Privacy Policy
30 September 2026
Who is responsible for your data
LëtzGo is operated by LËTZGO DELIVERY S.à r.l., registered in Luxembourg under RCS number B303568, VAT LU37336005, represented by its gérant, Khaled AL AHMAD.
We are the data controller for the information described here. That means we decide what is collected and why, and we are the ones you hold to account.
We have not appointed a Data Protection Officer. We are not required to — we do not monitor people on a large scale and we process no special-category data. Write to us and a person will answer.
Contact: support@lëtzgo.lu
What we collect, and why
We collect only what an order needs. Each line says what it is and the lawful basis for having it.
| Your account | Name, phone, email, language, and a picture if you add one — to have an account and to let a courier and a restaurant know whose order this is. Contract. |
|---|---|
| Your addresses | Street, building, floor, apartment, entry code, postcode, city, the pin you confirmed, and your delivery note — to reach the right door and to price the distance. Contract. |
| Your orders | What you ordered, the prices and fees, the address as it was then, the times each step happened, and any cancellation or dispute. Contract, and legal obligation for the financial record. |
| Payments | We never see or store your card number. Stripe handles payment. We keep the reference, the amount, the status, and the card brand and last four digits. Contract and legal obligation. |
| Location | As a customer, when you press to centre the map on yourself, and once at checkout to warn you if you seem far from the delivery address — that check happens on your phone and your position is not sent to us. We do not track customers. As a courier, while you are on shift — it stops when you go off shift, and traces are deleted after 30 days. Contract. |
| Messages | Chat with your courier about an order, and any conversation with support. Order chats close when the order does. Contract, and our interest in resolving disputes. |
| Reviews | Your rating and comment about a restaurant or a courier. Legitimate interest. |
| Your device | A notification token, the platform, and an installation identifier — to send the order notifications you have not turned off. Contract; consent for marketing. |
| Fraud prevention | When a promotional code is used we record the phone number and device it was used from. Without it one person can claim a first-order discount indefinitely. Legitimate interest. |
| App error reports | When something goes wrong in the app — a crash, a screen that fails to load, a request our server refuses — the app sends us a technical report: what failed, on which screen, the app version, your phone's operating system and language, an installation identifier, and your account if you are signed in. Email addresses, phone numbers, card numbers and keys are removed on your phone before it is sent. We use it only to find and fix faults. Legitimate interest. |
| Couriers only | Vehicle type, model and registration, the documents you upload for approval, and your payout account reference. Contract and legal obligation. |
Decisions made automatically
Three things happen without a person deciding them. You have the right to know what they are.
- Choosing your courier. An order is offered to the nearest available courier, then the next. The inputs are distance, shift, vehicle and how many orders they already carry. Nothing about you goes into it.
- Checking a promotional code. A code is refused if the same phone or device already used it. This is the only decision made about you, and it decides one thing: whether a discount applies.
- The prize wheel. Prizes are drawn on our servers against odds we set. The app shows the result; it does not compute it.
Prices are not personalised. Nothing you do changes what an order costs you, and we do not profile you to guess who you are or what to advertise to you.
If an automated decision goes against you and you think it is wrong, write to us and a person will look at it.
What we do not do
- We do not sell your data. To anyone, ever.
- We do not store your card number.
- We do not track customers in the background.
- We do not send you marketing unless you have turned it on.
Who else sees your data
Other people on LëtzGo
An order puts three people in contact, and each sees only what they need.
- The restaurant sees what you ordered and your name. It does not see your address, your phone number, or your delivery note.
- Your courier sees your name, your address, your entry code and note, and your phone number — so they can reach your door and call you if they cannot. Only for the order they are delivering, and it leaves their app when the delivery ends.
- You see the courier first name, their vehicle, their position while they are bringing your order, and a phone number for them.
We do not mask these numbers. Both sides are told this before it happens.
Our processors
Each is bound by a data processing agreement and acts only on our instructions.
| Supabase | Hosts the database, accounts and files |
|---|---|
| Stripe | Takes payments and pays couriers; holds card details |
| Maps, address search and routing | |
| Infobip | Sends verification codes by SMS |
| Apple, Google | Deliver push notifications |
| Expo | Builds and updates the apps; diagnostics only |
Marketing, and how to stop it
About your order — accepted, on its way, arrived. These are the service and cannot be turned off while an order is live.
Marketing — offers, new restaurants. Off unless you turn it on. You can turn it off again at any moment in Account, under Notifications, and it changes nothing else.
We run no analytics or advertising trackers. No third party measures what you look at inside this app, and there is no advertising identifier in it. If that changes, this policy changes first.
Where your data is processed
Your data is held in the European Union. Where a processor operates outside the EU, the transfer relies on the European Commission Standard Contractual Clauses.
How long we keep it
| Courier location traces | 30 days |
|---|---|
| Delivery proof photographs | 90 days |
| Support conversations | 2 years |
| Sign-in and security logs | 12 months |
| App error reports | The 50 most recent reports of each fault. Deleting your account removes the link to you. |
| Orders and financial records | 7 years — required by accounting law |
| Your account | Until you delete it |
When you delete your account we remove your profile, addresses, saved devices, favourites, reviews, loyalty balance and support messages. Your past orders and their financial records are kept — we are legally required to — but the link to you is replaced with an anonymous reference. The app tells you exactly this before you confirm.
Your rights
- See what we hold about you, and get a copy.
- Correct anything wrong — most of it directly in the app.
- Delete your account from inside the app, subject to the accounting records above.
- Take your data with you, in a machine-readable file.
- Object to processing based on our legitimate interests.
- Withdraw consent for marketing at any time, without affecting anything else.
Write to us and we will answer within one month.
If you are not satisfied you may complain to the Luxembourg data protection authority, the Commission Nationale pour la Protection des Données (CNPD), 15 boulevard du Jazz, L-4370 Belvaux — or to the authority in the EU country where you live.
Children
LëtzGo is not for children under 16. We do not knowingly collect their data. If you believe a child has an account with us, tell us and we will remove it.
Security
Access to your data is enforced by the database itself, not only by the app: a restaurant cannot read another restaurant orders, and a courier can read only the orders assigned to them. Traffic is encrypted in transit. Card data never reaches our servers.
Changes
If we change this policy we will tell you in the app before the change takes effect. The version and date are at the top.