Privacy policy

1. Who is responsible

Letsss is responsible for your data (the data controller). For any question about your data, write to hello@letsss.app.

2. What we collect

Your account

• Your email address, name, and if you add them: profile photo and short bio. Location and camera details hidden in a photo file (EXIF) are removed when you upload it.
• Your languages: the language of the app and emails, and the languages you understand. Your timezone.
• If you choose to give it, your grammatical gender. It is only used to pick word forms (in French, “inscrit” or “inscrite”) and is never shown.
• Your settings, such as “confirm with a tap instead of holding” and “show tips”, and which tips you’ve seen.
• When you confirmed you’re 18 or older and accepted these terms.
• If you sign in with Google: your Google account ID and the email address Google confirms, linked to your Letsss account, with when the link was made and last used. Your name from Google only fills in the welcome step, where you can change it. We don’t take your Google photo and keep no access to your Google account. You can disconnect Google in your account settings at any time.

What you do in your communities

• Your memberships: communities, role (owner, admin, member), when and how you joined, the rules you accepted, your notification choices.
• Requests to join, with the note you add, and the admins’ decisions.
• Plans you propose, host or join; your votes, check-ins and attendance (including no-shows); reviews, ratings, props, wishes and pledges; the people you’ve met at plans (connections).
• Your points ledger (every Reputation and credit movement), level, badges and season awards.
• Reports you file or that are about you, bans, and blocks set by hosts.
• Your track record: a summary of your reliability across communities, like “Shows up 96% · 48 events”.

Technical data

• Sign-in links and codes (stored only in a scrambled form called a hash), with the time and the IP address of the request.
• Your session: the IP address and browser of the device you’re signed in on.
• If you turn on notifications, the push address of each device.
• Simple counts: how many visits you’ve made and when you first used the installed app, to decide when to show the “install the app” banner.
• IP addresses in server logs and in limits that block abuse (like too many sign-in attempts).
• An audit log of admin actions (point corrections, removals, bans, settings), naming who did what.

From other people

• If an admin invites you, the email address they typed (see “How long we keep it”).
• What other members do that involves you: a host checking you in, a prop or a review, a report.

3. Why we use it

• To run Letsss for you (it’s needed for the service you signed up for): your account, communities, plans, points, check-ins, emails and notifications you asked for.
• To keep people safe and Letsss fair (our legitimate interest, and yours): reports, bans, limits for new members in public communities, the audit log, blocking abuse and fake accounts.
• To improve Letsss: simple counts inside our own database and a measurement of page speed and visits that uses no cookies and doesn’t identify you (our legitimate interest); and, only if you accept, usage analytics: which pages and features are used, linked to a pseudonymous ID instead of your name or email (your consent).
• With your consent: usage analytics, push notifications (your device asks you first), optional profile details like your photo, bio or grammatical gender, and sharing your track record. You can withdraw consent at any time in the app.
• When the law requires it: for example to answer a request from a competent authority.

We don’t make decisions about you with legal effects based only on automatic processing. Points, levels and the pot draw follow the game rules of each community, and admins can correct them.

4. Who sees what

• Members of a community see your name, photo and bio, your level, reliability, connections, badges and your wall of past plans, inside that community only.
• Nobody else sees your point losses or the plans you missed: those are visible only to you.
• Other communities are never named. Your track record is the only thing that crosses communities, and only while you share it. You choose when you join a community (it’s on by default), and you can turn it off there at any time.
• Exact addresses of in-person plans are shown only to the people taking part; others see the area.
• Community admins don’t see your email address (unless they invited you with it). They see your point history only when they handle a dispute, an excuse or a correction, and that access is logged.
• Letsss platform admins can see account data when it’s needed for support, safety or these rules.
• Anyone with a plan’s link sees its preview: title, time, area (never the address), the host’s name and how many are going. Plans of public communities have a public page, and public communities are listed in the directory.
• Your calendar feed link shows your plans to anyone who has it. Keep it private.

5. What we never do

• Sell or rent your data, or share it for advertising.
• Show ads, use advertising trackers, or use analytics cookies without your consent.
• Machine-translate what you write.
• Share your points or activity with an employer: in company communities, points have no link to HR.

6. Who helps us run Letsss

We use a few providers that process data only on our instructions, under contracts that protect it:

• Hosting: our servers and database, in a data centre in the European Union.
• Network and storage: our domain name, secure connections, protection against attacks and bots, and storage for photos and plan images, in the European Union.
• Email delivery: sends our emails (sign-in links, invitations, notifications).
• Error reports: when something breaks in the app, a report is stored in the European Union. We remove names, email addresses, sign-in links and other personal details before it is sent.
• Measurement and analytics: page speed and visits, measured without cookies; and, only if you accept, usage analytics with a pseudonymous ID.
• Push services of your device or browser maker: deliver notifications if you turn them on. The content of each notification is encrypted, so they can’t read it.

