Privacy notice

Français

This privacy policy explains what LET’S collects when you use it, why, who else handles it, how long it is kept and what you can do about it. It covers the LET’S app for iPhone, iPad and Android and these web pages.

Who runs LET’S

LET’S is run by Novalyft Solutions SARL (“we”, “us”). For any question about your data, write to support@letsapp.tech.

What we collect and why

Your phone number

You sign up and sign in with your mobile number and a one-time code. We use your number only to sign you in, and to stop a banned account from signing up again. It is never shown to other members.

When you ask for a code, we keep the request for 24 hours to prevent abuse: your number and a shortened version of your IP address.

Your profile

Your display name, and if you add them, a profile photo and a short status. We also keep your language, whether your identity is verified, and your settings: notification choices, online status and read receipts.

What you post and send

  • Messages in community chats and private chats: text, photos, videos, files and voice notes, your replies and your reactions.
  • Questions and replies in Questions, with their photos and tags.
  • Communities you create or join, and your role in them.
  • Your own organisation of the app: pinned, muted, unread or hidden chats, and saved, hidden or muted questions.

Photos are compressed on your phone before they are uploaded, which also removes details embedded in them, such as where the photo was taken. Animated GIFs, videos, voice notes and files are uploaded as they are, so anything embedded in them stays in the file.

While you have the app open, other members can see when you are typing, and in a private chat, that you are online (you can turn this off). We never record when you were last online. If read receipts are on, others see when you have read their messages; turning them off also stops you seeing theirs.

Your location

LET’S reads your device’s location only when you do something that needs it: seeing communities or questions near you, creating or joining a community, asking a question, or replying to one. The location is sent once over a secure connection, used to check whether you are inside the area, and then discarded. It is never stored, logged or shared, and we keep no location history. LET’S never uses your location in the background.

We keep only the outcome (allowed or refused, which community or question, when, and which account) in our server logs, for 30 days.

If you refuse location access, those actions are unavailable and the rest of the app keeps working.

Places you choose. When you create a community or ask a question, you pick its place and area on a map, from a place search, or with “Use my current location”. That place and area are saved with the community or question and shown to other members; a community also shows its place name. If you use “Use my current location”, that point is what is saved, so pick a nearby landmark instead if you prefer.

Identity verification (optional)

Verification is optional. To ask for it, you upload a photo of the front of a government-issued ID, and the back if you wish; no selfie is taken. Only our staff reviewers can see the document, in our staff panel, never other members. It is deleted as soon as a decision is made, and 30 days after upload at the latest if none is. We keep only the decision (approved, or the reason it was refused), when it was made and who made it. You can try up to three times in 30 days. If approved, a verified mark appears next to your name.

Reports and blocks

When you report an account, a message, a question or a reply, we record what you reported, the reason, your note if you add one, and a copy of the reported item with its surrounding context at that moment, so moderators see it as it was. The person you report is never told who reported them. You can follow your reports in Profile › Settings › Your reports.

When you block someone, we record the block. They are not told. You can see and undo your blocks in Profile › Settings › Blocked people.

If someone reports you, moderators see the report with your profile and your moderation history, and may remove content or suspend or ban your account. Every report is reviewed by a person; we do not use automated or AI moderation.

Your devices and notifications

For each device you sign in on, we keep its type (iPhone, iPad or Android), the app version, its language and the dates of its session. If you allow notifications, we also keep the push token that Google Firebase Cloud Messaging gives your device. We also keep a list of your notifications in the app.

Technical logs

Our servers log each request: when it happened, which part of our service was called, the result, and a shortened IP address (the last part removed). The logs never contain message content, the contents of requests, phone numbers, codes or locations.

What we do not do

We do not show ads, sell or rent your data, or use analytics or advertising trackers. LET’S does not read your contacts, does not use your location in the background and has no payments. These web pages set no cookies.

Who can see what

Other members see your display name, photo, status and verified mark, and what you post in the spaces you share with them: a community’s chat only reaches its members, a private chat only the two of you, and a question appears in the feed of members inside its area and can be opened by any signed-in member. They never see your phone number or any other contact details. Someone you have blocked, or who has blocked you, no longer sees your profile or posts.

