Who is responsible
Lonnie is operated by LONNIE TRAVEL PTY LTD (ACN 700 827 774; ABN 38 700 827 774), registered in South Australia, Australia. Questions and privacy requests can be sent to support@getlonnie.com.
What we collect and why
| Category | What it is used for |
|---|---|
| Account and age | Phone or sign-in identifier, display name, user ID and date of birth. Used to create and secure an adult-only account. |
| Profile | Bio, pronouns, home area, avatar, interests, languages, preferences and optional social links. Used for your profile and matching. |
| Identity verification | Stripe session ID, status, verification level, safe failure reason and a keyed identity fingerprint used to enforce bans. Lonnie does not download your ID document or selfie in the normal flow. |
| Trips and planning | Destinations, dates, budget, pace, visibility, trip members, proposals, activities, logistics and invitations. |
| Messages and safety | Messages, AI prompts and replies, emergency contacts, foreground location, SOS, check-in, live-status, reports and blocks. |
| Purchases and partners | Store entitlement identifiers and the commercial link you choose to open. Lonnie does not collect card or bank details. |
| Device notifications | Expo push token, phone platform, app version, alert preferences, delivery status, opaque event identifiers and app routes. Used to send the alerts you allow without putting private trip, chat or location details on the lock screen. |
| Diagnostics | Allow-listed product events and crash context used to keep the app reliable. Message bodies, phone numbers, ID data and precise location are excluded. |
Identity documents
Stripe Identity captures a government ID and live selfie inside Stripe's SDK. Lonnie's normal verification flow receives only a minimised result. We do not download the images or store a passport, licence or ID-card number. A private quarantine and automated 24-hour reaper exists as a defence if an object is ever sent to Lonnie unexpectedly.
To help prevent banned accounts from rejoining, our server briefly reads the document number, date of birth and issuing country from Stripe when available and converts them into a one-way, keyed identity fingerprint. We retain the fingerprint, not those raw document details. This is separate from the date of birth you provide for the adult-only account check. If a matching ban prevents verification, contact support to request a review.
Stripe retains verification captures under its own controls. Lonnie's 24-hour quarantine deletion rule does not describe Stripe's retention. See Stripe's privacy policy.
Website, launch updates and cookies
If you join the launch-update list, we collect your email address, consent record and, if supplied, destination, travel month and referral code. These are stored with Supabase to manage the launch updates you requested. Email support@getlonnie.com to unsubscribe or request deletion. We do not sell the list.
Where website measurement is enabled, Google analytics and advertising-conversion measurement loads only after you choose Allow. Google may receive page and interaction events, browser/device information, IP address and cookie identifiers. We disable ad personalisation and advertising user-data consent. Choosing Not now keeps optional measurement off. Your choice is saved in your browser's local storage. Use Measurement choices in the footer, where shown, to choose again; you can also clear cookies and site data in your browser. See Google's privacy policy.
Our website hosting and security services process connection information, such as IP address and request details, to serve pages and protect against abuse. These necessary functions are separate from optional measurement.
Founding invitation requests
If you apply for membership, we collect your full name, mobile number, selected destination, arrival date and Instagram handle, together with the request time and your agreement to be contacted. If you use a referral code, we record its redemption against your application. We use these details to review applications, manage referrals and contact you by phone or Instagram about access. An application or referral does not verify your identity, approve membership or subscribe you to an email list.
Requests are stored in our website’s private Cloudflare D1 database. Cloudflare Turnstile processes connection and browser information to protect the form from automated abuse. These records are not public. You can ask us to access, correct or delete your request through our contact form. We retain requests only as needed to manage founding access and any applicable legal obligations.
Contacting us through the website
When you submit the contact form, we use your name, reply email, selected topic and message to respond to your request. The website sends these fields through a Supabase server function to our support mailbox hosted by Namecheap Private Email. Contacting support does not subscribe you to marketing.
Cloudflare Turnstile checks the submission for automated abuse. It processes connection and browser information for that security check. Please do not send passwords, payment details or identity documents through this form. Support correspondence is retained as needed to resolve the request and meet applicable legal obligations; you can request access or deletion through the contact form. See Cloudflare’s privacy policy and Namecheap’s privacy policy.
Who can see your information
- Eligible verified travellers see only the profile and trip details allowed by your visibility choices.
- Trip, group and activity members see content for the workspace they joined.
- Emergency contacts receive only the safety alert or link you trigger.
- External travel or payment providers receive only the link or query you choose to open. Their own privacy policy then applies.
Service providers
| Provider | What they process |
|---|---|
| Supabase | Sydney-hosted authentication, database, private storage and server functions. |
| Stripe Identity | Government ID and selfie capture, verification session and result. |
| Apple, Google and RevenueCat | Sign-in, store purchase and entitlement identifiers. |
| Expo + Apple/Google push services | Device token, app/project identifier, short privacy-safe alert copy and opaque app route. |
| Anthropic | The AI question and minimum trip context needed to answer it. |
| Twilio | Phone number and the minimum OTP or safety message needed for delivery. |
| PostHog and Sentry | Allow-listed product events, crash and performance context with default PII collection disabled. |
Some providers and their subprocessors operate outside Australia. Lonnie limits each transfer to what the selected feature needs and reviews provider controls under Australian Privacy Principle 8.
Likely overseas processing includes the United States for Stripe, Anthropic, Twilio, RevenueCat, Expo, Apple and Google services, and our reviewed PostHog and Sentry endpoints. Primary Supabase app data is in Australia. Website delivery through Sites and Cloudflare, and providers' support and subprocessor networks, can involve other countries. The countries depend on the service and network used; this is not a promise that all information stays in Australia or the United States. Contact support for information about a particular provider or transfer.
Location and safety
Lonnie does not request background location. Foreground location can be attached to an SOS, check-in or live-status link you choose to use. A live share expires at the selected time and can be revoked immediately. Harm reports are restricted to the reporter and authorised Trust and Safety handling.
Retention and deletion
- Profile, trip, message and planning content is held until you delete it or your account, unless a legal hold applies.
- Live shares expire automatically. Product analytics has a 12-month target and diagnostics a 90-day target.
- Safety and moderation audit records may be retained for seven years with direct identifiers detached where appropriate.
- Account deletion starts immediately and an automated backstop completes remaining account and private-storage deletion within 24 hours, subject to limited legal retention.
Identity fingerprints are deleted with the account unless the account is banned. A banned account's fingerprint is retained separately from its profile after deletion to enforce the ban. You can ask support to review a ban or its associated information.
Your choices and rights
You can edit profile and trip details, remove social links, revoke location, leave workspaces, block a traveller and delete your account. Ask for access, correction, export or deletion by emailing support. If a privacy concern is not resolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
To make a privacy complaint, email support with the issue and the outcome you seek. We may verify your identity, investigate and explain our response or any reason we cannot fulfil a request. We aim to respond within 30 days and will tell you if more time is needed. You may take an unresolved complaint to the OAIC.
Children and changes
Lonnie is for adults aged 18 and over. Material policy changes are shown in the app before they apply, and a new consent is collected where appropriate.