We may also share data when the law requires it, or to protect someone’s safety.

7. Your data stays in the European Union

Your data is stored in the European Union: your account, your communities with their plans and points, photos and plan images, and error reports.

Two optional features can involve servers outside the European Union: usage analytics, only if you accept it, and the push service of your device, only if you turn on notifications (their content is encrypted, so the push service can’t read it). In those cases the data is covered by the safeguards the law requires, such as an adequacy decision or the European Commission’s standard contractual clauses.

8. Cookies and storage on your device

Letsss uses cookies it needs to work, and analytics cookies only if you accept them. You can change your choice at any time with “Cookie settings” at the bottom of each page, or with “Privacy choices” on the You page.

• a session cookie, to keep you signed in during a visit;
• a “remember me” cookie, so you stay signed in until you sign out (for up to 400 days);
• a security cookie (XSRF-TOKEN), which protects forms from forged requests;
• a language cookie (letsss_locale), if you pick a language before signing in;
• a consent cookie (letsss_consent), which remembers your cookie choice for 6 months;
• analytics cookies, only if you accept: they tell visits apart so we can see how Letsss is used, for up to 13 months.

The app also stores a few small notes on your device (local storage): when you said “not now” to installing the app or to notifications, and which page to go back to. They never leave your device.

We use no advertising or social media cookies.

9. How long we keep it

These periods are applied automatically.

• Your account: as long as you have one. See “Deleting your account” below.
• Community activity (plans, votes, reviews, points, check-ins): as long as the community exists, because everyone’s balances and history depend on it. When a community is deleted, all its data is erased 7 days later (the time to change your mind).
• Sign-in links and codes: they work once, for 15 minutes. The records (email, time, IP address) are deleted after 30 days.
• Sessions: you stay signed in until you sign out, for up to 400 days. Inactive sessions are cleaned up automatically.
• Requests to join: they expire after 30 days. Deleted 6 months after a decision, a withdrawal or the expiry.
• Email invitations: they expire after 14 days. The email address is deleted 90 days after the invitation is accepted, expires or is withdrawn.
• Reports and the audit log: as long as the community exists. Closed reports and audit log entries are deleted after 3 years; a report that is still open stays until someone handles it.
• Notifications in the app: 12 months.
• Server logs: 14 days.
• Usage analytics (if you accepted it): up to 14 months.
• Backups: 30 days, then overwritten.

10. Deleting your account

You can delete your account at any time from your account page. When you do:

• you leave every community. Upcoming plans you lead are cancelled and everyone’s deposits are returned. If you own a community, it passes to the successor you named, or else to its longest-serving admin;
• erased: your email address, name, photo, bio, gender and timezone, your sign-in links and codes, sessions, notifications and push addresses, your Google sign-in link, and your email address on invitations sent to you;
• kept without your name: your past plans, attendance, points ledger, votes, ratings and props, shown as “Former member”, so that other members’ balances and histories stay correct. Text you wrote in a community (a plan description, a review comment, a wish) stays, under “Former member”.

If you want a specific piece of content removed, write to us at hello@letsss.app, before or after deleting your account. Copies in backups disappear when the backups are overwritten.

11. Your rights

Under Moroccan law 09-08 and, if you live in the European Union, the GDPR, you can:

• see the data we have about you, and get a copy in a common format (for now, ask by email; a download button is coming);
• correct it: most of it directly in the app;
• delete it: delete your account in the app, or ask us;
• object to some uses, or ask us to limit them;
• withdraw your consent at any time (analytics, notifications, track record sharing, optional profile details), in the app.

Write to hello@letsss.app from the email address of your account. We answer within one month.

If you’re not satisfied, you can complain to Morocco’s data protection authority, the CNDP. If you live in the EU, you can also complain to your country’s data protection authority.

12. Security

All connections to Letsss are encrypted (HTTPS). There are no passwords to steal: sign-in links and codes work once, expire fast and are stored only as hashes. Access to the servers is limited, admin actions are logged, and notifications are encrypted end to end. If a breach ever puts your data at risk, we’ll tell you and the authorities as the law requires.

13. Minors

Letsss is for people 18 and older. We don’t knowingly collect data about minors; if we learn that an account belongs to someone under 18, we delete it.

14. Changes to this policy

When we change this policy in an important way, we’ll tell you by email or in the app before the change applies. The date at the top of this page shows the latest version.