How Le Club protects your group's data

Le Club uses email + password and Google sign-in. Sessions are managed by our authentication provider; passwords are never stored by Le Club directly. Anonymous sign-ups are disabled.

Access to a boat is gated by an invite code from a co-owner. Membership in a boat group determines what data you can read or change.

Every table that holds group data is protected by row-level security. Bookings, trip logs, issues, maintenance tasks, escrow and signatures are scoped to the boat you belong to — co-owners of other boats cannot read or modify your group's records.

Sensitive actions (deleting a boat, replacing the operating agreement, re-drawing the rotation) require approval from the co-owners and are recorded.

Trip photos, damage report photos and signed agreement PDFs are stored in private buckets. They are served via short-lived signed URLs to authorized members only and are not publicly listable.

Profile avatars live in a separate public bucket because they are intentionally visible to other members of your boat.

Le Club is built on the Lovable platform. The app runs on Lovable's managed hosting and uses Lovable Cloud for the database, authentication, storage and server functions. Data is transmitted over HTTPS.

Lovable platform capabilities described here are factual statements about the underlying infrastructure, not a Lovable certification of this app.

We collect what you enter into the app: your name and email, your boat details, bookings, trip logs, expenses, maintenance entries, damage reports, and any media you upload. We also collect operational logs needed to run the service.

We do not sell personal data. Co-owners in your boat group can see the data shared inside that group; users outside your group cannot.

A group admin can delete a boat (with co-owner approval), which removes the boat's bookings, logs, maintenance, escrow and membership records. To delete your account entirely, contact us using the address below.

If you believe you have found a security vulnerability in Le Club, please email security@leclub.app with a description and steps to reproduce. Please do not publicly disclose the issue until we've had a chance to respond.

For privacy questions or data requests, email privacy@leclub.app.