Mobile App Privacy Policy

This Privacy Policy applies to the Lisbonlovesme Admin mobile application (the "App"), a private companion app used by Lisbonlovesme staff to manage tour bookings, customer messages, and availability. The App is not intended for the general public. This policy explains what information the App accesses, stores, and transmits, and how it is protected.

Who the App Is For

The App is an internal administration tool. Access requires valid Lisbonlovesme administrator credentials. It is not designed for use by customers or the general public.

Information the App Handles

Login credentials: your administrator username and password are used to sign in to our backend. They are stored securely in the device's iOS Keychain and are never shared with third parties.

Biometric authentication: if you enable Face ID or Touch ID, authentication is performed entirely by iOS on your device. We never receive, see, or store your biometric data.

Push notification token: after you sign in, the device's push token is registered with our server so we can send you alerts about new booking requests and customer messages. Tokens are delivered through Apple Push Notification service (APNs) and, if configured, Firebase Cloud Messaging.

Business data: to do its job, the App displays customer and booking information stored on our server — such as customer names, contact details, booking references, participant numbers, amounts, and messages. This data belongs to Lisbonlovesme and is accessed only by authenticated administrators.

How the Information Is Used

To authenticate you and keep you signed in securely.

To send push notifications about new booking requests and contact messages.

To let authorised staff view and manage bookings, availability, tours, and customer communications.

Data Storage and Transmission

Credentials and session information are stored in the iOS Keychain on your device. All communication between the App and our server takes place over encrypted HTTPS connections. The App does not store customer business data permanently on the device beyond what is temporarily needed to display it.

Third-Party Services

The App relies on Apple Push Notification service (APNs) to deliver notifications, and optionally Firebase Cloud Messaging (a Google service) if configured. These providers process the push token needed to route notifications to your device. The App does not use advertising networks or third-party analytics or tracking SDKs.

Data We Do Not Collect

The App does not collect your device location, contacts, photos, or advertising identifiers, and it does not track you across other apps or websites.

Data Retention

Credentials remain in the Keychain until you log out or remove the App. Push tokens are retained on our server while your device is registered and are removed when they become invalid or you sign out. Business data is retained on our server according to our main Privacy Policy.

Your Choices

You can turn Face ID / Touch ID on or off at any time in the App's Settings, log out to clear stored credentials, and disable push notifications through your device's system settings.

Data Security

We use the iOS Keychain, encrypted network connections, and administrator authentication to protect data. No system is completely secure, but we take reasonable measures to safeguard the information the App handles.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

Contact Us

If you have any questions about this App Privacy Policy, please contact us at lisbonlovesme@gmail.com or via WhatsApp at +351 938 607 585.