Privacy policy
Last updated 13 November 2026
Lino is an app for keeping track of attendance at trainings and events. An organizer creates a team, schedules time slots, and the attendees answer whether they are coming. This page explains what personal data Lino processes to do that, who else sees it, how long it is kept, and what you can ask for.
Lino is in testing. It is free, it has no advertising, and it has no analytics, tracking or profiling of any kind. Nothing is sold or passed on for marketing.
Who is responsible
The controller of the personal data described here is Jakob Rogelj, a private individual, who develops and runs Lino. For anything in this policy, including a request about your data, write to support@lino.club.
This policy covers the Lino app, the service behind it, and these pages at lino.club.
What is processed, and why
Your account
Your email address, a hash of your password (the password itself is never stored), whether the address has been confirmed, and your chosen language. Failed sign-in attempts are counted, and after repeated wrong passwords an account is locked for a while.
An email address, a password and a display name are needed to create an account; without them you cannot use Lino.
Legal basis: performance of the contract between you and Lino (Article 6(1)(b) GDPR) for the account itself, and the legitimate interest in keeping accounts secure (Article 6(1)(f)) for the lockout counter.
Your name in a team
The display name you choose is shown to everyone in the teams you belong to. It does not have to be your full name. Legal basis: performance of the contract.
Teams, time slots and attendance
Teams have a name and an optional description; time slots have a date and time, an optional location, an optional description, a response deadline and an optional reminder. Your answer to a time slot (yes, no or maybe) is stored together with the time it was given and who gave it — you, or an organizer who answered on your behalf. The record of who cancelled a time slot is kept as well.
This is the purpose of the app, so the legal basis is performance of the contract. For the other people in your team, whose data an organizer enters, the basis is the legitimate interest of the team in organizing its trainings and events (Article 6(1)(f)).
Invitations
An organizer invites people by typing an email address. That address is stored with the invitation and used to send the invitation email (again each time the organizer renews the invitation), and to show the invitation to whoever signs in with that address. The organizer who sent it is recorded. Invitations can be answered for 14 days.
Legal basis: the legitimate interest of the team and of the invited person in being able to join (Article 6(1)(f)).
Push notifications
If you allow notifications, the app registers a push token for your device — an identifier issued by the operating system, not your name, your email address or your phone number. Up to ten devices are kept per account; registering an eleventh removes the oldest. Each notification that is sent is stored with its text (the team name, and the date, time and location of the time slot) and kept for 30 days after it was sent out, whether or not its delivery was confirmed.
Legal basis: your consent, given when you allow notifications (Article 6(1)(a)). You can withdraw it at any time in the app or in your device's settings.
Signing in
Staying signed in uses a sign-in token kept on your device; the service stores it only in a protected form. Codes sent by email to confirm an address or to reset a password are valid only for a short time.
Legal basis: performance of the contract, and the legitimate interest in keeping accounts secure.
Server logs
The server writes a log entry for each request: the IP address of the device making it, the time, the address requested, the result, and technical information about the app or browser. Passwords are not written. Log entries can contain identifiers used by the app, such as those of a team, a time slot or a device. Errors are logged too, with identifiers and error messages but without names or email addresses.
These logs exist to run the service and to investigate faults and abuse; the legal basis is the legitimate interest in a service that works and is secure (Article 6(1)(f)).
These pages at lino.club are served by Cloudflare, which processes the IP address of each visitor
to deliver them. The pages set no cookies.
On your device
The app keeps three things on your phone, in its secure storage: the sign-in token that keeps you signed in, the language you chose, and whether you dismissed the question about notifications. Everything else it shows is loaded from the service and kept in memory only while the app runs. Signing out removes the sign-in token.
When you write to us
Email to support@lino.club is received by Cloudflare's email routing and forwarded to the
mailbox of the person who runs Lino, at Gmail. Your message and your address are kept there for as long as needed
to answer and follow up on it. Legal basis: the legitimate interest in answering you (Article 6(1)(f)).
What other people in your team can see
Lino is a shared app, so some of your data is visible to the people you share a team with:
- Everyone in a team sees the display name of every other member, their role, and whether they take part in time slots. Email addresses of members are never shown to other members.
- Organizers always see every answer to every time slot, who gave it and when, including answers of people who have since left the team.
- What other attendees see depends on the team's setting: everyone sees all answers by name (the default for a new team), everyone sees only the totals besides their own answer, or only organizers see the answers.
- Organizers can set or change an attendee's answer. When they do, the organizers and that attendee see that the organizer gave the answer; the other attendees do not.
- Organizers see the email addresses they or another organizer have invited to their team, and who invited them.
