Privacy Policy

Lope & Lark is a private coordination tool for sharing holiday homes with family and friends. We are not a marketplace — there are no public listings, no strangers, and no platform transaction fees on stays.

We collect only what's needed to run the service:

• Account information — your name, email address, and password (hashed). Provided when you sign up.
• House information — photos, descriptions, costs, calendar dates, and house guide content you add.
• Stay information — dates, costs, and payment tracking status for stays at houses you manage or visit.
• Usage data — page views and interactions to help us improve the product. Collected via privacy-respecting analytics.
• Device information — browser type, operating system, and screen size. Used for debugging and ensuring the app works well on your device.

• We do not collect or process stay payments. Payments between you and your family happen off-platform (bank transfer, Revolut, cash). We only track the status.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.
• We do not use your data to build advertising profiles.

• To provide and maintain the service — managing your house, calendar, stays, and invitations.
• To process your subscription payment via Stripe (the only payment we handle).
• To send you essential notifications — stay requests, confirmations, and house updates.
• To improve the product based on aggregated, anonymised usage patterns.

We use a small number of trusted services to run Lope & Lark:

• Supabase — database and authentication hosting.
• Stripe — subscription billing only. Stripe handles your card details directly; we never see or store your full card number.
• Analytics — privacy-respecting analytics to understand how the product is used. No personal data is shared with advertising networks.

Your data is stored securely in cloud infrastructure with encryption at rest and in transit. Access to the database is restricted via role-based permissions. We follow security best practices including row-level security policies on all tables.

You have the right to:

• Access — request a copy of the data we hold about you.
• Correction — update or correct inaccurate information.
• Deletion — request that we delete your account and associated data.
• Export — receive your data in a portable format.
• Withdraw consent — unsubscribe from non-essential communications at any time.

To exercise any of these rights, contact us at the address below.

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising or tracking cookies.

We may update this policy from time to time. We'll notify you of significant changes via email or an in-app notice. The "last updated" date at the top reflects the most recent revision.

If you have questions about this privacy policy or how we handle your data, please reach out to us at [email protected].