What we do with a hotel’s data, and with a guest’s details.
Last updated 17 October 2026
The short version. A hotel’s guest list and content live in that hotel’s own Google account, in files the hotel owns. We do not sell anything to anyone, we do not advertise, and we do not build a profile of any guest.
We hold as little as we can, and this page says exactly what that is.
Lakbay builds guest apps for hotels in the Philippines. A hotel buys the app; their guests use it. This page covers both, because the two see different things.
The app asks for your details once, on a form with consent boxes you have to tick yourself. Nothing is taken before that, and you can browse the whole app without registering.
| What | Why |
|---|---|
| Your name, and your WhatsApp number or your email | So the hotel knows who you are and can reach you. Your name is required, and one of the other two; either is enough |
| Your check-in date, and your check-out date if you give it | To lay your stay out in the planner, and to know when offers apply |
| Your room number and how many are staying with you, and the other of WhatsApp or email, if you give them | So the front desk knows who is asking, and so every guest in the room gets their share of an offer. All optional |
Into the hotel’s own Google account, in a spreadsheet the hotel owns. It is their guest list, not ours. If Lakbay disappeared tomorrow the hotel would still have every row of it.
On newer hotels, that data passes through our service on its way to their spreadsheet. We do not keep a copy once it has arrived. On hotels set up before October 2026 it does not pass through us at all — it goes straight from your phone to their account.
Some hotels switch on self check-in with a passport photo. It is off unless the hotel turns it on. If it is on, the photo goes into the hotel’s own Google Drive and is deleted seven days after your check-out date.
Your saved itinerary, the things you have hearted, and your language choice are kept in your own browser on your own device. They are never sent to the hotel or to us, and clearing your browser data removes them.
When you message the front desk, the app opens WhatsApp with a message already written. From that point you are talking to the hotel on WhatsApp, under WhatsApp’s own privacy terms, and we are not in that conversation and cannot read it.
The app records which sections guests open, counted together and never tied to a person, so a hotel can tell what its guests actually look at.
It is the hotel’s guest list, so ask the hotel — they can see it and delete it themselves. If you cannot reach them, write to us at the address below and we will help.
When you connect your Google account, you are asked for one permission only:
drive.file — see, edit, create and delete only the specific files you
use with this app.
That is deliberately the narrowest one Google offers. It means Lakbay can only ever touch the files it makes for you — your guest spreadsheet, your content file, and the photographs you add through the app. It cannot open, list or read anything else in your Drive, and that is enforced by Google, not by our good intentions.
| What | Where |
|---|---|
| A token that lets us write to those files | Encrypted, on our service. Never shown to anyone, including you |
| The IDs of those files | Our service |
| Your passcode, and your front-desk, staff and outlet PINs, as one-way hashes | Our service. We cannot read the actual codes |
| Which guests the desk has checked in, which perks were redeemed and which gifts were given | Our service, recorded against each guest’s code, not their name, so the desk and the bar see the same answer |
We do not keep a copy of your guest list, your photographs or your content. Those live in your Drive.
If you use Translate, the words of your listings (not anything about your guests) are sent to Cloudflare’s translation service and the translations are saved into your content file.
You can revoke Lakbay’s access at any time in your Google account, under Security → Third-party apps. Your spreadsheet and content file stay in your Drive and remain yours. Ask us and we will delete the token and file IDs we hold.
Your guest list and your content are already in your own Google account. You would keep them without doing anything. The app itself runs on our hosting, so it would stop when the service did; your files would not.
Only the services that make the app work:
Nobody else. No advertisers, no data brokers, no analytics companies.
A hotel’s guest list is kept for as long as the hotel keeps it — it is their file and their decision. What we hold about a hotel is deleted when they ask or when they stop using Lakbay.
The app is not meant for children, and we do not knowingly collect anything from them. A guest’s details are filled in by whoever is booking the room.
If we change how any of this works, this page changes with it and the date at the top moves. Anything that materially affects a hotel, we will tell them directly rather than leaving it here to be noticed.
Questions about any of this, or a request about your data: [email protected]
Lakbay · Philippines