Who is responsible
Lonnie is operated from Melbourne, Australia. Questions and privacy requests can be sent to support@getlonnie.com.
What we collect and why
| Category | What it is used for |
|---|---|
| Account and age | Phone or sign-in identifier, display name, user ID and date of birth. Used to create and secure an adult-only account. |
| Profile | Bio, pronouns, home area, avatar, interests, languages, preferences and optional social links. Used for your profile and matching. |
| Identity verification | Stripe session ID, status, verification level and safe failure reason. Lonnie does not download your ID document or selfie in the normal flow. |
| Trips and planning | Destinations, dates, budget, pace, visibility, trip members, proposals, activities, logistics and invitations. |
| Messages and safety | Messages, AI prompts and replies, emergency contacts, foreground location, SOS, check-in, live-status, reports and blocks. |
| Purchases and partners | Store entitlement identifiers and the commercial link you choose to open. Lonnie does not collect card or bank details. |
| Diagnostics | Allow-listed product events and crash context used to keep the app reliable. Message bodies, phone numbers, ID data and precise location are excluded. |
Identity documents
Stripe Identity captures a government ID and live selfie inside Stripe's SDK. Lonnie's normal verification flow receives only a minimised result. We do not download the images or store a passport, licence or ID-card number. A private quarantine and automated 24-hour reaper exists as a defence if an object is ever sent to Lonnie unexpectedly.
Who can see your information
- Eligible verified travellers see only the profile and trip details allowed by your visibility choices.
- Trip, group and activity members see content for the workspace they joined.
- Emergency contacts receive only the safety alert or link you trigger.
- External travel or payment providers receive only the link or query you choose to open. Their own privacy policy then applies.
Service providers
| Provider | What they process |
|---|---|
| Supabase | Sydney-hosted authentication, database, private storage and server functions. |
| Stripe Identity | Government ID and selfie capture, verification session and result. |
| Apple, Google and RevenueCat | Sign-in, store purchase and entitlement identifiers. |
| Anthropic | The AI question and minimum trip context needed to answer it. |
| Twilio | Phone number and the minimum OTP or safety message needed for delivery. |
| PostHog and Sentry | Allow-listed product events, crash and performance context with default PII collection disabled. |
Some providers and their subprocessors operate outside Australia. Lonnie limits each transfer to what the selected feature needs and reviews provider controls under Australian Privacy Principle 8.
Location and safety
Lonnie does not request background location. Foreground location can be attached to an SOS, check-in or live-status link you choose to use. A live share expires at the selected time and can be revoked immediately. Harm reports are restricted to the reporter and authorised Trust and Safety handling.
Retention and deletion
- Profile, trip, message and planning content is held until you delete it or your account, unless a legal hold applies.
- Live shares expire automatically. Product analytics has a 12-month target and diagnostics a 90-day target.
- Safety and moderation audit records may be retained for seven years with direct identifiers detached where appropriate.
- Account deletion starts immediately and an automated backstop completes remaining account and private-storage deletion within 24 hours, subject to limited legal retention.
Your choices and rights
You can edit profile and trip details, remove social links, revoke location, leave workspaces, block a traveller and delete your account. Ask for access, correction, export or deletion by emailing support. If a privacy concern is not resolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
Children and changes
Lonnie is for adults aged 18 and over. Material policy changes are shown in the app before they apply, and a new consent is collected where appropriate.