Privacy policy
Lajnu · effective from 10 October 2026
- No ads, no analytics, no cookies. We don’t sell data.
- We only store what a team needs for attendance: names, answers to sessions and a record of contributions.
- Waitlist: we use your email for a single message when the app launches.
- Data is stored on a server in the EU (France). Write to us and we’ll show, correct or delete your data.
1. Who is the controller
Štěpán David, Company ID (IČ) 02509113, Táborská 1791, 393 01 Pelhřimov, Czech Republic, info@stepandavid.cz (“operator”, “we”). We have not appointed a data protection officer; please contact us at the email above with anything.
2. Waitlist
| Data | email, sport (optional), time of sign-up |
|---|---|
| Purpose | to let you know when Lajnu is available on the App Store and Google Play |
| Legal basis | your consent (Art. 6(1)(a) GDPR) |
| Retention | until the launch message is sent, at most 2 years from sign-up |
You can withdraw your consent at any time by writing to info@stepandavid.cz; we will then delete your email. Withdrawal does not affect earlier processing. We will not send any newsletter or advertising.
3. Team app
A team uses Lajnu at its own address (for example lajnu.com/team-name) on the web or in the Lajnu mobile app. A team is created by its organizer; the team organizer decides who is in the team and what is recorded. The organizer is therefore the controller of the team’s data and we process it on their behalf as a processor. You can contact the organizer or us directly; we will pass the request on and handle it.
| Data | player name; profile photo if uploaded by the player or the organizer (we only keep a small square without location or device data); answers to sessions (coming / not coming, number of guests); attendance; record of team contributions (amount, payment date); the team’s bank account for QR payments; a random device identifier (only its hash is stored on the server) and time of last visit |
|---|---|
| Purpose | organizing sessions, deciding whether the game is on, attendance overview and settling venue costs |
| Legal basis | the team’s legitimate interest in organizing a shared sport (Art. 6(1)(f) GDPR) |
| Retention | while the team uses Lajnu; after a team is closed we delete its data within 30 days. We delete an individual player at the request of the organizer or the player. |
Who can see team data: everyone who has the team link and selects themselves as a player. The link is not indexed by search engines, but anyone who has it can see the attendance. Please share it only within the team. Only an organizer with the PIN can answer for others and manage payments.
Sharing to WhatsApp: the Share button only opens WhatsApp with a pre-filled message. You decide what to send and to whom. Once sent, WhatsApp processes the message under its own policy.
QR payment: the code is generated on your phone. Lajnu does not make, see or connect to any payments or banks.
Name protection: if someone selects a name that is already used on another phone, they must confirm with a one-time code from the original phone, or the organizer approves them. We store the code only as a hash and it expires after 10 minutes.
Account deletion: in the app, Me → Delete my account immediately deletes your name, answers, payment records, photo and devices. The organizer can delete the whole team in Team settings. See also Account deletion.
Notifications (push)
| Data | a technical identifier for delivering notifications (a browser subscription on the web, a device token from Apple or Google in the app), the player and team it belongs to; the notification text (e.g. “Practice tomorrow, are you coming?”) |
|---|---|
| Purpose | practice reminders, “Game on!”, cancellations, gym keys and requests for organizers |
| Legal basis | your consent given by turning notifications on in the app and in your phone settings (Art. 6(1)(a) GDPR) |
| Retention | until you turn notifications off, delete your account or the app; invalid identifiers are deleted automatically |
Turn notifications off in your phone Settings (app) or with the switch in Me (web).
4. Technical data
| Data | IP address, time and address of the request, browser type |
|---|---|
| Purpose | operating and securing the service, protection against spam and abuse (rate limiting) |
| Legal basis | legitimate interest in secure operation (Art. 6(1)(f) GDPR) |
| Retention | rate limits at most 1 hour; server logs according to the hosting settings, usually days to weeks |
5. Cookies and on-device storage
Lajnu does not use cookies or any analytics or advertising tools. Fonts are served from our own server. We only store the following in your browser’s storage (localStorage):
lajnu.tokens,lajnu.team,lajnu.teams– random identifiers that tell the app which player you selected in which team, and the list of your teams on the device. The app cannot work without them. They are removed with “switch player”, by deleting your account or by clearing browser data.lajnu.theme– your chosen appearance (dark / light), only if you change it.lajnu.lang– the website language, only if you pick one.
All of this is strictly necessary for a function you request, so no consent is needed.
6. Who receives data
- Hostinger International Ltd. (Cyprus): server and database hosting, servers located in France. Acts as a processor.
- Notification delivery services, only if you turn notifications on: Apple (Apple Push Notification service), Google (Firebase Cloud Messaging), and on the web your browser’s push service (Apple, Google, Mozilla, Microsoft). They receive the device identifier and the notification text, nothing else. These services may process data in the USA; the transfer is covered by the EU–US Data Privacy Framework and standard contractual clauses.
- Apple and Google, as operators of the App Store and Google Play, process app download data under their own policies; we only see aggregate statistics.
We do not share data with anyone else, unless required by law or an authority.
7. Your rights
You have the right:
- to access your data and get a copy,
- to have inaccurate data corrected,
- to erasure (“to be forgotten”),
- to restriction of processing and to data portability,
- to object to processing based on legitimate interest,
- to withdraw consent at any time (waitlist).
We handle requests within one month at info@stepandavid.cz. You may also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority of the EU country where you live.
8. Children
Lajnu is intended for adults and young people aged 15 and over. If younger players are in a team, the organizer is responsible for having their legal guardian’s consent.
9. Changes
If we change this policy, we will update the effective date above. We will announce material changes in advance on the website or in the app.