Privacy Policy

What we collect

• How you sign in: an Apple or Google account, an email address, or a mobile number. We hold the one you chose, not all of them. If you sign in with Apple or Google we never see your password, and if you use Apple's hide-my-email we never see your real address either.
• Your first name and date of birth.
• What you tell us about yourself: your photos, lifestyle, artists, festivals, values and what you're looking for.
• Your approximate location, if you allow it, so we can show you people nearby.
• How you use the app: screens you visit, and reports you make or receive.
• Basic device information needed to deliver the service and keep it secure.
• If, and only if, you choose to verify yourself: a short face scan. This is special-category biometric data, we ask for your explicit consent separately before taking it, and it is deleted as soon as the check finishes. See Face scans for the full detail.

What other members can see

Other members see your first name, your photos, your age, and the things you chose to share about your lifestyle and interests.

They see roughly how far away you are, never your exact location.

They never see how you sign in, and never your date of birth. Not your number, not your email, not the Apple or Google account behind it.

Reports you make are confidential. The person you report is not told who reported them.

Why we use it

• To create your profile and show you to people you might like, and them to you.
• To verify you are a real person over 18. Where that involves a face scan, our lawful basis is your explicit consent, which you can withdraw at any time in Settings.
• To keep the community safe, investigate reports, and remove people who break the rules.
• To send you the text message code you need to sign in.
• To fix problems and improve the app.

We do not sell your personal information, and we do not use your data to target advertising.

Who we share it with

We use a small number of trusted providers to run lasso: Google Firebase for accounts, storage and databases, and a messaging provider to send verification codes. They process data on our instructions only.

We also use third-party analytics providers to count how features are used, so we can see what is worth building and what is broken. They work on our instructions, they store it in the UK or the EU, and you can turn this off at any time in Settings → Usage data.

We will share information with the police or other authorities where the law requires it, or where someone is at risk of serious harm.

If lasso is ever sold or merged, your information may transfer with it. We will tell you first.

Where your data is kept

Your data, including your profile, photos and messages, is stored in the UK, on Google Cloud in London. Some services we use, such as payments, notifications and analytics, may process limited data outside the UK. Where that happens, we rely on approved safeguards for international transfers.

Photos and messages are stored securely and access is limited to the small number of people who need it to run the service.

How long we keep it

We keep your profile while your account is open.

When you delete your account, your profile stops being visible to other members immediately and we delete your personal data within 30 days.

We keep a limited record for longer where we must: safety reports and removals, and anything we are legally required to retain. This is what stops a removed member simply signing up again. When we remove someone, we keep a scrambled (hashed) copy of their phone number and email so they cannot create a new account. When either member unmatches, we keep that conversation sealed for 90 days so either of you can still report the other. Nobody reads it unless a report needs it, and it is then deleted.

There is one exception, and it matters. If someone has reported serious harm, we place a hold on the messages, profiles and report involved, and that material is not deleted when an account is. We keep it under the parts of UK GDPR that allow it: to meet a legal obligation, and so that a legal claim can be brought or defended. Everything else about the account is still deleted on the usual timescale.

Your lasso

Your lasso is your own private record of what you have done through lasso: the Roundups you told us you were at, the towns they were in, the artists you found here, the people who joined on your invite, and a few firsts.

Every entry is written by our servers from something that happened, with a note of what proved it. We never guess. Attendance is only ever your own answer to "Were you there?", and silence is never counted.

Only you can see it. It is never shown to other members, never used to decide who you see in Discover, and never ranked against anyone.

You can remove any entry from the Your lasso screen, or clear the whole record from the same screen. A removed entry is hidden at once and deleted within 30 days. Deleting your account deletes the record with everything else, and your data export includes it.

Deleting your account

In the app: Settings → Delete account. That removes your profile, photos and lassos.

Outside the app: see meetonlasso.com/delete-account, or email hello@meetonlasso.com from the address on your account and we will delete it for you.

Freezing or deactivating is not offered as a substitute for deletion.

Your rights

You can ask us to:

• Give you a copy of the data we hold about you.
• Correct anything that is wrong.
• Delete your account and your data.
• Restrict or object to how we use your data.

You can delete your account yourself in Settings. For anything else, email hello@meetonlasso.com and we will respond within one month.

If you are not happy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Under 18s

lasso is strictly for people aged 18 and over. We do not knowingly collect data about anyone under 18, and we delete accounts we believe belong to under-18s.

Changes to this policy

If we make a significant change to how we use your data, we will tell you in the app before it takes effect.

Getting in touch

lasso is run by HT Labs Ltd, a company registered in England and Wales, company number 17416490, registered office 128 City Road, London, EC1V 2NX. HT Labs Ltd is the data controller for the information described here.

Privacy questions and requests: hello@meetonlasso.com

Safety concerns: hello@meetonlasso.com