Lunvi
Partner login

Privacy policy

Last updated: 27 October 2026

1. About this policy

This policy explains what personal data Lunvi (“we”) processes, why, on what legal basis, how long we keep it and what rights you have. It covers the Lunvi app and website, customers, website visitors and contact persons of partner venues. It doesn't cover processing by others, for example by venues in their own systems.

Lunvi connects customers with venues (restaurants, cafés, fast food places, bakeries, shops) that sell today's leftover food at a discount. We show no ads, build no marketing profiles and sell no data.

2. Where the data comes from

From what you give us: when you create an account, reserve, leave a review, contact us or register a venue. Some technical data (such as your IP address) automatically reaches our technical providers when you use the app.

3. What data we use, why and for how long

PurposeDataLegal basisRetention
Reservationsname, phone, reserved bag, quantity, time, code, status (reserved, picked up, cancelled)contract: to make and hand over the reservationwhile the venue exists; you can ask us to delete your name and phone at any time
Customer account (optional)email, password (stored encrypted), name, phone, country, languagecontractuntil you delete the account in the app
Venue accountemail, password (encrypted), company name, IDNO, venue name, address, map position, phone, website, logo, offers, reservations receivedcontract; verifying partnersuntil the account and venue are deleted
Reviewsrating (Good, OK, Bad) linked to a picked-up reservation; we don't show who gave itlegitimate interest: venue qualitywhile the reservation exists
Messages and reportsname, email or phone, message, reservation code, venuelegitimate interest: replying and preventing misuseuntil resolved, at most 2 years
Preventing misusephone from reservations (limit on active reservations), venue reportslegitimate interest: service safetywhile the reservation or report exists

Data that stays only on your phone and never reaches us: favourites, blocked venues, dietary preferences, language, reservation history, privacy consent and messages you sent from the app. You delete it by clearing the site data in your browser.

Location, if you allow it, is used only on your phone to show nearby offers and distances. We don't store or receive it.

4. Who else sees the data

  • The venue you reserve at sees your name, phone and code, only to hand over your order. Venues may not use them for anything else.
  • Technical providers that run the app: Supabase (database and accounts, servers in the European Union), Netlify (website hosting), OpenStreetMap (map and address/city search), Google Fonts (fonts), cdnjs, unpkg and jsDelivr (app libraries). They receive your IP address and technical browser data when the map, fonts or app load.
  • Authorities, only where required by law.
  • A future owner of Lunvi, if the service is taken over by a company, under the same protection rules.

5. Where data is processed

The database is on servers in the European Union. Some technical providers may process technical data outside Moldova or the EU; we use providers with recognised safeguards.

6. How we protect data

We use encrypted connections (HTTPS), passwords are stored encrypted, and the database has access rules: each venue sees only its own reservations, and customers can't see other customers' data. If a security issue occurs that may affect you, we'll tell you without delay.

7. Automated decisions

We make no automated decisions with significant effects on you. The app only sorts offers by distance or date and filters them by the preferences you choose.

8. Cookies and local storage

We don't use advertising or tracking cookies. The app uses your browser's local storage for your settings and to keep you logged in. Technical providers (such as the map and fonts) may receive your IP address when their resources load.

9. Your rights

  • Access your data and get a copy.
  • Rectification: you can change your name, phone and country directly in the app.
  • Erasure: delete your account at any time in the app; for reservation data without an account, write to us.
  • Restriction and objection to processing based on legitimate interest.
  • Portability of the data you provided.
  • Withdraw consent where processing is based on consent.

To exercise your rights, write to dealmail365@gmail.com. We reply within 30 days. Without a name and phone you can't reserve, as the venue needs them to hand over your order.

10. Children

Lunvi is not intended for children under 16.

11. Controller and contact

Lunvi, Chișinău, Republic of Moldova · email: dealmail365@gmail.com. The full details of the legal entity will be published here once it is registered.

If you're not satisfied with our reply, you can complain to the National Center for Personal Data Protection of the Republic of Moldova or to the data protection authority in your country.

12. Changes

We may update this policy, for example when we add new features. The current version is always on this page with its update date. We'll tell you in the app about important changes.