Privacy policy
Written to be read. If anything here is unclear, ask us and we will explain it rather than point you at a clause.
Lekker Braai is an app for planning a braai. This policy covers the app and this website. The responsible party — the data controller — is WebNest Creations LLC, registered in Georgia, United States, trading as WebNest Creations.
The short version
- You can use the app to answer an invitation without making an account at all.
- We do not sell your data, share it with advertisers, or put trackers in the app or on this site.
- There are no analytics cookies on this website, which is why you were not asked about cookies.
- You can get a copy of everything we hold about you, or delete your account, from inside the app.
What we collect, and why
If you only answer an invitation
You can open an invitation link and reply without signing up. In that case we store the display name you choose, your answer, and anything you add to the bring list. We do not ask for your email address or phone number, and we do not have them.
If you make an account
We store your email address, so you can sign in on a new phone and so the host can reach you about the braai. We store the display name and handle you choose. We do not ask for your real name, your address, your date of birth or your phone number. There is no password: signing in uses a link or a code sent to your email.
The braais themselves
If you host, we store what you enter: the name, date, arrival time, the area, and — separately and visible only to people you have invited — the exact address, access notes and a contact number if you add one. Guest lists, bring lists, menus and announcements are stored so everyone invited sees the same thing.
Photos
Photos you add to a braai album are stored in private cloud storage. They are not public, they are not indexed, and they are served only through short-lived links to people who were at that braai. We do not run face recognition, person tagging, clustering or any kind of biometric matching on them, and we do not send them to any third-party service that does.
Notifications
If you switch on notifications we store a token that identifies your phone to Apple's or Google's notification service, so we can send to it. A notification tells you the name of the braai and what kind of thing happened; it never contains an exact address, a guest's contact details or the contents of a private message. Your notification preferences are stored with your account rather than on the device, so a new phone remembers them.
Diagnostics
The app keeps a small diagnostic identifier so we can match a crash report to a session if you send one. It is not linked to advertising and is not shared.
This website
If you enter your email address to be told when the app launches, we store that address and the date. We use it once, for that. There are no analytics scripts, no advertising pixels, no embedded third-party content, and no cookies set by this site.
Our hosting provider, Cloudflare, records standard server request logs including IP addresses for security and abuse prevention. We do not use those logs to build a profile of you.
What we never do
- Sell or rent personal information.
- Share it with advertising networks or data brokers.
- Use it to train machine-learning models.
- Run face recognition or any biometric identification on your photos.
- Track you across other apps or websites.
Who else processes it
We use a small number of providers to run the service. They process data on our instructions only:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, authentication, photo storage | Processed on infrastructure outside South Africa |
| Cloudflare | This website, and the launch email list | Global edge network |
| Expo | Delivering push notifications to Apple and Google | United States |
| Apple, Google | Delivering the notification to your phone | United States and regional |
Cross-border processing
We are a United States company and our providers store and process data on servers outside South Africa, including in the United States and the European Union. If you are in South Africa, your information is transferred out of the country when you use the app. If you are in the European Union or the United Kingdom, it is transferred out of the EEA.
We rely on our providers' contractual data-protection commitments, including standard contractual clauses where those apply, and we choose providers that offer them. We cannot currently offer a version of the service that keeps your data in your own country. If that matters to you, please do not use it — we would rather say so here than bury it.
How long we keep it
| What | Kept for |
|---|---|
| Your account and profile | Until you delete it |
| Braais, bring lists, announcements | Until deleted, or until the account that hosts them is deleted |
| Photos | Until you delete them or your account |
| Push tokens | Until you switch notifications off, or the phone stops accepting them |
| Launch email address | Until the launch email is sent, or you ask us to remove it |
| Deletion records | Kept, but they contain no name, email or identifier — only counts of what a deletion did |
Your rights
You can, at any time:
- Get a copy. In the app: Me → Account & data → Export my data. It writes a file containing your own records. Other people's names and contact details are not in it.
- Correct it. Edit your profile in the app.
- Delete it. In the app: Me → Account & data → Delete account. This removes your account, your photos, your memories and your saved places from our servers and from the phone.
- Object or complain. Write to us at privacy@lekkerbraai.app.
If you would rather write to us than use the app, email privacy@lekkerbraai.app and we will answer an access, correction or deletion request within 30 days. We may ask you to confirm you control the email address on the account, because handing somebody else's data to whoever asks is its own kind of breach.
Two honest notes about deletion
If you host a braai that other people are part of, deleting your account hands that braai to a co-host or to the longest-standing guest rather than destroying it. Their photos and their memories of that day are theirs, and we do not delete them because you left. Your name is removed from anything you wrote in it, and your contact details do not pass to the new host.
Very rarely a photo cannot be deleted immediately: if it is subject to a legal hold or an open report, we keep the image and remove your name from it, and record the reason. The app tells you if that has happened to any of your photos at the moment you delete.
Children
The app is not intended for children under 18 and asks you to confirm you are 18 or older. That is a self-declaration and we do not verify it, and we say so in the app rather than implying we have checked.
If you believe a photo of a child has been uploaded, please use the takedown route. It is monitored, reports are acknowledged within 72 hours, and it is a faster path than this address.
Security
Data is encrypted in transit. Photos are in a private bucket reachable only through short-lived signed links. Access to a braai's content is enforced by the database itself, per person, rather than by the app asking nicely. No system is perfect; if you find a problem, please tell us at privacy@lekkerbraai.app and we will take it seriously.
Changes
If we change this policy we will update the date at the top. If a change materially affects what we collect or who processes it, we will say so in the app rather than only here.
Contact
WebNest Creations LLC, trading as WebNest Creations
Privacy: privacy@lekkerbraai.app
General: hello@lekkerbraai.app
Child-image takedown: lekkerbraai.app/takedown
We are registered in Georgia, United States. Where South Africa's Protection of Personal Information Act applies to you, you may complain to the Information Regulator of South Africa. If you are in the European Union or the United Kingdom, you may complain to your national data protection authority. Being a United States company does not remove those rights from you, and we do not treat it as if it did.