Privacy Policy

At LIQR we care about your personal privacy and always strive for a high level of data protection. This privacy policy explains how we collect and use your personal information — on the liqr.se website and in the LIQR app. It also describes your rights and how to exercise them.

Please take the time to read this privacy policy. You are always welcome to contact us with any questions.

Last updated: 2026-07-20.

Who is responsible for the personal data we process?

La-Bas AB, corporate registration number 556801–6157, address Sibyllegatan 52B, 114 43 Stockholm, Sweden, is the data controller for the company's processing of personal data.

What personal data do we process, and why?

Account and service administration

To administer the LIQR service and fulfil our contractual obligations (legal basis: performance of contract).

• Creating and managing your sign-in and account.
• Verifying your age.
• Keeping your details correct and up to date.
• Sending relevant information and offers by email, SMS or similar.
• Push notifications to your phone, if you use the app and have allowed notifications.

Social features

LIQR includes social features. When you use them, we process the data those features require (legal basis: performance of contract).

• Public profile. If you actively choose to make your profile visible, your chosen display name, profile picture, bio and public activity (for example forum posts and toasts) are shown to other signed-in users. Your email address is never shown. You can make your profile private again at any time — doing so also means leaving the social features: your friends, groups and points are removed and your public toasts are removed from the feed.
• Friends and blocks. We store friend requests, friendships and blocks so these features can work. Friend suggestions are computed from, among other things, mutual friends and activity; only public profiles are suggested.
• Messages and group chat. The content of your direct messages and group chats (text and any images) is stored so the conversations can be shown to their participants. Messages are not public — they are only visible to the participants of the conversation.
• Forum. Posts you make in the forum are public and shown with your display name and profile picture.
• Toasts (clink). The toast feature comes in several forms. A public toast — text and any image you choose to share — is shown publicly in the feed together with your name and profile picture. A public toast can also be a toast back to another user; that user's display name is then shown in the post ("X toasts with Y"). The named user can remove or report the post at any time. A directed or random toast is private: we store the sender, recipient, the message, its status (for example answered, passed or expired) and when it expires, so the toast can be shown to the two of you. A random toast may also reach users who do not have a public profile; in that case the sender never learns who the recipient is unless the recipient toasts back. If someone reports a toast, we store the report and the stated reason so we can moderate.
• Points and levels. Activity such as mutual toasts, forum posts and accepted invitations can earn you points. We store these in a points ledger (linked to you and, where applicable, to the other user). Your point level and title are shown publicly next to your name on your profile, in the forum and in chat. A weekly leaderboard is computed from the points and lists only public profiles.
• Bar cabinet. If you use the bar cabinet, we store the list of drinks you add — either as a product from the catalogue or as your own name with an optional image of your own. The bar cabinet is used to match recipes for you and may be shown on your public profile. You decide whether the bar cabinet is shown on your profile and can turn it off at any time. When — and only when — both your profile and your bar cabinet are public, its contents (the drinks' names and categories) may be sent as context to our AI features for better recipe and forum replies; if the bar cabinet is private, none of this is shared.
• Voice and video calls. Audio and video are relayed in real time and are not recorded by us. We store information about the calls (who participated, start and end times, and your total call time) for operations and statistics.
• Surveys. Survey answers are linked to an anonymous session id and, when you are signed in, to your account.

Content moderation, translation and AI features

To improve functionality and keep the service safe, user-generated content (for example forum posts) may be shared with external providers of large language models (LLMs), such as OpenAI and Anthropic. The purpose is to moderate content, analyse posts, generate replies and translate content into the service's other languages (legal basis: legitimate interest in a safe and functioning service).

The data that may be sent to these providers is:

• The user's display name
• The time of the post
• The text content of the post

No additional personal data (such as email address or IP address) is shared in this context.

In the forum, some participants may be AI features rather than people. So that you can tell them apart from other users, these AI participants have an animal picture as their profile picture.

Marketing and conversion measurement

To measure and improve our marketing (legal basis: legitimate interest, and consent for non-essential cookies).

• Analysis and processing (profiling) based on, for example, your history, location, age, gender and browsing history.
• Placement of cookies and pixels, and server-side reporting of conversion events (for example clicks on buttons linking to Systembolaget) to advertising platforms: Meta (Facebook/Instagram), TikTok, Snapchat and Google.

Categories of personal data

• Name and display name
• Age
• Gender
• Contact details (for example address, email and phone number)
• Username and password
• Profile picture and images you upload (for example in chat, forum and toasts)
• Content of messages and conversations
• Toasts and points (toasts sent and received, status, points and level)
• Bar cabinet (drinks you have added, including your own names and images)
• Friendships and blocks
• Call information (participation, times and total call minutes — not the content of calls)
• IP address
• Location information
• Push token and device information (in the app)
• Clicks on buttons linking to Systembolaget
• Facebook ID/Instagram ID
• Browsing history (for example which ad you clicked and which pages on LIQR you visited)

From which sources do we collect your personal data?

In addition to the data you provide to us, we may also collect data in connection with advertising and similar. If you connect via an external service such as Facebook, data is retrieved from it. What data is retrieved is shown when you connect.

Who may we share your personal data with?

Data processors

Where necessary for us to provide our services, we share your personal data with companies that act as data processors for us, i.e. companies that process the information on our behalf. These are providers in the following categories:

• Operations and hosting (for example cloud services for the website, app API and database)
• File storage for images (for example Cloudflare)
• Email delivery (for example Brevo)
• Push notifications to the app (for example Expo)
• Real-time relay of voice and video calls (for example LiveKit)
• AI services for moderation, translation and content (for example OpenAI and Anthropic)

Partners

In some cases, for example so that you receive relevant information and so we can measure our marketing, we share certain personal data with partners: Meta (Facebook/Instagram), TikTok, Snapchat and Google.

