Legal
Privacy policy
Last updated: 3 October 2026
This is a translation. In case of any discrepancy, the Spanish version prevails.
Lendr is for noting what you lend and what you're lent. To do that, we need to keep some data. Here we explain which data, what for, and what you can do about it.
1. Who is responsible
2. What data we keep
•
Your account: your email, and the name, initials and colour you choose in your profile. Also the language you use Lendr in and whether you want email reminders.
•
Notifications: if you turn them on on a phone or browser, the address your browser gives us to send them (one per device) and the type of browser.
•
What you note: the loans (what it is, notes, dates and whether you lent or borrowed it), the photos you upload and the names of the people you lend to (and their email, if you share a loan with them).
•
Notices: the reminders the app creates when something is due or overdue.
•
Help messages: what you write in “Something not working?”, along with the screens you went through, your browser and your screen size.
•
Error reports: if something fails in the app, we keep what failed, on which screen, your browser and, if you're logged in, your account, so we can fix it.
•
Visit statistics: which pages are visited, from which country, on what kind of device and where the visit comes from (for example, a search engine). No cookies and nothing that identifies you.
•
Technical data: the access logs our providers keep for security (such as the IP address and the date).
3. What we use it for
•
So you can use Lendr: keeping your loans and showing them to you.
•
To send you the login link and, if you've turned them on, reminders by email or as notifications.
•
To answer you when you write to us and fix what goes wrong.
•
To keep the service secure.
•
To know, with cookie-free statistics, how many people visit Lendr and how they find it.
We don't use your data for advertising, we don't sell it and we don't build profiles with it.
4. Why we're allowed to
Because it's necessary to provide the service you ask for when you create your account (article 6.1.b GDPR). Security and answering your messages are based on our legitimate interest in Lendr working well (article 6.1.f). You can turn off email reminders and notifications in your profile at any time.
5. The people you note
You write the names of the people you lend to, and only you can see them. We don't contact them or use them for anything else, unless you share a loan with someone: then we keep the email you give us and send them a single invitation. A name or a nickname is enough: don't note more data than you need.
If you share a loan and the other person accepts, they see the item, the photo, the dates and your profile name; not your notes or your email. You can stop sharing it whenever you like, and they can remove it from their Lendr.
6. Who we share it with
Only with the providers we need for Lendr to work, who process the data on our behalf and following our instructions:
•
Supabase: database, photos and login. Servers in Frankfurt (European Union).
•
Vercel: website hosting and cookie-free visit statistics.
•
Resend: sending and receiving emails.
•
Cloudflare: the anti-bot check at login (Turnstile).
•
Apple, Google or Mozilla: if you turn on notifications, they deliver them to your device through your browser's service. They only receive the text of the notice and, if there is one, a temporary link to the photo.
Vercel, Resend, Cloudflare and the notification services belong to companies in the United States. When data leaves the European Union, it does so with the safeguards the GDPR requires, such as the European Commission's standard contractual clauses. We don't share your data with anyone else, unless the law requires us to.
7. How long we keep it
For as long as you have your account. If you delete it from your profile, we immediately delete your loans, people, photos, notices and messages. Error reports are deleted automatically after 90 days. They may remain in our provider's automatic backups for a few more days, until those are replaced by new ones.
8. Your rights
You can access your data, correct it, delete it, object to its use, ask us to restrict its use or take it with you. You can do almost all of it yourself in the app: your profile to correct it and “Delete my account” to delete it. For anything else, write to hola@lendr-app.com.
If you think we're not handling your data properly, you can complain to the Spanish Data Protection Agency (AEPD).
9. Minimum age
You must be at least 14 years old to use Lendr.
10. Cookies
Lendr doesn't use cookies. We only keep the essentials in your browser: your session, so you don't have to log in every time, and the theme (light or dark) and language you choose. Visit statistics don't use cookies and there's no advertising.
11. Security
Connections are encrypted, photos are private and shown with links that expire, and each account can only access its own data.
12. Changes
If we change anything important in this policy, we'll tell you by email before it applies.
Legal notice
© 2026 Lendr