Please wait…
What Loca collects about you, why, who sees it, and what you can do about it.
[LEGAL ENTITY NAME] (registration number [REGISTRATION NUMBER]), [REGISTERED ADDRESS, ULAANBAATAR, MONGOLIA], is the controller of the personal data described here.
For anything in this policy, including the requests described under "Your rights", write to [PRIVACY@EXAMPLE.MN].
Account details — your name and email address, and your phone number if you give us one. We need these to have an account at all, and the phone number to send booking reminders and waitlist offers by SMS.
Location — your device’s position, when you allow it. This is what sorts places by how far away they are, powers "near me", and puts you on the map. You can refuse, and the app works with Ulaanbaatar as the default. We never track your location in the background.
What you buy and book — orders, bookings, reservations and tickets, so you and the business both have a record.
What you search for — your queries and the results you tap, tied to your account. These make search better, and they are what a business sees, in aggregate and never identified, in its "how customers found you" report.
What you contribute — reviews, ratings, photos, answers, check-ins and edit suggestions, along with the account that made them, which is what makes moderation possible.
Technical data — a device identifier for push notifications, and crash reports when the app fails.
We do not collect contacts, health data, financial account details, or any special category of personal data. We do not use advertising identifiers, and there is no advertising SDK in the app.
We do not receive, process or store card numbers or bank credentials. Payments run through QPay and SocialPay: you authorise them in your own bank’s app, and what reaches us is a confirmation that the payment succeeded, plus the amount and a reference.
Reviews, ratings, photos, answers and check-ins are public. Your name is shown shortened — a first name and an initial — on everything public, never in full.
Your contributor profile at /u/… is off by default. It only exists if you turn it on in Preferences, and it shows nothing that was not already public.
Your orders, bookings, tickets, saved places, messages and notifications are never public.
The business you book or order from receives what it needs to serve you: your name, the details of the booking or order, and your contact number where the booking requires one.
Payment providers (QPay, SocialPay) receive what is needed to take the payment.
Push notifications are handed to the platform your device already uses: Apple on iPhone and iPad, Google on Android, and your browser’s own push service on the web (Mozilla, Microsoft or Google). They receive a device token and the notification itself. On phones we send through Expo, which relays it onward and stores nothing.
Other service providers acting on our instructions: MessagePro for SMS (your phone number and the message), Sentry for crash reports, and Google (Firebase) for crash reports and app-usage analytics in the mobile app. They may not use it for their own purposes.
We do not sell your personal data, and we do not share it with data brokers or advertisers.
We may disclose data where the law requires it, or to investigate fraud, abuse or a threat to someone’s safety.
Account details are kept while your account is open, and removed when you close it.
Payment, order and booking records are kept as long as accounting and tax law require, with your name removed once your account is closed.
Reviews and photos stay published unless you delete them, or we remove them under the Terms.
Search history is kept for a limited period to improve results, and is not used to identify you afterwards.
You can see and take a copy of everything we hold about you: Account → Data & privacy → Download your data, in the app or on the website.
You can delete your account from the same screen, in the app or on the website. Your personal details are removed permanently and you are signed out everywhere; records we must keep for accounting remain, with your name removed.
You can correct your details in Account, and change what you receive in Preferences.
If you want something we do not offer as a button — restriction, objection, or a complaint about how we have handled your data — write to [PRIVACY@EXAMPLE.MN] and we will answer.
Loca is not for people under 18, and we do not knowingly collect data from them.
When this policy changes materially we will tell you in the app or by email before the change takes effect. The date at the top of this page is when it was last changed.