This page explains what personal information is collected when you use the Lavi mobile app and the lavi.uz website (together, «Lavi»), how it is used, and how we protect it. Lavi is developed by an individual entrepreneur registered in Uzbekistan.
Information we collect
- Sign in with Apple. Apple gives us a stable user identifier. Apple shares your name and email only the first time you sign in, and they are kept on your device. Our server keeps the Apple user identifier and, so that we can revoke Lavi's Apple authorization when you delete your account, an Apple refresh token.
- Google or email and password. These sign-ins go through Google Firebase Authentication, which gives us your name, email address and profile photo.
- Telegram. If you sign in through our bot @laviuz_bot, we receive your Telegram ID, name, username and profile photo.
- Username and password. You can optionally set a username and password for signing in. The password is stored only as a salted hash, never as the password itself.
- Profile and content. Your display name, username, bio and profile photo (kept in our storage and visible to others); the recipes you add — their text and photos, whether each is public or private, and the people you choose to share a private recipe with; your comments, ratings, «saved» and «cooked» marks and follows; and the reports and blocks you make. Public profiles and public recipes are visible to other users. Before your name, username, bio and profile photo are saved, they are checked by automatic rules for links, contact details, scam, drug or adult terms, and insults.
- Feedback. If you use the in-app feedback form, we receive the topics you choose, your mood, your account ID if you are signed in, and the app version.
- Photos. Only the photo you pick or take. Recipe, step, profile and «cooked» photos are uploaded to our storage.
- Recipes imported in earlier versions. Versions before 1.1.1 could import a recipe from a link, text or photo. Recipes you imported then stay in your account with the original creator's name and link as the credit; the creator's photo is not stored on our servers. Version 1.1.1 no longer imports recipes.
- Purchases. Version 1.1.1 has no in-app purchases. Earlier versions offered a Lavi Plus subscription through the App Store; for those, Apple handled payment and RevenueCat processed the subscription status.
Device identifiers and notifications
- The app uses Apple's identifier for vendor (IDFV) — not the advertising identifier — to count the free daily AI picture limits when you are not signed in.
- We store daily usage counts: the day, the feature and the count.
- If you allow notifications, your device's push token is stored with your account.
- You choose which notifications you get: follows, likes, comments, new recipes, and «Offers & news» — news and updates from Lavi. «Offers & news» is off unless you turn it on. We send these messages only to people who turned it on, and we keep the time you turned it on.
AI processing
Lavi uses Azure OpenAI, a Microsoft service, only for:
- drawing a step picture from a step's text and the dish name when you tap «AI» in the recipe form;
- drawing generic ingredient pictures from an ingredient's name.
The app asks you before the first step picture, and remembers your answer. You can change it at any time in Settings › AI processing. If you decline, you just don't get AI step pictures. Public recipes are checked by automatic word rules and then by a person, not by AI. Microsoft does not use this data to train its models; under Microsoft's terms, it may keep it for up to 30 days to detect abuse.
Why we use it
- To create your account and let you sign in to the app.
- To store and show you the content you add, save or share, and to show public profiles and public recipes to other users.
- To draw the AI step and ingredient pictures described above.
- To keep public content safe: the automatic checks on profiles, the review of public recipes, and the reports and blocks you make.
- To manage the free daily limits on AI pictures.
- To send the notifications you chose.
- To read and answer the feedback you send us.
We do not sell your data, there is no advertising in Lavi, and we do not track you — there is no App Tracking Transparency prompt, because no tracking happens. The app contains no analytics or crash-reporting SDK.
Who we share it with
Your data is stored and processed only with the following service providers necessary to run the app — each has its own privacy terms:
- Supabase — database, file storage and server functions; servers in Frankfurt, Germany.
- Microsoft Azure OpenAI — the AI pictures described above.
- Google Firebase Authentication — Google and email sign-in.
- Apple — Sign in with Apple, push notifications (APNs) and the App Store.
- Telegram — sign-in through our bot.
- RevenueCat — subscriptions, only for earlier app versions that offered Lavi Plus.
- Vercel — hosts this website.
None of these services receive your data for advertising.
Data retention
Your data is kept for as long as your account is active. Settings › Delete account removes your profile, sessions, profile photo, Telegram link and Google or email sign-in identity, and revokes Lavi's Sign in with Apple authorization. Content you published is removed with the account. Any remaining copies, such as backups, are removed from our systems within a reasonable period (typically within 30 days), except where retention is legally required.
Your rights
You can view, correct, or delete your data at any time — through the Settings section in the app, or by emailing support@lavi.uz. You can also withdraw your consent to AI processing and to «Offers & news» in Settings at any time.
Children's privacy
Lavi is not intended for children under 13, and we do not knowingly collect data from them.
Changes
This policy may be updated from time to time. We will notify you of material changes in the app or on this page.
Contact
Questions? support@lavi.uz