Privacy Policy
Who we are
Loa is developed by JAG Software. The operator and controller responsible for your personal data is Laura Ochoa Alzate, an individual trading as LOA Garden ("we"), NIT 1040746138, with business and notification address CR 4 # 29 SUR 550, El Retiro, Antioquia, Colombia. For any privacy question or request, contact development@jag-software.com or call +57 312 273 8092.
Information we collect
- Account data: your name and email address. Sign-in is handled by Firebase Authentication, a Google service, with email and password, Google or Apple. Your password is held by Firebase; Loa never receives or stores it.
- Shop and delivery data: the recipient’s name, telephone, delivery address, requested date, gift-card message and delivery instructions you provide. Authorized staff use order details and optional preparation or delivery photos to fulfill and support your order.
- Planning content: the event details you share in planning conversations (messages, preferences, guest counts, budgets, dates, locations) and any reference photos you choose to upload.
- App activity: which screens and features you use, such as products viewed, items added to your cart, checkout steps and planning steps, recorded with your account or, for guests, with the planning session only. We record counts and actions, never what you type, and use them to improve Loa. Guest activity is reduced to anonymous daily totals when the session ends.
- Purchase records: the order, its status and the payment reference. Event plans bought in the app are paid through the App Store or Google Play; shop orders are paid through Mercado Pago. We never receive or store your card numbers.
- Permission and account context: your account identifiers, language and time zone, plus the version, language, source, decision and date of your AI permission.
- Technical data: app and operating-system versions, update/runtime identifiers, request timestamps, status, timing and error diagnostics. Logs may contain account, order or planning-session identifiers; they are not all anonymous. Authentication and update providers also receive network information such as your IP address. Expo’s update service uses a random app-installation identifier to deliver compatible updates.
We do not collect advertising identifiers, we show no ads, and we do not sell or share your data with data brokers.
How we use your information
- To provide the service: planning conversations, event previews, purchased plans and shop orders.
- AI processing: with your permission, which the app asks for before your first planning message is sent, your planning messages, event details and reference photos are processed by Microsoft Azure AI services, working on our behalf, to generate suggestions, previews and plans. Microsoft does not use your content to train its models. You can withdraw this permission at any time in the app under You → Privacy; Loa then stops new AI planning turns, previews and planning-memory indexing. Work on plans you already paid for still completes. Your conversations and plans stay until you delete them; withdrawing permission does not itself erase them or previously stored planning memory. A material change to the data sent or its processor requires permission again.
- To deliver purchased plans and transactional emails (for example order updates and account linking).
- To show relevant products and purchase-based suggestions, and send cart reminders and reminders related to past purchases. These uses stay within Loa; they do not involve advertising networks.
- To secure, debug, update and improve the service.
Who processes your data for us
- Microsoft Azure hosts Loa (servers in the United States), runs the AI services and sends our emails. AI requests may be processed in any Azure region.
- Google Firebase Authentication handles sign-in, account identifiers and authentication security. It also processes app/device metadata needed to operate and improve authentication.
- Expo EAS Update delivers compatible app updates and processes update-request metadata, including a random installation identifier.
- Authorized fulfillment staff and delivery providers receive the recipient and order details needed to prepare and deliver your order.
- Apple and Google Play process in-app purchases under their own privacy terms.
- Mercado Pago processes shop payments under its own privacy terms.
- Pexels supplies inspiration images. It receives short search terms built from the atmosphere and type of event you describe, rather than your full planning conversation.
Using these services means your data may be transferred outside Colombia. We only share what each one needs to do its job.
Storage, security and retention
- All traffic is encrypted in transit (HTTPS/TLS).
- Purchased plan content and private documents are encrypted at rest.
- Planning conversations are deleted 7 days after they start if you are a guest, and 180 days after they start if you are signed in, unless you delete them sooner. Plans you buy stay available in your account.
- AI outputs that our checks rejected are deleted after 30 days. Records of AI requests (timing, cost and outcome, without your messages) are deleted after 13 months. In-app notifications are deleted after 30 days.
- Detailed app-activity records are kept for up to 90 days; guest planning activity is reduced to anonymous daily totals when its session ends. Account AI-permission history is removed with the account, and guest permission history with its planning session.
- Account data is kept until you delete your account. Purchase records are kept for the period tax and accounting law requires.
Your rights and account deletion
Under Colombian law (Ley 1581 de 2012) you can know, update and correct your data, ask for proof of the permission you gave us and withdraw it, ask us to delete your data, and complain to the Superintendencia de Industria y Comercio. Write to development@jag-software.com and we will answer within the time the law sets.
You can view and edit your data in the app. You can delete your account and its content at any time in the app under You → Delete Account, or by emailing us — see Delete your account for details. Deletion removes your account data and redacts your planning content.
Children
Loa is not directed at children and is intended for users 18 and older.
Changes
If this policy changes, we will update this page and its effective date. Significant changes will be announced in the app.