Privacy policy.

1. Information we collect

The information we receive depends on how you use Lavabee:

• Account and contact information. Your name, email address, account credentials, and information you provide when contacting us or subscribing to our newsletter.
• Location and preferences. A city, ZIP code or search area you choose, saved places, and product preferences. If you grant location permission, we receive your device’s location to find nearby listings. Location information can be precise.
• Membership and transaction information. Subscription status, purchase history, transaction identifiers and payment confirmations. Payment providers and app stores process your payment details; Lavabee receives information needed to manage access and resolve payment questions.
• Farm and claim information. Business names, addresses, contact details, websites, your relationship to an operation, verification correspondence, and licenses or certificates you submit. These documents may contain personal or sensitive information. Only provide what is needed for your claim.
• Usage and technical information. IP address, browser and device details, app version, pages and features used, interactions, and diagnostic or security logs. Service providers may collect some of this information through cookies or similar technologies.
• Farm content and directory records. Information supplied by farm operators and information from public records or other directory sources. Participating farms may provide photos, videos and descriptions for display through Lavabee.

We receive information directly from you, from your use of the services, and from providers that support payments, subscriptions, communications and directory features.

2. How we use information

We use information to provide and maintain Lavabee; authenticate accounts; show relevant listings; manage saved places, memberships and purchases; review farm claims; deliver farm content; respond to support requests; send service notices and requested newsletters; understand performance; prevent misuse; and meet legal obligations.

Location information supports nearby searches. Verification documents help our team assess your connection to a farm or market. Providing a claim document does not make that document part of your public listing.

3. When we share information

• Service providers. We use providers for hosting, storage, payments, subscription management, email, analytics, maps and security. They receive information relevant to those services. Depending on the feature and platform, these include Stripe, Apple, RevenueCat, Google Analytics, Kit, Resend and Cloudflare.
• Public listings and farm content. Business information and content intended for a listing can be visible to other users. Claim documents and account credentials are not intended for public display.
• Legal and safety needs. We may disclose information to comply with legal process, protect people or our services, investigate fraud, or establish or defend legal rights.
• Business changes. Information may be transferred as part of a merger, financing, acquisition or sale of business assets, subject to applicable protections.
• At your direction. We may share information when you ask us to or authorize a particular disclosure.

External websites, farm operators, app stores and payment providers may handle information under their own policies when you interact with them directly.

4. Cookies, analytics and permissions

We use browser storage and similar technologies for functions such as keeping you signed in. The website uses Google Analytics to understand visits and feature usage. Its configuration disables Google signals and advertising-personalization signals. Analytics may still process device identifiers and usage information.

You can manage cookies and local storage through your browser. Blocking storage may affect sign-in or other features. Google also provides an Analytics opt-out browser add-on. Browser settings and add-ons do not necessarily control analytics in a mobile app.

You can change location and notification permissions in your device settings. Declining location access does not stop you from choosing a search area manually. Map, media and other external services may receive technical information, such as an IP address, when their content loads.

Browser “Do Not Track” settings are different from legally recognized opt-out signals. See the U.S. privacy rights section for information about choices available under applicable law.

5. Retention and security

We keep personal information for as long as reasonably needed for the purposes described here. Relevant factors include whether your account is active, whether a claim or support request is unresolved, and our tax, accounting, fraud-prevention and legal obligations. Different records may therefore have different retention periods.

Deletion requests are subject to applicable exceptions. Records needed for legal obligations or disputes, and copies in backups, may remain for a limited period after a request is completed. We use reasonable safeguards designed to protect information, but no storage or transmission method can guarantee complete security.

6. Your choices and requests

Email contact@lavabee.com to request access to, correction of, or deletion of your personal information or account, or to ask about a directory record. Please identify the account or listing involved and the action you want us to take. Do not email your password or unnecessary identification documents.

Use the unsubscribe link in marketing emails to stop receiving them. We may still send account, security or transaction messages. Uninstalling the app does not itself delete your account. An account-deletion request also does not automatically cancel an app-store subscription; manage that subscription through the store where you purchased it.

7. U.S. privacy rights

Depending on your state and which laws apply to our business, you may have rights to access or obtain a copy of information, correct inaccuracies, request deletion, and opt out of sale, targeted advertising or certain consequential profiling. California residents may also have rights concerning categories of information, disclosures, and limits on certain uses of sensitive information. These rights have legal exceptions.

Submit requests to contact@lavabee.com. We may verify your identity and an authorized agent’s authority using information appropriate to the request. We respond within the period required by applicable law and do not unlawfully discriminate for exercising privacy rights.

If we deny a request, you may appeal by emailing the same address with “Privacy appeal” in the subject. Where available, you can also complain to your state attorney general or privacy regulator. Applicable opt-out rights may include use of a recognized browser signal, such as Global Privacy Control.

The collection categories, sources, purposes, recipients and retention criteria relevant to Lavabee are described above. Account credentials, precise location, and some details in claim documents may be sensitive information; we use them to support the requested features, verification, security and legal compliance.

8. Children’s privacy

Lavabee is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate steps to remove it.

9. International visitors

Lavabee is operated by a U.S. company. Information may be processed in the United States and other countries where our providers operate, whose laws may differ from those where you live. Where applicable law requires safeguards for a transfer or provides additional privacy rights, those requirements apply. Contact us to ask about your information or rights.

10. Changes to this policy

We may update this policy as our services or legal obligations change. We will update the date above and provide additional notice or obtain consent when required by law.