Who else receives data
Lino uses a small number of service providers. They may process the data only for Lino, and only for what is listed here.
| Provider | What it receives | Where |
|---|---|---|
| Hetzner Online GmbH — servers and database | Everything described in this policy is stored on servers they provide, including backups. | Germany (EU) |
| Brevo (Sendinblue SAS) — sending email | The recipient's email address, the subject and the text of each email: confirmation and password reset codes, invitations (which also contain the inviting organizer's name and the team's name), and the notice that an account was deleted. | France (EU) |
| Expo (650 Industries, Inc.) — delivering push notifications | The device's push token and the text of the notification (the team's name, and the date, time and location of the time slot), which it passes on to Apple, and to Google for Android devices. | United States |
| Apple Inc. (Apple Push Notification service, and TestFlight while Lino is in testing) | The notification on its way to an iPhone. For TestFlight, Apple handles the tester's email address and the data Apple collects about installing and running a test build. | United States and Ireland |
| Google (Gmail, and Firebase Cloud Messaging once Lino has an Android app) | Email you send to support@lino.club, in the mailbox it is forwarded to. Once there is an Android
app, also the notification on its way to an Android phone; there is none yet. |
Ireland and United States |
| Cloudflare, Inc. — domain names, email routing and these pages | The address lino.club is resolved through them, these pages are served by them, and email to
support@lino.club passes through their email routing. |
United States and EU |
Sending a push notification means the notification's text leaves the European Union: Expo and Apple are in the United States. Such a transfer rests on the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise on the standard contractual clauses of the European Commission; you can ask for a copy of these safeguards at support@lino.club. If you do not want this, do not allow notifications; everything else in Lino works without them.
Nothing else receives personal data. There is no analytics service, no advertising network, no crash reporting and no third-party content on these pages.
How long data is kept
| Data | Kept |
|---|---|
| Account (email address, password hash, language) | Until you delete the account. Accounts are not deleted for being unused. |
| Display name | Until you delete the account; then it becomes "Deleted account". |
| Teams, time slots, attendance answers | Until the team is deleted by one of its organizers. Answers are kept as part of the team's history after you leave the team, still under your name, and after you delete your account, then without your name. |
| Invitations, including the invited email address | Until the team is deleted. An invitation can only be answered for 14 days, but the record of it remains. |
| Push tokens | Until notifications are turned off, you sign out or delete the account, the device stops accepting notifications, or an eleventh device replaces the oldest. |
| Sent notifications and their delivery records | 30 days after the notification was sent out. |
| Sign-in tokens and verification codes, in protected form | Until the account is deleted. Once they have expired or been used, they can no longer be used. |
| Server logs with IP addresses | For a limited time, after which they are overwritten automatically. They are not deleted when an account is deleted. |
| Database backups | Copies are kept for 14 days, and the hosting provider keeps its own backups for a limited time. Data that was deleted or anonymized stays in those copies until they are overwritten. |
Deleting your account
You can delete your account in the app, on the account screen, by confirming your password. It cannot be undone and there is no waiting period. If you are the last organizer of a team, you have to make someone else an organizer or delete the team first.
When you delete your account:
- Your email address, the stored hash of your password, your language, your sign-in tokens, verification codes and push tokens are deleted, and you are removed from all of your teams.
- Your name is replaced by "Deleted account" everywhere it was shown.
- Your attendance answers stay in the teams' history, without your name, so the teams' records stay complete. The same applies to the record of who cancelled a time slot and who sent an invitation.
- Invitations an organizer sent to your email address stay with their team until that team is deleted.
A confirmation is sent to your email address afterwards.
Your rights
Under the GDPR you may ask for access to your data, for a copy of it in a portable form, for mistakes to be corrected, for your data to be deleted, for processing to be restricted, and you may object to processing based on legitimate interest. Where processing is based on your consent, such as push notifications, you may withdraw it at any time without affecting what was done before.
Write to support@lino.club. There is no automated export yet, so a request is handled by hand; expect an answer within 30 days. Lino makes no automated decisions that have legal or similarly significant effects, and does no profiling.
If you think your data is being handled wrongly, you can complain to the supervisory authority. In Slovenia that is the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si); you may also go to the authority in the EU country where you live.
Security
Lino protects personal data with appropriate technical and organisational measures, including encryption of all traffic between the app and the service, passwords that are never stored in readable form, restricted administrative access, and regular updates. No service can promise perfect security, but data is kept to what Lino needs to work.
Children
To have a Lino account you have to be old enough to agree to an online service yourself under the law of the country you live in; in the European Union that age is between 13 and 16, depending on the country. Lino is not meant for younger children, and an account is not knowingly created for one. Profiles for children, managed by a guardian, are planned for a later version and will be described here before they are introduced.
While Lino is being tested
Lino is being tested with a small number of teams. During testing, data can be lost when something goes wrong, so do not rely on Lino as the only record of your attendance. You will be told before any test data is deleted.
Changes
If what Lino does with personal data changes, this page is updated and the date at the top changes with it. For a change that affects you, you will be told in the app or by email before it takes effect.
Contact
Jakob Rogelj, support@lino.club