Privacy Policy

1. Who is responsible for your data

Lycli is currently a pre-incorporation digital project promoted by Claudio Colombat, who acts as data controller until a company is incorporated.

Contact address: Pg. de les Germanies, 112, 46702 Gandia, València, Spain. General contact: info@lycli.com. Privacy requests: privacy@lycli.com.

When Lycli is incorporated, this Policy will be updated with the company’s legal and registration details.

2. Scope

This Policy covers www.lycli.com, the Lycli waiting list and the current Lycli beta app. It also covers messages sent to our contact addresses. Additional notices may be shown inside the app when a feature requires more specific information or consent.

3. Website and waiting-list data

When you join the waiting list, we process the email address you provide, your selected language, the date and time of registration, the source of the request, its status, and a record of the consent text and version used. We also use a hidden anti-spam field and may process essential technical logs needed to secure and operate the service.

We use this information to register your request, prevent duplicate or abusive submissions, send operational messages about beta availability, and keep evidence of the request and consent. The legal bases are your request to join the beta, your consent to the stated communications, and our legitimate interest in securing and administering the service.

The website does not currently use Google Analytics or analytics cookies. If website analytics are introduced, this Policy and the cookie controls will be updated before non-essential analytics storage is activated.

4. Data processed in the Lycli app

Depending on the features you choose to use, the beta app may process:

• account and profile data, including email address, Firebase user identifier, display name or alias, profile image, language and app preferences;
• travel content, including trips, places, routes, planning entries, calendars, checklists, bookings, notes, expenses and saved items;
• social and shared content, including groups, participants, invitations, followers, comments, reactions and visibility choices;
• location data, including precise and background location when you grant permission and activate features that record or display a route;
• photos, videos, camera output, selected library items, captions and associated metadata when you choose to create, import, save or share them;
• technical data such as app version, device and operating-system information, timestamps, network and security logs, and diagnostic information;
• messages, prompts, preferences and relevant trip context submitted to LyAI when you use the assistant.

5. App analytics

The beta app includes Google Analytics for Firebase. It may collect automatically generated app lifecycle and session events, screen views, device and app information, approximate location derived from network information, and a pseudonymous app-instance identifier that distinguishes an installation.

Lycli also records a limited set of events such as sign-up, login, logout, Home and Settings screen views, app language and signed-in state. When analytics is enabled and you are signed in, the Lycli Firebase user identifier may be set as the Analytics User-ID. We do not send your email address, name, photos, travel routes or LyAI message content as Analytics event parameters.

Analytics information is pseudonymous, not anonymous. Advertising storage, advertising user data and advertising-personalisation signals are disabled in Lycli’s analytics configuration. You can turn app-usage analytics off at any time in the app Settings. Where consent is required, analytics must remain optional and your choice may be withdrawn without affecting the core app service.

6. Location, camera and device permissions

Lycli requests access to location, background location, camera, microphone, photos or videos only when these capabilities are needed for a feature you choose. Operating-system permissions can be refused or withdrawn from your device settings. Some route, camera or media functions will not work without the corresponding permission.

Background location is used only for features that need to record or update a journey while the app is not in the foreground. Lycli does not sell location data.

7. LyAI and automated features

LyAI uses Google Gemini and related Google services to generate travel assistance. When you use LyAI, the prompt and the minimum relevant context needed to answer it—such as selected places, trip information, preferences or an approximate/current location when required by your request—may be sent securely through Lycli’s Firebase backend to Google.

Do not include sensitive personal information in a prompt unless it is necessary for your request. AI responses may be incomplete or incorrect and should be checked before you rely on them. Lycli does not use AI to make decisions that produce legal or similarly significant effects about you.

8. Why we process app data and our legal bases

• to create and secure your account and provide the features you request: performance of the service or steps requested by you;
• to save, synchronise and share content according to your visibility choices: performance of the service;
• to use location, media, optional analytics and other device capabilities: your permission and, where legally required, your consent;
• to prevent abuse, maintain security, troubleshoot and defend legal claims: our legitimate interests and compliance with legal obligations;
• to send optional promotional communications: your separate consent, which may be withdrawn at any time.

9. Public and shared content

Content you mark as public may be seen by other users and may include your profile, trip media, places and travel information. Content shared with a group is available to the participants and roles you select. Review the visibility setting before publishing. Private content is not made public by Lycli, although authorised collaborators and technical providers may process it to deliver the service.

10. Providers and recipients

We share data only where needed to provide, secure and administer Lycli, comply with the law, or follow your sharing choices. Principal providers include Google Firebase and Google Cloud for authentication, databases, storage, server functions and infrastructure; Google Analytics for Firebase for optional app analytics; Google Maps Platform, Places and Weather services for map, place and weather features; and Google Gemini for LyAI.

The website also uses hosting, domain/DNS and email-delivery providers. These providers act under their applicable terms and data-protection obligations. We may disclose information to public authorities where legally required, or in connection with a future incorporation, financing, merger or transfer, subject to appropriate safeguards.

We do not sell personal data.

11. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework for participating organisations, or another lawful safeguard. You may contact us for information about the safeguard relevant to a particular service.

12. Retention

Waiting-list records are kept while the beta request remains active and are reviewed when the list is closed or no longer needed. Account and private app data are generally kept while your account is active. When you delete your account or request deletion, data is deleted or anonymised within a reasonable technical period, except where it must be retained for security, dispute, tax or other legal obligations.

Public or shared content may remain visible to other participants if it forms part of a shared record, unless deletion is legally required or technically appropriate. Security logs and backups are kept for limited operational cycles. Consent records may be retained for the period needed to demonstrate compliance. Specific retention periods will be refined as the beta systems and legal obligations are finalised.

13. Your rights

Subject to the conditions in applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent at any time. You may also delete or change content and privacy choices through available app controls.

Send requests to privacy@lycli.com. We may ask for information needed to verify your identity. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with the supervisory authority where you live or work.

14. Children

Lycli is intended for users aged 16 or over. This is a product rule and does not alter any different legal age threshold that may apply in a country. We do not knowingly create accounts for children under 16. If you believe a child has provided data contrary to this rule, contact privacy@lycli.com so that we can investigate and take appropriate action.

15. Security, changes and contact

We apply reasonable technical and organisational measures designed to protect personal data. No service can guarantee absolute security, so please use a strong password and protect access to your device.

We may update this Policy when Lycli incorporates, features or providers change, or legal requirements evolve. The latest version and update date will be published here. Material changes may also be communicated in the app or by email where appropriate.

Questions and privacy requests: privacy@lycli.com. General enquiries: info@lycli.com.