Lasivo
Sign in
Privacy notice
Draft — not in force. This describes how Lasivo works today. The operator, legal basis, retention periods and contact details are not decided yet and are marked below. The native iPhone app’s “no data collected” statement does not apply to this web service.
Who is responsible
Controller: [operator name and address — to be decided]. Contact: [privacy contact — to be decided].
What Lasivo stores, and where
Lasivo is server-backed: your account and the records you enter are stored on Lasivo’s server so they are safe if a device is lost and available on your other devices. A copy is kept in your browser so the app works offline.
| Data | Why | Where |
|---|---|---|
| Email address and a password hash | Sign-in | Server |
| What you enter: library items, treatments and schedules, protocols, skincare routines and procedures, records of doses taken or skipped, stock and use-by dates, settings | Providing the service you asked for | Server; a copy on your device for offline use |
| Journal entries: notes, ratings, measurements, reactions and patch tests | Providing the service you asked for | Server; a copy on your device for offline use |
| Photos you add (product and progress photos), re-encoded on your device before upload, which removes hidden details such as location | Providing the service you asked for | Server |
| Reminder registrations: push endpoint and keys per device, the time zone the device last reported, reminder delivery status | Sending reminders you turned on | Server |
| Sign-ins and security: browser type, IP address and sign-in times per device, and security events such as password changes | Security and signing out other devices | Server |
| Administrator audit log | Accountability for administrative actions | Server |
Information about treatments, doses and your journal is health data, a special category of personal data under UK GDPR. Lawful basis and condition: [to be decided — e.g. explicit consent].
Who can see it
- You, when signed in.
- Lasivo administrators can see account and security details (email, status, sign-ins and devices, reminder delivery) but the admin tools do not show treatments, doses, history, stock, journal entries or photos.
- Hosting provider: IONOS (a virtual private server). Server location: [to be confirmed].
- Push services (Apple, Google, Mozilla) carry notification messages. By default a notification names the item or schedule group that is due (for example “Vitamin D is due”), never the dose. You can turn names off in Settings › Reminders, and notifications then say only that something is due.
Server logs record request paths, status codes and timing — not the contents of your records. Lasivo has no adverts, analytics or tracking scripts.
How long
Retention periods, and how long copies stay in backups after you delete your account: [to be decided before public launch].
Your rights
You can download an export of your data at any time, erase everything, or delete your account (Settings › Your data, and Settings › Account and security). Rights of access, correction, deletion and objection, and how to complain to the ICO: [to be completed].