Privacy policy

Last updated 1 November 2026

Who we are

Lure is run by J.B. Pool, Amsterdam, the Netherlands. J.B. Pool is responsible (the "controller") for your data. Contact: info@lureapp.nl. A real person answers.

What we keep

Your first name, profile photo, bio and Lure handle. Your friends list is private: nobody can see who or how many friends you have. For places: the email you log in with. Your check-ins: which place and when. Lures you claimed, stamp cards, points, and who you’re friends with on Lure and where you met. Anything you report.

Your location

Lure uses your location while the app is open to show what’s near you and to confirm you’re really at a place when you check in. Normally we only store the place you checked into, never where you walk. Only if you switch on Live location do we keep your last position (rounded to about 10 metres), and only the friends you choose can see it on the map. Only the latest point is kept, it disappears after 2 hours, and you can switch it off any time under You.

Stories, posts and chats

Photos and videos you post are visible to other Lure users: stories for 24 hours, posts at a place for 7 days. “Open to meet” is off by default. When it’s on, only people checked in at the same place can see you, and a chat only opens if you both wave. Chats close after 4 hours. You can block or report anyone.

Notifications

If you allow them, we send push notifications through Apple and Expo, for example when someone waves back or a friend checks in nearby.

Get home safe

This sends your location from your phone through WhatsApp, iMessage or another app you pick. It doesn’t pass through Lure and we don’t keep it.

For places

Owners give us an email or phone number so we can reach them. We show places visit counts, never who visited.

Why we may use it

To run the app you signed up for (contract), to keep Lure safe and stop abuse (legitimate interest), and Live location, notifications and photos only because you switched them on (consent, which you can withdraw any time).

Who helps us

Our database runs on Supabase in Frankfurt (EU). Payments for places go through Apple; we never see card details. Push notifications go through Expo and Apple. Map data comes from OpenStreetMap. These providers only process data for us under a data processing agreement. We don’t sell your data and there are no ads or ad trackers in Lure.

How long

As long as you have an account. Delete your account under You → Delete account and everything tied to you is erased right away. Backups roll over within 30 days.

Your rights

Under the GDPR you can see, correct, export or delete your data, and object to how we use it. Ask us using the contact details above. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Contact: info@lureapp.nl