, and limited backup copies may be retained for their applicable periods. We delete or de-identify data when it is no longer needed, subject to legal, security, dispute, and backup requirements.

8. Security

We use technical and organisational measures designed to protect personal data, including encrypted transport for production traffic, access controls, and restricted storage. No system can be guaranteed completely secure.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to complain to a data-protection authority. You can manage device permissions in system settings and delete your account in the app. See our account-deletion instructions for both in-app deletion and a request option when you cannot access the app.

10. Children

LuckyMeal is not directed to children under 13, and we do not knowingly collect personal data from them. Minors who may use the Services must have any consent or supervision required by local law. Contact us if you believe a child has provided personal data without appropriate permission.

11. Changes to this policy

We may update this policy as the Services or law change. We will post the updated version here, revise the effective date, and provide additional notice where required.

12. Contact

Send privacy questions and requests to contact@luckymeal.app. You can also write to adlerlagune OG, Seitenstettengasse 5/37, 1010 Vienna, Austria.