Privacy Policy

Effective date: 17 July 2026

Last updated: 17 July 2026

Privacy contact: support@lorvexapp.com

This Privacy Policy explains how Lorvex (“Lorvex,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Lorvex mobile and web applications and the website at https://lorvexapp.com (together, the “Services”).

Lorvex is a travel social platform and marketplace intermediary associated with Lebanon. Travellers can create profiles, share travel content, chat, and discover Travel Partner offerings. Travel Partners are independent businesses. They are responsible for their trips, prices, payment collection, cancellations, refunds, and trip delivery. In the current release, Lorvex does not process travel payments for bookings made through the marketplace.

Questions about this Policy: support@lorvexapp.com.

1. Information you provide

We collect information you choose to give us when you register, update your profile, verify your account, contact support, report content, or use social and marketplace features. That typically includes:

• Account credentials (email and/or phone number, password where used)
• Date of birth (for traveler sign-up eligibility only — stored privately, not shown on your public profile)
• Username and display name
• Profile details (for example bio, country, languages, travel preferences)
• Content you post (text, photos, videos, stories, reels, comments, reactions)
• Messages and media you send in chats
• Booking enquiry details you submit to a Partner (for example name, phone, WhatsApp, traveller count, notes)
• Identity-verification materials if you request verification (for example document and selfie images)
• Support and report messages you send to us

You may also grant optional permissions (camera, photos, microphone, notifications, location) through your device settings.

2. Account and profile data

When you create an account we store an account identifier and profile record associated with your user ID. Depending on how you sign up and what you edit, this may include:

• Username and display name
• Email address and/or phone number
• Profile photo
• Bio and country information
• Verification status (email, phone, identity review status where applicable)
• Privacy and notification preferences
• Account and session metadata (such as last login and security-related flags)

We also maintain lookup indexes so usernames, emails, and phone numbers can be used for sign-in and uniqueness checks.

Date of birth: When you sign up as a traveler, we collect your date of birth to confirm that you meet the minimum age requirement (18+). This is stored in a private profile record visible only to you — not in your public profile and not shown to other users.

3. Posts, reels, stories, comments and chats

If you use social features, we process:

• Posts, reels and stories: captions/text, media files, tags/mentions, visibility-related metadata, and engagement data (for example likes, comments, views where enabled)
• Comments and likes: your user ID, related post/reel identifiers, and timestamps
• Chats and messages: message text, optional media or voice attachments, read/receipt metadata, and room membership for direct, group, city, or package-related chats
• Social graph: follows/buddies, buddy requests, blocks, and related notifications
• Passport / stamp features: stamp and related travel-achievement data tied to your account where the product shows them
• Saved items: posts or trips you save

Shared chat rooms (for example city or package rooms) may retain redacted or anonymised message records after a member leaves or deletes their account, so other members’ conversation history is not destroyed.

4. Booking and contact information

When you request a booking or contact a Travel Partner through Lorvex, we process the enquiry details you submit (such as name, phone, WhatsApp contact, number of travellers, notes, and package/trip identifiers) and share relevant details with the Partner so they can respond.

Important: Partners independently set prices, collect payment, handle cancellations and refunds, and deliver the trip. Lorvex acts as an intermediary marketplace surface. Partner terms and payment practices apply to the commercial relationship between you and the Partner. Lorvex does not process travel payments in the current release.

5. Photos, videos and files

Media you upload may be stored in our cloud storage and referenced from your profile, posts, stories, reels, chats, trip memories, or identity-verification requests. This can include:

• Profile photos
• Post, reel and story media
• Chat attachments
• Identity-document and selfie images submitted for verification
• Partner branding or package media (for Partner accounts)

6. Location data

Location is optional and controlled by your settings and device permissions.

If you enable location sharing features (and have not enabled privacy modes that hide you), we may process approximate or precise location to show you on maps, update live-map presence, or centre map experiences. Location may be stored in your private location cache and, when you choose to share, in public map presence records.

You can turn off sharing or revoke device location permission at any time. Map features may still request tiles from map providers even when your personal location is not published.

7. Device data and push tokens

To operate securely and deliver notifications, we may process:

• A device identifier generated by the app for security and verification flows
• Device/platform information used for push delivery
• Expo push tokens and related enablement status
• Session information (for example device identifier, IP address and user-agent where recorded for session security)

Push notifications depend on your OS permission and in-app notification settings.

8. Diagnostics and security logs

We process limited technical and security information to keep the Services reliable and safe, including:

• Application error and crash diagnostics (when diagnostics tooling is enabled for a build)
• Authentication and session security events
• Email verification / OTP delivery and attempt metadata
• Operational logs needed to investigate abuse, outages, or account security issues

We do not treat these logs as a public social feed. Retention of operational logs may differ from retention of your profile content.

