Privacy.
Last updated 5 October 2026
Lido is a concierge that books restaurants, spas, golf, salons and studios in Newport Beach, California. This policy covers the Lido iPhone app, the Lido keyboard, the web app at app.vialido.ai, email to Lido, and this website. It says what we collect, why, who else sees it, how long we keep it, and how to have it deleted. Write to hello@vialido.ai with anything this page does not answer.
Who we are
Lido is a service of Paybots Inc., d/b/a Via Lido. When this policy says “we”, it means Paybots Inc.
What we collect
- Your account. The email address you sign in with, and your name if your sign-in gives us one. What you add so Lido can book in your name: your first and last name, your phone number and the town you live in, with its postal code and time zone. If you add them, your postal address, date of birth and gender, which some venues ask for.
- Your conversations. What you write to Lido, in the app, on the web or by email, and what Lido writes back. An email you send Lido is kept whole, with any earlier messages quoted in it; its attachments are never opened.
- What Lido remembers about you. Short notes, one fact a line: what you asked it to remember, what your account says, and, if you connect Google, what your calendar and mail show about your places, your people and your routine. Lido is built never to write down card or bank account numbers, Social Security, passport or driving licence numbers, passwords, sign-in codes or links, or anything about your health, religion, sexuality, politics or immigration status. The one exception is an allergy or what you will not eat, kept as what a restaurant needs to know.
- Your bookings. What you ask Lido to book: the venue, the time, the party, any note for the venue, and what the venue confirmed. Our service keeps them as part of your conversations, and the app keeps a list of them on your iPhone.
- Your Google account, only if you connect it. Described in its own section below.
- What you send from the Lido keyboard, only if you turn that on. Described in its own section below.
- Technical logs. Our servers log what they do: which account asked for something, when, and what went wrong if anything did. The logs also hold what Lido's AI model was given and what it answered, which includes the text of your conversations, what Lido remembers about you, and anything it read or typed to answer or book, such as a calendar entry, an email or the details a booking form asked for.
- Messages to us. If you write to hello@vialido.ai or text us, we keep your message and your address or number so we can answer you.
What stays on your iPhone
- Cards. A card you add is kept on your iPhone only: its brand, last four digits, expiry and the name on it. The full number and the security code are not kept, and nothing about a card is sent to us or to anyone else.
- Your iPhone's calendars, if you let the app read them. They are read on the phone to show your week and find the times you are free. When you book, the app tells Lido when you are free around the time you asked for, never what your events are.
- Google, read on the phone. The app also reads your calendar, your contacts, and the booking confirmations and receipts in your mail on the phone, to show your week and suggest what to book. It reads them with short-lived access borrowed from the one Google connection Lido's service holds for your account, described below, so there is no separate Google consent for the app. What it reads stays on the phone, apart from what goes into a booking you make: the place, when you are free, and your name and email address.
- What the Lido keyboard needs to offer you things as you type: your name and number, your bookings, your free times and the places you go.
- Your bookings, your settings and the holds you are deciding on, so the app opens instantly.
Signing out keeps these on the phone for when you sign back in. Deleting your account in the app deletes your sign-in, cards, bookings and settings from the phone, and deleting the app removes the rest, including what the keyboard keeps.
Signing in, and connecting your Google account
You can sign in with a code we email you, with Apple or with Google. Signing in tells us your email address, and your name if Apple or Google gives it to us.
- Sign in with Apple can give us a private relay address that Apple forwards to you, instead of your own. Apple gives us your name only the first time you sign in. It reads nothing else.
- Sign in with Google also connects your Google account, on the same Google screen: it asks for your email address and name, and for the access described next. You can untick any of it there and still be signed in, and allow it later from Settings.
