Privacy & your data
Epicure Lounge is built privacy-first. Here is what we hold and the rights you have over it.
Local, private AI
AI features run on a local, self-hosted model. Your notes, photos and preferences are never sent to a third-party AI service.
Encrypted messages
Direct messages are encrypted at rest.
Your visits are private
Logged visits are private by default. You choose, per visit, whether to share it to the community check-in feed.
Who processes your data
We keep the platform self-hosted to minimise who touches your data. Payments and subscriptions are processed by Stripe (Stripe Payments Europe, Ltd.) as our payment processor — it receives what's needed to take payment (name, email, card details, which it handles directly; we never store card numbers). The AI features run on a local model we host ourselves (Ollama) — your notes and photos are not sent to any third-party AI service. Email confirmation/reset messages, once enabled, are delivered through a transactional email provider. We do not sell your data or share it for advertising.
Legal basis
We process your account and billing data to provide the service you signed up for (contract, GDPR Art. 6(1)(b)); community, security and anti-abuse handling rests on our legitimate interest (Art. 6(1)(f)); and anything you opt into — like sharing a visit to the community feed — rests on your consent (Art. 6(1)(a)), which you can withdraw at any time.
How long we keep it
We keep your account data while your account is open. When you erase your account we delete your personal data promptly, with one exception: records required for bookkeeping — payment and invoice records — are retained for 7 years as Swedish accounting law (Bokföringslagen) requires, then deleted. Operational logs are kept for up to 30 days. You can export or erase your data at any time from your account settings.
Your rights
You can download all of your data, or permanently delete your account and personal data, at any time. Manage your data
Cookies & local storage
Epicure Lounge sets only the cookies it needs to work: a sign-in cookie (to keep you logged in), an antiforgery cookie (to protect form submissions), and a language cookie (to remember your SV/EN choice). Your light/dark theme preference is kept in your browser's local storage, not a cookie. We use no advertising or third-party tracking cookies.
Questions about your data, or to exercise your rights? Email us at hej@epicurelounge.se.