Last updated: [15-09-2026]
This policy explains what personal data the Lincora mobile app collects about
you, why, who else sees it, and what you can do about it. It is written for the
young people who use the app. Organisations using the web portal are covered by
a separate notice.
The controller of your personal data is [Oyakhilomen Akuete], registered in
[Belgium] under company number [1007485253], [Blauwtorenplein 6, 2000 Antwerpen].
Questions, or any request about your data: contact@lincora.com
[If a DPO has been appointed, add: Data Protection Officer: dpo@lincora.com]
1. THE SHORT VERSION
- We collect the minimum we need to run a discovery app: who you are, where
you are based, what you are interested in, and what you do in the app.
- Your profile is meant to be seen. Other signed-in users and organisations can
see your name, avatar, city, bio, interests and experience entries.
- We do not sell your data, we do not run ads in the app, and we do not use
advertising or cross-app tracking SDKs.
- Push notifications are off until you switch them on.
- You can delete your account, and everything tied to it, from inside the app.
2. WHAT WE COLLECT
2.1 Account and sign-in
- Your email address. You sign in with a one-time code sent to your email, or
with Google or Apple. When you use Google or Apple, we receive your email
address and basic profile information from them - we never see your password,
and we do not store one.
- Technical session information needed to keep you signed in.
2.2 Your profile
- Name or nickname
- Date of birth
- City and country, chosen from a list in the app
- Avatar, chosen from the set of illustrated avatars included in the app
- Bio, if you write one
- Interests you select
- Your app language
We ask for your date of birth to check that you are within the 15 to 30 age
range Lincora is for. If you are outside that range, we cannot create an
account for you.
2.3 What you build on your profile
Experience entries: a title, the organisation, a description, start and end
dates, skills, and an optional link to a project summary. These appear on your
profile and in your CV export.
2.4 What you do in the app
- Opportunities you save, organisations you follow
- Opportunities you sign up for
- Opportunities you view and organisation profiles you visit
- Notifications you receive and read
- Content you report to our moderation team
2.5 Notifications
If you turn notifications on, we store a push token for each device you use, so
that the notification reaches the right phone.
2.6 Crash reports
The app uses Firebase Crashlytics. If the app crashes or hits an error, we
receive a technical report - device model, operating system version, app
version, and the technical trace - along with your account identifier, so we
can match a crash to a support request. These reports carry no advertising
identifiers and are not used to profile you.
2.7 What we do NOT collect
- No password
- No GPS or background location. Your location is the city you pick from a
list, nothing more precise, and we do not track where you go.
- No access to your photo library, camera, contacts, calendar or microphone
- No advertising identifiers, no ad networks, no cross-app or cross-site
tracking
- No payment or bank details from you - the app is free
- No special category data. Please do not put health, religious, political or
similar sensitive details in your bio or experience entries.
3. WHY WE USE IT, AND ON WHAT LEGAL BASIS
Under the GDPR we need a legal basis for every use. Ours are:
Performance of our agreement with you (Article 6(1)(b)):
- creating and maintaining your account, and signing you in
- showing your profile to other users and organisations, which is the core of
what Lincora does
- building your feed and search results from your interests and city
- recording your saves, follows and sign-ups, and passing sign-ups to the
organisation concerned
- generating your CV export
- giving organisations the engagement figures on their own posts and profile
(views, saves, profile visits, and the broad interest and age-range profile
of that audience)
Your consent (Article 6(1)(a)):
- sending push notifications
- optional profile details you choose to add, such as your bio
You can withdraw consent at any time; that does not affect what was done
before.
Our legitimate interests (Article 6(1)(f)):
- keeping the platform safe: moderation, handling reports, preventing abuse,
fake accounts and scraping
- crash reporting and technical diagnostics, so the app works
- understanding, at an aggregate level, how the app is used so we can improve
it
- defending legal claims
Legal obligation (Article 6(1)(c)):
- responding to lawful requests from authorities, and keeping records we are
required to keep
Age check: verifying that you are within the 15 to 30 range is part of running
the service and part of our obligation to protect young users.
4. WHO SEES YOUR DATA
4.1 Other users and organisations
Visible to any signed-in user of Lincora, young person or organisation:
- your name or nickname, avatar, city, bio and interests
- your experience entries
- the fact that you signed up for a published opportunity
Visible to an organisation about its own content:
- who signed up for its opportunity
- how many people viewed or saved a post, and who visited its profile
- the broad age range and interests of that audience
Not visible to anyone but you: your email address, your date of birth as a date
(only the resulting age range is used), your saved list, the organisations you
follow, and your notifications.