-
Connecting Google happens on that screen, or as a step
of its own if you signed in another way. It lets Lido's service:
- read every calendar you can see, including ones others share with you: the last twelve months and the next twelve weeks whenever Lido updates what it knows about you, and the days it needs when it answers you or suggests something, so you are never offered a time you are busy;
- add what it books to your calendar, and change or cancel an event when you ask, with the guests you name, whom Google then emails about it from your account;
- read your contacts, including the addresses Gmail saved for you, to find the address of someone you name and to know who you see most;
- read your mail: up to 600 messages from each of the last six months whenever Lido updates what it knows about you, only ones you opened or sent, leaving out spam, promotions, social mail and forums, and, when you ask for something like a confirmation, a search of your whole mailbox and the threads it finds. Lido never sends mail from your account and never opens an attachment.
From Google, Lido keeps the notes described above, and copies of your calendar and contacts for up to 30 days so it can answer without asking Google each time. It keeps no copy of your mailbox. Disconnecting revokes Lido's access at Google, deletes those copies, and then deletes the notes Lido learned from your calendar and mail. What you told Lido yourself, your conversations, and events it already put on your calendar stay until you delete them.
Lido's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you see in Lido. We do not sell it, we do not use it for advertising, we do not use it to develop, improve or train generalized AI or machine learning models, and we do not allow humans to read it except with your permission, to resolve a problem you have reported, for security, or where the law requires it.
How Lido uses AI
Lido's answers are written by Claude, an AI model made by Anthropic, and a booking made on a venue's own page is carried out by Claude too. To answer you or book for you, we send Anthropic:
- what you write, and the conversation so far;
- what Lido remembers about you, which includes your name and town;
- whatever Lido looks up for the answer: calendar entries, a contact's name and address, an email thread, a web page, or a booking page and a picture of it;
- for a booking on a venue's page, the details you have added for its form: your name, phone number and email address, and your postal address, date of birth or gender if you added them;
- if you connect Google, your calendar and mail when Lido updates what it knows about you, as described above, and your calendar for the next four weeks when it suggests something to book.
Anthropic also runs the web searches Lido makes, so it sees what Lido searches for and the town it searches near. Before the app sends Anthropic anything you write, it asks for your permission and says what goes. You can withdraw it in the app's Settings at any time; without it, Lido cannot answer you or book for you, because Claude does both.
Under Anthropic's commercial terms, Anthropic may not train its models on what we send it. It processes it to give us an answer, and deletes it within 30 days unless its own safety rules or the law require it to keep it longer.
The Lido keyboard
The Lido keyboard reads the sentence you are typing, never the rest of the conversation and never a password field. It sends Lido nothing until you turn on Ask Lido from the keyboard in the app's Settings, which starts off, and then only what you tap to send: the sentence when you tap Ask Lido, a booking when you tap Book it, and the name of a place you open, for Lido to look up. That goes to Lido's service and to Anthropic, is kept with your account like anything you ask in the app, and is never used for advertising or to train AI models.
What we use it for
To sign you in; to answer you, and to make, change and follow the bookings you ask for; to remember what makes the next one easier; to suggest things you might want to book; to send you sign-in codes and messages about your bookings; and to keep the service secure and working. That is all we use it for.
Who else sees it
Each of these gets only what it needs for its part. Those that run part of Lido for us, Amazon Web Services, Anthropic, Browser Use, and Google for our email, may use it for nothing else. The others handle it under their own privacy policies.
- Amazon Web Services hosts the service and stores what we hold, in the United States, and delivers our email.
- Anthropic writes Lido's answers and carries out its bookings, as described above.
- Browser Use runs the web browser Lido books in when a venue has no other way in. It sees the pages Lido opens and what Lido types into them: the booking, and your name, phone number, email address and anything else the venue's form asks for. It keeps that browser's cookies and sign-ins for your account, so a booking can be made as you rather than as a guest, until you delete your account.
- Decodo provides the internet connection that browser uses. It sees which sites the browser visits and when, but not what is on a page sent over an encrypted connection, as booking pages are, and its own policy says it keeps no record of the pages visited.
