Privacy Policy — Lure

Last updated: April 2026

Who are we?

We are Lure, the app that lets you discover, create and support live moments around you. Lure is a sole proprietorship owned by Lucas Killian, based in the Netherlands. KVK: 42034872.

Questions about your privacy? Email hi@joinlure.com. We always respond personally.

What data do we use and why?

Your account: when you create an account, we ask for your name, username, email address and phone number. We need this to create and manage your account.

Your profile photo: you can upload a profile photo. This is optional. If you do, it will be visible to other Lure users.

Your location: Lure needs access to your GPS location to show you Lures nearby and to place your Lure in the right spot. We ask for your explicit permission. You can withdraw this at any time in your phone settings. We never store your location permanently — we only use it while you actively use the app.

If you choose to enable "This moment moves" when creating a Lure, your location updates every 30 seconds and is visible to other users nearby for the duration of that Lure. This is entirely opt-in — you choose this yourself when creating a Lure. You can stop sharing at any time by ending the Lure or tapping Stop in the Lure detail screen.

Messages and activity: when you create, join, like or send a message in a Lure, we store that activity. This is needed for the app to work and for your activity overview in your profile.

Payments: when you boost someone via Lure, your payment is processed by Stripe. Lure never sees your full payment details — that goes directly through Stripe. If you want to receive payouts as a creator, we ask for your name and IBAN. We use this exclusively for transfers.

Who do we share your data with?

We never share your data with advertisers or parties that benefit commercially from it. We only work with parties essential to running Lure:

Supabase — our database and authentication infrastructure. Your data is stored on servers in Frankfurt, within the EU. supabase.com/privacy

Stripe — processes all payments and payouts in the app. stripe.com/privacy

Resend — sends transactional emails like your verification code. resend.com/privacy

Google Maps — powers the map in the app where Lures are shown. policies.google.com/privacy

Transip — our hosting and email provider for joinlure.com. Servers in the Netherlands. transip.nl/juridisch

We have data processing agreements with all of these parties so your data is protected with them too.

Is my data stored outside the EU?

Stripe and Google Maps may process data outside the European Economic Area. Both use EU-approved standard contractual clauses to protect your data. Supabase and Transip process your data within the EU.

How long do we keep your data?

We don't keep your data longer than necessary.

Account data: as long as you have an account. If you delete your account, we delete your data within 30 days.
Payment records: 7 years as required by law.
Location data: never stored permanently.
Usage activity: maximum 12 months after your last use.

What are your rights?

Under GDPR you have the following rights. You can exercise them by emailing hi@joinlure.com. We respond within 30 days.

Access — you can request what data we hold about you.
Correction — if your data is incorrect, we'll fix it.
Deletion — you can delete your account and all associated data via the app.
Objection — you can object to processing based on our legitimate interest.
Data portability — you can request your data in a readable format.
Withdraw consent — you can withdraw location permission at any time via your phone settings. This does not affect the lawfulness of processing before withdrawal.

How do we secure your data?

We take the security of your data seriously. All connections are encrypted via SSL/TLS. Our database is secured with Row Level Security, meaning users can only see their own data. We use two-factor authentication on all our internal systems. Payments are handled entirely by Stripe so we never have access to your full payment details.

Want to file a complaint?

Not happy with how we handle your data? We'd love to hear from you directly at hi@joinlure.com. You also have the right to file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

Changes to this policy

If we make important changes to this privacy policy, we'll let you know via the app or by email.

Lure · Lucas Killian · hi@joinlure.com · joinlure.com · KVK 42034872