4.2 Our service providers
We use a small number of processors, each bound by a data processing agreement
and each acting only on our instructions:
- Supabase - database, authentication, file storage and server functions
(hosting region: [EU REGION - confirm])
- Google (Firebase Crashlytics) - crash reporting
- Google and Apple - sign-in, when you choose those methods
- Expo - push notification delivery and app updates
- SendGrid - transactional email, including your sign-in code
- Vercel - hosting for our website and organisation portal
4.3 Others
We may share data with professional advisers, or with authorities where the law
requires it. If our business is reorganised or sold, data may transfer as part
of it; you will be told beforehand and this policy will continue to apply.
We never sell your personal data and we never share it with data brokers or
advertisers.
5. WHERE YOUR DATA IS
We aim to keep your data in the European Union. Some providers, such as Google,
Apple and Expo, are established in the United States or process data there.
Where data leaves the EEA, it is protected by the European Commission's
standard contractual clauses, by an adequacy decision, or by the EU-US Data
Privacy Framework where the provider is certified. You can ask us for a copy of
the safeguards in place.
6. HOW LONG WE KEEP IT
- Account and profile data: while your account exists
- Activity data (saves, follows, sign-ups, views, visits): while your account
exists
- Notifications: while your account exists, subject to routine clean-up of old
entries
- Crash reports: up to 90 days
- Moderation reports and records of enforcement: up to [24] months after the
case is closed, so we can recognise repeat behaviour
- Backups: deleted data disappears from routine backups within [30] days
When you delete your account, your profile, experience entries, saves, follows,
sign-ups, push tokens and notifications are deleted with it. We keep only what
we must keep by law, or what is needed to defend a legal claim.
7. YOUR RIGHTS
Under the GDPR you have the right to:
- Access - get a copy of the personal data we hold about you
- Rectification - have inaccurate data corrected; most of your profile you can
edit yourself in the app
- Erasure - have your data deleted; you can do this yourself from Settings -
Account info - Delete account
- Restriction - ask us to pause the use of your data while something is being
resolved
- Objection - object to processing we base on legitimate interests
- Portability - receive the data you gave us in a machine-readable format, or
have it sent to another provider
- Withdraw consent - turn notifications off in the app or in your device
settings, at any time
To exercise any of these, write to contact@lincora.com. We answer within one
month. We may ask you to confirm your identity first, so that we do not hand
your data to someone else.
You can also lodge a complaint with a supervisory authority - the one where you
live, or, for us, the [Belgian Data Protection Authority, Drukpersstraat 35,
1000 Brussels, contact@apd-gba.be]. We would appreciate the chance to sort it
out with you first.
8. YOUNG USERS
8.1 Lincora is for people aged 15 to 30. We check your date of birth at sign-up
and we do not create accounts outside that range.
8.2 The age at which you can consent to an online service on your own differs
across Europe: 13 in Belgium, 15 in France, 16 in the Netherlands and in
Germany. If you are under that age in your country, a parent or legal guardian
must give permission for you to use Lincora. A parent or guardian can contact
us at contact@lincora.com at any time to ask what we hold about their child, to
have it corrected, or to have the account deleted.
8.3 We do not profile young users for advertising, we show no ads, and we do
not make automated decisions that produce legal or similarly significant
effects. Your feed is ranked from the interests and city you choose, which you
can change at any time.
9. SECURITY
Data is encrypted in transit and at rest. Access to the database is governed by
row-level security rules, so a signed-in user can only reach the data they are
entitled to, and administrative access is limited to the people who need it.
Sign-in is handled by our authentication provider, not by us storing passwords.
No system is perfectly secure; if a breach occurs that puts your rights at
risk, we will notify you and the supervisory authority as the GDPR requires.
10. LINKS OUT OF THE APP
Opportunity posts may link to an organisation's own website or registration
form. Once you follow such a link you are on someone else's site and their
privacy policy applies. We are not responsible for what they do with your data.
11. CHANGES TO THIS POLICY
We may update this policy. If a change matters to you, we will tell you in the
app or by email before it takes effect. The date at the top shows the current
version.
12. CONTACT
[Oyakhilomen Akuete ]
[Blauwtorenplein 6, 2000 Antwerpen]
Email: contact@lincora.com
