Privacy policy

The data controller is Stuen på 1. Sal ApS, CVR 36700076, Jernbanegade 3, 1. sal, 5000 Odense C, Danmark. E-mail: mikkel@kraez.dk.

If you have questions about how we process your data, or want to exercise your rights, contact us at the email above.

• Account data: email, encrypted password (or Google sign-in), account type (customer/venue) and language.
• Member profile: profile photo, full name, date of birth, Member ID (LM-XXXX-XXXX) and the dates your photo and name were changed.
• ID verification (optional): a photo of your driving licence, passport or ID card and a selfie. These contain facial features, which are biometric data (special category data). We only keep the result, document type, expiry date, a hash of the document (to prevent reuse across accounts) and, if applicable, which venue confirmed your face.
• Receipts: the receipt image and the details read from it (venue name, date/time, total, receipt number) and its status (verified, in review, rejected).
• Loyalty data: venues you follow, stamps, redeemed rewards, total spend and tier per venue.
• Location (optional): your approximate position is used only on your device to show nearby venues and is not stored by us.
• Device data: a session ID to keep the account active on one device only, and local settings (e.g. language and quick sign-in) stored in your browser.
• Venues: business name, address, contact details, opening hours, logo, photos, stamp cards, offers and a hashed staff PIN.
• Support: the content of emails you send us.

• Providing the app, membership, stamp cards and discounts — necessary to perform our contract with you (Art. 6(1)(b)).
• Member profile with photo, name and date of birth so venues can see the membership belongs to you and prevent sharing — contract and our and the venues' legitimate interest in preventing misuse (Art. 6(1)(b) and (f)).
• ID verification using biometric data — your explicit consent (Art. 9(2)(a)), collected separately before the check starts.
• Reading and checking receipts, including duplicates and fraud — contract and legitimate interest in protecting venues (Art. 6(1)(b) and (f)).
• Email notifications you've switched on — consent (Art. 6(1)(a)), which you can withdraw in settings.
• Security, debugging and abuse prevention (e.g. lockout after wrong PIN attempts and attempt limits) — legitimate interest (Art. 6(1)(f)).
• Legal obligations, e.g. bookkeeping for venues — legal obligation (Art. 6(1)(c)).

Receipts and ID documents are analysed by an AI model that reads text and assesses authenticity and face match. The result is used to calculate your spend and verification status.

You are never subject to a decision based solely on automated processing: receipts that can't be approved automatically go to manual review by the venue, and ID checks where the face can't be confirmed can be completed by venue staff in person. You can always contact us and have a decision reviewed by a human.

• Venues you follow: see your name, photo, Member ID, verification status, age (not your full date of birth unless you show your ID card), stamps, tier and the receipts you upload to them.
• Processors: Lovable (hosting, database, file storage, sign-in and AI gateway) and its sub-processors, including AI providers such as Google and OpenAI, which process images only to deliver the analysis.
• Google, if you choose to sign in with Google.
• Public authorities, where we are legally required.

We never sell your data or use it for third-party advertising.

Some processors may process data in the United States. Transfers rely on the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework, ensuring an equivalent level of protection.

• Account, profile and loyalty data: as long as you have an account; deleted immediately when you delete it.
• ID images and selfies: deleted right after the check and never stored permanently. Verification expires when the document expires or when you change your name or photo.
• Receipt images: as long as you have an account. When you delete your account, images are deleted; verified amounts and dates are kept anonymously (with no link to you) for venue statistics.
• Security logs and attempt counters: up to 30 days.
• Venues' accounting-relevant data: as required by the Danish Bookkeeping Act (5 years).

• Right of access — download a copy of your data under Profile → Download my data.
• Right to rectification — change your name and photo in the app (at most every 30 days, to prevent misuse); contact us about errors in e.g. your date of birth.
• Right to erasure — delete your account under Profile → Delete account.
• Right to restriction and right to object to processing based on legitimate interest.
• Right to data portability — the export is provided in a machine-readable format (JSON).
• Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.

All traffic is encrypted (HTTPS). Passwords and staff PINs are stored only as hashes. Media is kept in private storage and shown via time-limited links. Data access is enforced by database-level permission rules, and sensitive actions (stamps, receipts, verification) run only on the server.

We don't use advertising or tracking cookies. The app stores what it needs locally in your browser: your sign-in session, language, quick sign-in key (only an ID — your biometrics never leave your phone) and temporary ID-check progress. These are strictly necessary and don't require consent.

The app is not intended for children under 13. Some venues (bars and nightclubs) require you to be at least 18 to receive benefits.

When we make material changes we update the version at the top and ask you to accept the new version the next time you open the app.