Where do we process your personal data?

We strive to process your personal data primarily within the EU/EEA. However, some of our providers (for example within hosting, push notifications, call relay and AI) are US companies, and personal data may therefore be transferred to countries outside the EU/EEA. When this happens, we ensure that the transfer has a valid legal basis, such as the EU Commission's Standard Contractual Clauses (SCCs) or an adequacy decision such as the EU-U.S. Data Privacy Framework.

How long do we keep your personal data?

• Account data is kept for as long as you have an account. You can delete your account yourself at any time, directly on the website or in the app. Your account is then deactivated immediately — your profile, your clinks and your name stop being shown on the site — and is permanently deleted within 30 days. At permanent deletion the account data and all images you have uploaded (profile picture, clink photos and image attachments in chat and forum) are removed for good, including from our image storage and CDN cache.
• Content you have published (for example forum posts, messages and images) is kept as long as the account exists or until you remove the content. When you delete your account your forum posts remain, but they are anonymised — your name and profile picture are removed and the posts are shown as an anonymous user. Images attached to posts are, however, permanently deleted together with the account. If you want the posts removed entirely you must do so yourself before you delete the account, as you can no longer access them afterwards. If you have written personal data in the running text of a post and want it removed after account deletion, email admin@liqr.se and we will help you.
• Statistics and marketing data is kept as long as needed for each purpose and is then deleted.

Some data may need to be kept longer where required by law (for example accounting legislation).

What are your rights as a data subject?

Right of access (register extract)

We are always open and transparent about how we process your personal data. If you want deeper insight into which personal data we process about you, you can request access to the data (the information is provided as a register extract stating purposes, categories of personal data, categories of recipients, storage periods, information about where the data was collected from and the existence of automated decision-making).

Note that if we receive a request for access, we may ask for additional information to ensure efficient handling of your request and that the information is provided to the right person.

Right to rectification

You can request that your personal data be corrected if it is inaccurate. You also have the right to request completion of any incomplete personal data.

Right to erasure

You can delete your account yourself at any time via the profile page on the website or the account screen in the app. In addition, you can request erasure of personal data we process about you if:

• The data is no longer necessary for the purposes for which it was collected or processed.
• You object to a balancing of interests we have made based on legitimate interest and your reason for the objection outweighs our legitimate interest.
• You object to processing for direct marketing purposes.
• The personal data is being processed unlawfully.
• The personal data must be erased to comply with a legal obligation to which we are subject.

Note that we may be entitled to refuse your request if there are legal obligations that prevent us from immediately erasing certain personal data. These obligations stem from, for example, accounting and tax legislation or banking and anti-money-laundering legislation. It may also be that the processing is necessary for us to establish, exercise or defend legal claims. Should we be prevented from complying with an erasure request, we will instead block the personal data from being used for purposes other than the purpose preventing the requested erasure.

Right to restriction

You have the right to request that our processing of your personal data be restricted. If you believe the personal data we process is incorrect, you can request restricted processing during the time we need to verify whether the personal data is accurate. If we no longer need the personal data for the established purposes, but you need it to establish, exercise or defend legal claims, you can request restricted processing of the data by us. This means you can request that we do not erase your data.

If you have objected to a balancing of interests based on legitimate interest that we have used as a legal basis for a purpose, you can request restricted processing during the time we need to verify whether our legitimate interests outweigh your interests in having the data erased.

If processing has been restricted according to any of the situations above, we may only — in addition to the storage itself — process the data to establish, exercise or defend legal claims, to protect someone else's rights, or if you have given your consent.

Right to object to certain types of processing

You always have the right to opt out of direct marketing and to object to all processing of personal data based on a balancing of interests.

Legitimate interest

Where we use a balancing of interests as the legal basis for a purpose, you have the option to object to the processing. To continue processing your personal data after such an objection, we need to be able to show a compelling legitimate reason for the processing in question that outweighs your interests, rights or freedoms. Otherwise, we may only process the data to establish, exercise or defend legal claims.

Direct marketing (including analyses performed for direct marketing purposes)

You have the option to object to your personal data being processed for direct marketing. The objection also covers analyses of personal data (so-called profiling) performed for direct marketing purposes. Direct marketing means all types of outreach marketing measures (for example via post, email and SMS). Marketing measures where you as a customer have actively chosen to use one of our services or otherwise sought us out to learn more about our services do not count as direct marketing.

If you object to direct marketing, we will cease processing your personal data for that purpose and cease all types of direct marketing measures.

Note that you always have the option to influence which channels we use for direct mailings and personal offers. For example, you can choose to receive offers from us only by email, but not SMS. In that case, you should not object to the personal data processing as such but instead limit our communication channels.

You can also object specifically to the analyses we perform (profiling).

Right to data portability

You have, in some cases, the right to request that the data concerning you that you have provided to us be transferred to another data controller (so-called data portability). A prerequisite for data portability is that the transfer is technically possible and can be automated.

What is written about the rights above only applies to processing of personal data covered by the GDPR.

How is your personal data protected?

We use IT systems to protect the confidentiality, integrity and availability of personal data. We have taken specific security measures to protect your personal data against unlawful or unauthorised processing (such as unlawful access, loss, destruction or damage). Only those persons who actually need to process your personal data for us to fulfil our stated purposes have access to it.

Contact the Swedish Authority for Privacy Protection

The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) is the supervisory authority responsible for monitoring the application of the legislation. If you believe a company is processing personal data incorrectly, you can lodge a complaint with the authority.

How do you contact us with data protection questions?

You can always reach us at:

La-bas AB
Sibyllegatan 52B 114 43 Stockholm
Email: policy@liqr.se

We may make changes to our privacy policy. The latest version of the privacy policy is always available here on the website.