Our staff (the moderators and administrators of Novalyft Solutions SARL) use a secured staff panel with role-based access, and every action they take is recorded. They can see your phone number, account status, communities, verification and moderation history, reported items, and ID documents waiting for review. The staff panel has no way to browse chats: staff see a message only when someone reports it.

Service providers

We share data only with these providers, and only what they need to do their job for us:

  • Hosting: our hosting provider, with servers in the United States. Our servers, database, the photos, videos, voice notes and files members upload, and our backups are all hosted there.
  • Google Firebase Cloud Messaging (Google LLC) delivers push notifications. It receives your device’s push token and each notification: a short line that may name the community, the question or the sender’s display name, and the codes the app needs to open the right screen. It never receives message text, your phone number or your location. On iPhone and iPad, notifications reach your device through Apple’s push notification service.
  • Twilio (Twilio Inc.) creates your sign-in code, sends it to you by text message (SMS) through your mobile carrier, and checks the code you enter. It receives your phone number and the code.
  • OpenStreetMap. Maps and place search come from services run by the OpenStreetMap Foundation. Your device never contacts them: our server fetches the map images and search results for you. They receive only the map area requested and the words you type in a place search, never your name, number, account, IP address or location.

Each of these providers is required to protect the data it receives at least as well as this policy does. We may also disclose data when the law requires it.

How long we keep it

  • Messages, questions, replies and their media: until you delete them, or your account is deleted (see below).
  • Deleting a chat message: you can delete it for everyone within one hour of sending it; its media is removed within 24 hours, though a short quote may remain in replies that quoted it. After that hour, you can only delete it for yourself. Questions and replies can be deleted at any time.
  • Content removed by moderators: hidden at once, permanently deleted 90 days later.
  • Reports: the copy of the reported content is removed 90 days after the report is resolved; the report record itself (type, reason, status, dates) is kept for 24 months.
  • Records of staff actions: 24 months.
  • Identity documents: deleted when the request is decided, and 30 days after upload at the latest. The decision record is kept for 24 months, or until your account is deleted.
  • Notifications: 90 days.
  • Device sessions and push tokens: deleted 60 days after that device was last used.
  • Sign-in code requests: 24 hours.
  • Uploads never attached to a message or question: 24 hours.
  • Server logs: 30 days.
  • Banned phone numbers: kept for as long as the ban stands, even after the account is deleted, so a banned person cannot sign up again.
  • Backups: our servers are backed up daily and each backup is kept for up to 30 days; deleted data disappears from the backups as they are replaced.

Deleting your account

In the app, go to Profile › Settings › Delete account. Without the app, email support@letsapp.tech with the phone number you sign in with, and we will start the deletion for you. See Delete your account.

You are signed out on every device at once. You then have 7 days to change your mind: signing in again cancels the deletion. If you are the only owner of a community, transfer it or delete it first.

After 7 days, we permanently delete your phone number, your profile and photo, the photos, videos, voice notes and files you uploaded, your devices and push tokens, your notifications and settings, your verification records, your blocks, saves and community memberships.

What stays: the text of your messages, questions and replies remains in other people’s chats and threads, shown as from “Deleted member”, whom nobody can contact. If you want something gone, delete it before you delete your account. Reports you filed and records of staff actions stay for the periods above, linked to an anonymous account record only.

Your rights and choices

  • See and correct: you can see and edit your profile at any time in the app. If something we hold about you is wrong and you cannot fix it there, write to us.
  • Get a copy: to ask what personal data we hold about you, write to support@letsapp.tech.
  • Delete: delete a message, question or reply yourself, or your whole account as described above.
  • Choose: turn notifications off by category, hide your online status, turn read receipts off, and withdraw location, camera, microphone, photo or notification access in your device settings at any time.

Children

LET’S is not meant for anyone under 18. If you believe a child under that age is using LET’S, write to support@letsapp.tech and we will act on it, which can include closing the account.

International transfers

Our servers are in the United States. Google and Twilio may also process the limited data described above in other countries.

Security

Every connection to LET’S uses HTTPS. We never store sign-in codes: Twilio creates and checks them, and each one works for 5 minutes only. On your device, your sign-in is kept in the system’s secure storage. Staff access is limited by role and recorded.

Changes to this policy

When this policy changes, the date at the top of this page changes with it.

Contact

Novalyft Solutions SARL. Email: support@letsapp.tech. See also Support and the Terms of use.