- The venue, and the platform it books through, such as OpenTable or Resy: your name, your phone number, the time, the party and any note, and your email address, date of birth or other details if its form asks for them. Their own privacy policies govern what they do with it.
- Google, if you connect your account or sign in with it, as described above. Google also runs our email, so mail you send to Lido or to hello@vialido.ai passes through it.
- Apple, if you sign in with Apple. Apple also turns what you say to Siri or the Action Button into the text Lido receives, and works out drive times for the Lido keyboard from your home town and a place's address. Lido reaches you through the App Store and TestFlight, Apple's service for testing an app before release: to invite you to a test we give Apple your email address, and Apple shows us crash reports, how the app is used and any feedback you send, from testers and from anyone who chose to share them with developers. Some test builds also start Superwall, a service for showing offers inside apps, which then receives a device identifier, the device's model, language, time zone and IP address, and which screens were opened. The App Store version does not start it.
- Websites the app loads directly. The app loads product lists and pictures from a few shops' own websites, and the web app loads maps and photos of places from Google. Each sees your IP address when it does, and Google sees the place.
- Anyone the law obliges us to tell, and only as far as it obliges us.
- A buyer, if Paybots Inc. or Lido is ever sold or merged, who would be held to this policy.
What we don't do
We do not sell your information, and we do not share it for advertising. We show no ads. We do not use what you tell Lido, or what it reads, to train AI models, and Anthropic may not either. People at Paybots Inc. do not read your conversations or your Google data, except with your permission, to resolve a problem you have reported, for security, or where the law requires it.
How long we keep it
- Your account, conversations, notes and bookings stay until you delete them or the account.
- Copies of your Google calendar and contacts are kept for up to 30 days, and deleted when you disconnect Google.
- Email you send Lido is held as it arrived for one day, while Lido answers it. The conversation it starts stays with your account. A reply that fails to send is kept for up to 14 days while we find out why.
- Technical logs are kept for 90 days, then deleted.
- Backups. Our database keeps a continuous backup of the last 35 days, used only to recover from a failure. Anything deleted is gone from it 35 days later.
Deleting your account
In the app, open Settings, then Your data, then Delete account. On the web, it is in Settings. It happens the moment you confirm: your account and everything in it, your conversations and what Lido remembers are deleted, Lido's access to your Google account is revoked at Google, the browser Browser Use kept for you is deleted, and your sign-in is closed. The app then deletes your cards, bookings and settings from your iPhone.
What remains afterwards: our backups for up to 35 days, our logs for up to 90, and mail on its one-day or 14-day clock, as above; what Anthropic holds, for up to 30 days; and what a venue already has, which is theirs. Bookings you made still stand, so cancel any you no longer want with the venue. If you cannot sign in, write to hello@vialido.ai from the address on the account and we will delete it for you.
Your choices
- See and correct your details in Settings, in the app or on the web, and ask Lido in a conversation what it remembers about you, or to forget something.
- Disconnect Google in the app's Settings, under Connections, then Google, read by Lido; on the web, in Settings; or remove Lido from your Google account permissions. It is one connection, so this ends what Lido's service reads and what the app reads on the phone together.
- Turn off Ask Lido from the keyboard in the app's Settings, under Type with Lido, or remove the keyboard in your iPhone's Settings.
- Withdraw your permission for Lido's AI in the app's Settings.
- Delete your account, as above.
- Ask us at hello@vialido.ai for a copy of what we hold about you, to correct it, or to delete it. California residents have further rights over personal information under state law, and we honour them for everyone, wherever they live.
Security
Traffic is encrypted in transit and what we store is encrypted at rest, and access is limited to the few people who run the service. No system is perfect. If something goes wrong that affects you, we will tell you.
Children
Lido is for adults. It is not directed at anyone under 18, and we do not knowingly collect their information. If we learn we have, we delete it.
Changes
If this policy changes materially, we will say so on this page and, where it matters, by email or in the app. The date above always reflects the current version.
Contact
Paybots Inc., d/b/a Via Lido · hello@vialido.ai