Privacy Policy - Laynivo

1) Who we are

Laynivo is provided by Saifullah Ahad ("we", "us", "our"). Laynivo lets service points operate live walk-in queues and lets customers watch their turn from their own phone.

2) Information Laynivo handles

• Staff accounts: email address, Firebase user ID, business membership and role. Passwords are handled by Firebase Authentication and are not visible to us.
• Customer sessions: an anonymous Firebase user ID. Customers do not need to create a named account.
• Queue data: business and queue names, join code, token number, lane, status, counter, position, estimated wait, and event times.
• Optional customer name: only if the customer chooses to enter one. It is visible to authorized staff for serving that turn and never appears on the public display board or analytics.
• Notification token: a Firebase Cloud Messaging token used only to deliver almost-up and counter-ready alerts.
• Operational analytics: per-business served totals, average wait, no-show rate and busy-hour counts.

3) How information is used

We use this information only to authenticate staff, maintain a concurrency-safe queue, show each customer their live position and estimate, notify customers about their turn, show authorized staff their own business operations, and calculate that business's aggregate service analytics.

4) Services and transfers

Laynivo uses Google Firebase Authentication, Cloud Firestore and Firebase Cloud Messaging, plus a Cloudflare Worker that verifies Firebase sessions and performs authoritative queue commands. These providers process data to deliver the service. Data may be processed outside your country under their applicable safeguards.

Laynivo has no advertising SDK, analytics SDK, payment system, subscription, or sale of personal data. We do not rent or sell information.

5) Access and security

Firestore security rules deny all direct mobile writes. Customers can read only their own ticket and the limited public projection for the queue they join. Authorized staff can read only businesses where they have a membership. Queue mutations pass through a server that verifies identity, staff membership or ticket ownership. Public board data excludes customer names.

6) Retention and deletion

Active ticket data remains while a turn is in progress. A ticket that a customer leaves is scheduled for deletion within 24 hours. Completed and no-show ticket details are scheduled for deletion after 90 days by an automated daily cleanup. Short-lived idempotency and security command records expire after 7 days and are removed immediately for an account being deleted. Aggregate operational totals may remain without customer names.

Customers can leave their queue in the app, which releases their place and deletes the anonymous authentication account. Staff can choose More → Delete account. An owner deletion removes the business, queues, tickets, staff access and analytics; a non-owner deletion removes that staff membership and account. See the account deletion page.

7) Permissions and device access

• Internet and network state: required for authentication, live Firestore updates and queue commands.
• Notifications: optional, requested only to deliver turn alerts. You can revoke it in Android Settings.
• QR scanning: provided through Google Play services Code Scanner. Laynivo itself does not request Android camera permission and does not store images or video.

8) Your choices and rights

You can omit your name, decline notifications, leave a queue, delete a staff account, or contact us to request access, correction or deletion. We may need enough information to verify that a request belongs to the account or business concerned.

9) Children's privacy

Laynivo is a general queue utility and is not directed to children under 13. It has no chat, social feed, public profile, or customer-to-customer content. Laynivo prohibits child sexual abuse and exploitation (CSAE), grooming, sexual solicitation, sextortion, trafficking, and content that exploits or endangers children. Staff can report every displayed customer name, customers can report shared service-point or queue content from their live ticket, and the app includes a dedicated Child Safety screen. Read the Child Safety Standards or contact www.saifullah.ai@gmail.com.

10) Legal disclosure

We may disclose information if required by law or necessary to protect users, the service, or the rights and safety of others. We will limit disclosure to what is legally necessary.

11) Changes and contact

We may update this policy and will publish the current version at https://privacy.saifullah.ai/laynivo.html with a revised effective date.

Questions or privacy requests: www.saifullah.ai@gmail.com.