Privacy Policy
Last updated September 2026
This Privacy Policy explains what information Lavex collects, how we use it, and the choices you have. We are committed to protecting your privacy and handling your data responsibly.
1. Information we collect
We collect information you provide and information generated when you use Lavex.
- Account details such as name, email, and phone number.
- Verification data required by partner institutions (KYC).
- Transaction and device information needed to provide the service.
2. Analytics and cookies
We measure how the app is used so we can find the places where people get stuck and fix them. Two separate streams do this, and they behave differently.
- Product analytics records a short, named list of actions: opening a page, starting sign-in or registration, opening a transfer method, submitting a step and leaving one. Our servers record their own: a registration, a step of a transfer that went through or was refused, the outcome of a payment, and a technical record of every request your app makes to our API — its route, result and duration, linked to your account.
- Error telemetry records failures in the browser so that we learn about breakage without waiting for you to report it.
Alongside the fields we choose for each event, the analytics tool adds its own technical context: identifiers for the session and the browser, the browser and device type, screen size and time zone. Page addresses are reduced to a route template before they leave your browser, so identifiers in them are not transmitted. Amounts, wallet or bank details and the values you type into forms are never sent. We do not record your screen, and we do not capture clicks automatically.
We ask the analytics provider not to derive your location from your IP address, and we do not send the address to it ourselves.
Product analytics keeps data in your browser, and it is more than an identifier. In local storage and in a cookie it keeps the identifier that lets a later visit be recognised as the same person; in local storage it also keeps the address you arrived at, including campaign labels and the path, and the address of the site that referred you. In session storage, until the tab is closed, it keeps the search phrase you used if you arrived from a search engine. Error telemetry keeps nothing: its data lives in the memory of the open page and disappears with the tab.
This starts when the page loads, before you answer any question we ask about analytics. Of what is kept in your browser, we send onward only a narrow part: five utm_* campaign labels and the address of the referring site without its path or parameters. Error telemetry is not governed by that answer at all — without it we would not learn that something broke for you.
3. How we use your information
We use your information to operate Lavex, process transactions, verify identity, prevent fraud, comply with law, and improve the product.
4. Legal basis
We process personal data to perform our contract with you, to comply with legal obligations, and where we have a legitimate interest in operating a safe, reliable service.
5. Sharing your information
We share data with regulated partner institutions and service providers strictly as needed to deliver the service, and with authorities where required by law. We do not sell your personal data.
Product analytics, the events recorded by our servers, and error telemetry are all handled for us by PostHog, operating on its European cloud. It processes this data on our instructions and for no purpose of its own.
6. Data retention
We keep personal data for as long as needed to provide the service and to meet legal, accounting, and regulatory requirements, after which it is deleted or anonymized.
7. Security
We protect your data with bank-grade encryption, access controls, and continuous monitoring. No system is perfectly secure, but we work continuously to safeguard your information.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal data. Contact us to exercise these rights.
Closing your Lavex account and deleting your personal data has a page of its own: Account and data deletion.
9. International transfers
Because Lavex operates across borders, your data may be processed in countries other than your own, with appropriate safeguards in place.
Analytics data is processed on servers in the European Union.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated through the app or website.
Contact
Questions about your privacy? Reach our team at privacy@lavex.app.