Privacy information

Privacy policy

This policy explains how AYA Mozambique handles personal data when you use AYA LodgeOS Gestão.

Who is responsible

AYA Mozambique provides the LodgeOS platform. The accommodation or organisation using LodgeOS controls which authorised people may access its operational records. Privacy questions can be sent to suporte@aya-moz.com.

Data that may be handled

The categories depend on your role, permissions and the functions used. They may include:

• account and identification data, such as name, email, phone number, role and association with an accommodation;
• authentication and security data, including credentials in protected form, sessions, passkeys, push subscriptions and security or audit records;
• operational records entered or received through LodgeOS, such as reservations, guest records, tasks, attendance, checklists, maintenance, stock, expenses, payments, invoices, notes and evidence photographs when the relevant function is used;
• guest identity data and documents, including images or files, only when they are provided in a booking, registration or stay flow that uses that information;
• precise location data, only when the user starts a function that requires it and authorises access on the device;
• technical data needed to operate and protect the service, such as device or browser information, network identifiers in raw or pseudonymised form, and error or synchronisation records.

Camera access is requested only in flows that use a photograph or QR code. Precise location access is requested only in the context of a user-initiated function that requires it. Notification permission is requested only for compatible notification functions. A user-initiated record may remain temporarily on the device while it waits to be synchronised.

Why the data is used

• to authenticate users and apply the access permissions assigned by their organisation;
• to provide the accommodation management and operational functions selected by the user;
• to synchronise records, deliver requested notifications and provide support;
• to secure, audit, diagnose and maintain the service;
• to meet applicable contractual, accounting, security or legal obligations.

Access and technical service providers

Data may be available to the organisation that manages the relevant accommodation and to its authorised users. AYA Mozambique may use technical providers for functions such as hosting, storage, email, push notifications and service security. Information may also be disclosed where needed to comply with an applicable obligation or to protect users, the service or other people. Access is limited according to the function being performed.

Protection and retention

AYA Mozambique uses measures such as encrypted transport, access controls, protected credentials, audit records and encryption or pseudonymisation for selected sensitive fields. No system can guarantee absolute security.

Retention varies according to the type of record and the operational, contractual, accounting, security and legal purposes that apply. This policy does not set a single period that applies to every record.

Your choices and requests

You may ask about, correct or request deletion of personal data associated with your account. Identity and authority may need to be verified before a request is carried out, so that another person cannot change or delete your data.

A deletion request is assessed against the relevant records and obligations. Depending on that assessment, data may be deleted, anonymised, restricted or retained where it is still necessary. Submitting a request does not delete records automatically.

Account and data deletion information. The public request form is not enabled yet.

Changes to this policy

This page may be updated when the service or its data handling changes. The update date shown below identifies the current published text.