9. How we use data

We use personal data to:

• Create and secure your account
• Provide profiles, social feed, chatting, passport/stamp features, and Partner discovery
• Send verification codes and account security messages
• Deliver push and in-app notifications you enable
• Process booking enquiries and connect you with Partners
• Moderate content, investigate reports, and enforce safety rules
• Improve reliability, debug errors, and protect against fraud or abuse
• Comply with legal obligations and respond to lawful requests
• Communicate about the Services (including support replies)

We do not sell your personal information.

10. How data is shared

We share information only as needed to run the Services:

• Travel Partners — to handle enquiries/bookings you initiate (contact and trip details you provide)
• Other users — profile and content you make visible; messages you send; map presence if you share location
• Service providers (“processors”) — hosting, databases, authentication, storage, email delivery, maps, push, and diagnostics as described below
• Authorities — where required by law or to protect rights, safety, or security

Partners receive the booking/contact information needed to respond to you. They process that information under their own practices for trip delivery and payment.

11. Processors and technology providers

Depending on the feature you use, Lorvex uses infrastructure and tools that process data on our behalf or as providers of map/network services, including:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions) — account auth, database, media storage, backend logic
• Expo (including push notifications and device APIs) — app runtime, permissions, push token delivery
• Resend — transactional email such as email verification codes
• MapLibre and MapTiler — map rendering and map styles/tiles
• Sentry — error and crash diagnostics when enabled for a given app environment

These providers process data according to their own terms and our configuration. Using the Services necessarily involves sharing relevant technical or account data with them.

Payments: In the current release, Lorvex does not process travel payments. Partner payment handling is outside Lorvex’s payment processing.

12. Data retention

We retain personal data only as long as needed for the purposes above, including:

• Active account data while your account remains open
• Content and media until you delete them or delete your account (subject to backups and shared-thread needs)
• Booking records may be retained in anonymised or limited form after account deletion so Partners and Lorvex can keep operational history without your profile identity
• Security, OTP and audit logs for a limited operational period needed for security and abuse prevention
• Support/report records as needed to handle the request and protect the community

We aim not to keep identifiable account data longer than necessary after deletion completes.

13. Account deletion

Travellers can delete their account immediately from inside the app:

Profile → Settings → Account Management → Delete Account

You must confirm with the word DELETE and re-authenticate (password where applicable). Deletion permanently removes your authentication account and associated personal profile data, and cascades cleanup across content, media, social links, sessions, push tokens, indexes, and related personal records, subject to:

• Shared chat history may be redacted rather than fully erased for other members
• Booking records may be anonymised rather than fully erased
• Partner accounts cannot self-delete in-app and must contact support@lorvexapp.com
• Limited security/operational records may remain where needed for integrity, dispute, or legal reasons

After successful deletion you are signed out and cannot sign in with the deleted credentials.

More help: Delete Account.

14. Children and minimum age

Lorvex traveler accounts are intended for users aged 18 and older.

If you are under 18, do not create a traveler account or provide personal information.

We collect date of birth during traveler sign-up and store it privately to verify eligibility. If we learn that we have collected personal information from a person under 18 in violation of our age policy, we will take steps to delete it.

Parents or guardians who believe a person under 18 has used Lorvex should contact support@lorvexapp.com.

15. Your rights

Subject to applicable Lebanese and other applicable law, you may:

• Access or correct profile information in the app
• Adjust privacy, notification and location settings
• Delete content you control
• Delete your account in-app (travellers)
• Contact us to ask questions about processing, or request assistance with access, correction, or deletion where the app does not already provide a control

Email: support@lorvexapp.com. We may need to verify your identity before fulfilling certain requests.

16. Security

We use industry-standard cloud security controls provided by our infrastructure (including authenticated access, server-side rules, and encrypted transport to our services over HTTPS). Passwords are handled by our authentication provider and are not stored by Lorvex in readable form.

No method of transmission or storage is completely secure. You are responsible for keeping your password and device access confidential.

We do not claim specific compliance certifications in this Policy.

17. International data processing

Lorvex is associated with Lebanon, but our processors (including Firebase and other cloud/map/email providers) may process and store data in data centres outside Lebanon, including in the United States or other countries. By using the Services, you understand that your information may be transferred to and processed in countries that may have different data-protection rules than your home country. We use reputable providers and contractual/technical safeguards appropriate to the Services.

18. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective date / Last updated date and post the updated Policy at https://lorvexapp.com/privacy. Material changes may also be highlighted in the app or by email where appropriate. Continued use of the Services after an update means you accept the revised Policy.

19. Contact details

Lorvex
Website: https://lorvexapp.com
Privacy / support email: support@lorvexapp.com
Country: Lebanon

For Partner account closure requests, email support@lorvexapp.com.