Privacy Policy — Nevron and Nevron Staff
Last updated 13 October 2026
1. Who we are, and what this covers
This policy covers our two mobile apps: Nevron, for hotel guests, and Nevron Staff, for hotel employees. It does not cover our website, which has its own policy.
The apps are provided by Nevron d.o.o., Kidričeva cesta 56, 4220 Škofja Loka, Slovenia, company number 5986761000, VAT SI51519658 ("Nevron", "we"). Contact us about privacy at support@nevron.co.
Sections 2 to 5 are for guests. Section 7 is for staff. Section 6 and sections 8 to 13 apply to both.
2. Guests: who is responsible for your data
For your stay, the hotel is responsible. Everything about your stay at a hotel — your booking, orders, requests, messages, check-in details, and the preferences the hotel records about you — is decided by that hotel. In law the hotel is the controller and we are its processor: we run the software for the hotel and act only on its instructions. For questions about this data, contact the hotel. Its own privacy notice applies alongside this one.
For your Nevron account, we are responsible. We decide how the following is used, so we are the controller of it:
- your Nevron account: email address, name, password, and any Google or Apple sign-in you link;
- the list of your stays at hotels that use Nevron, with the hotel, the dates and the room, so that one account shows all your stays;
- your devices: the notification token and when each device was last active;
- a history of sign-in and account events, to keep your account secure;
- your acceptance of our Terms of Use: which version and when.
A basic identity record for hotel guests. When a hotel that uses Nevron records a guest, the platform also creates a basic identity record for that guest, even if the guest does not use the Nevron app. It holds the guest's email address, if the hotel has one, and links to that guest's records at each hotel, with the number of stays and when the guest was last seen. When you confirm your email address — by signing in to a Nevron account, or by opening a sign-in link that a hotel sent to that address — we link your stays at different hotels that use the same address. Our own staff can see how many hotels one person has stayed at. We keep this record and do this linking for our own purpose, so we are the controller of it.
Preferences the hotel records about you. A hotel can record your preferences, for example from your orders, requests, interests, survey answers and chat, to tailor your stay. This is the hotel's own processing. The hotel's privacy notice explains it and its legal basis. Today this is on unless you turn it off. In each hotel, you can turn it off and erase what has been recorded, under Privacy choices in the app.
3. What the Nevron app collects
| Data | Why | Who else receives it |
|---|---|---|
| Email address, name | Why: Your account and sign-in — by emailed code or link, or with Google or Apple | Who else receives it: Our hosting and email providers (section 6). Google or Apple, if you sign in with them |
| Your stays and what you do in the hotel: orders, requests, bookings, messages, survey answers, feedback | Why: Providing the services you ask the hotel for | Who else receives it: The hotel and its own systems, and our hosting providers (section 6) |
| Payment card details | Why: Paying for what you order | Who else receives it: Entered directly into the hotel's payment provider's form. We never receive your card number — only the card type and last four digits |
| Mobile phone number, if you give one | Why: Sending you updates about your order in the messaging app you choose (for example WhatsApp) | Who else receives it: The hotel, and the messaging service you choose |
| Notification token and device identifiers | Why: Sending the notifications you turn on | Who else receives it: Google Firebase |
| Photos and files you send in chat | Why: Attachments to your messages to the hotel | Who else receives it: The hotel. Stored in the EU (section 6). Kept with your messages (section 8) |
| A photo of your passport or ID card, and the details read from it (name, date of birth, nationality, document number and type) | Why: Checking in, where the hotel offers it | Who else receives it: If the hotel has switched on automatic reading and you do not choose "Not now", the image is read by an artificial-intelligence service, by default outside the EU. The hotel's reception is told by email that new photos are in your guest record; the email does not contain the photos. The photo is deleted automatically 30 days after your latest check-out at that hotel. |
| Messages to the in-app assistant | Why: Answering you | Who else receives it: An AI provider, together with the earlier messages in the same conversation, your room, your stay dates, the number of guests on your booking, your booking reference, and, where the hotel has switched this on, the preferences it has recorded about you. This includes any health details you write, for example an allergy (see below) |
| Preferences the hotel records about you, from your orders, bookings, requests, interests, survey answers, stays and conversations | Why: Letting the hotel tailor your stay (section 2). On unless you turn it off. You can turn it off and erase it under Privacy choices in the app | Who else receives it: The hotel. An AI provider, which picks out preferences from conversations and writes a short note for hotel staff. From conversations it may record a diet you follow or a food you avoid (for example "Avoids nuts"), which can show an allergy or intolerance. Accessibility needs and medical conditions are not taken from chat |
| Interests the hotel has marked as a dietary need (for example "Vegan" or "Gluten-free"), if you choose one | Why: Serving you safely: hotel staff see it under "Must know" and, where the hotel has switched this on, the assistant is reminded of it | Who else receives it: The hotel. The assistant's AI provider, where the hotel has switched this on |
| Your interests, and optionally your gender, who you are travelling with and the purpose of your stay | Why: Tailoring what the hotel offers you | Who else receives it: The hotel |
| Which suggestions you see and tap. Recorded only while "Personalise my stay" is on in the hotel's Privacy choices | Why: Showing you suggestions that suit you | Who else receives it: The hotel |
| How far you have watched a film or series, in the app or on the TV. Recorded even when "Personalise my stay" is off | Why: Letting you continue watching where you left off | Who else receives it: The hotel |
| Which links in chat you open. Recorded even when "Personalise my stay" is off | Why: Improving the service | Who else receives it: The hotel |
| Usage statistics: which screens and features of the app you use, what you open or tap there, and for how long, with your app version and language. Linked to your guest record and stay at the hotel when you are signed in. On the room TV: which sections and channels are opened and for how long, linked to the TV, not to you. Off until we switch it on; the hotel can limit it to recording only when the app is opened. Recorded even when "Personalise my stay" is off | Why: Improving the service | Who else receives it: The hotel. Our own reports show only totals per hotel, without names |
| Searches in the hotel list and which hotel you tap | Why: Improving the hotel search. Recorded without your name or account | Who else receives it: No one |
| The IP address and device description recorded when you accept terms, answer a survey or leave feedback | Why: Evidence of what you agreed to, and preventing abuse | Who else receives it: The hotel, for its own terms |
| Your device's internet address, when the app loads | Why: Displaying the app's fonts | Who else receives it: Google (fonts) |
| Biometric unlock | Why: Unlocking the app | Who else receives it: No one — it never leaves your phone. The app is only told yes or no |
| Location and advertising tracking | Why: — | Who else receives it: Not collected. The app contains no advertising or third-party analytics trackers and never asks for your location. |
Health details in the chat assistant. What you write to the in-app assistant is sent to an AI provider so that it can answer you. This includes any health details you choose to write, for example an allergy or a medical condition. Do not write health details to the assistant unless you want it to use them in its answer.
If you invite someone to join your stay, you give us their name and email address so that we can invite them. Please only do this for people who are expecting it.
4. Marketing
Neither we nor the hotels send marketing through the apps. When someone invites you to join their stay, the sign-up screen may ask whether you would like offers. We store that answer, but nothing uses it today. If marketing is ever added, you will be asked for permission separately, never as part of accepting terms, and refusing will never affect the service you receive.
5. Guests: why we are allowed to use your data
This section covers the data we control (section 2). For your stay data, including the preferences a hotel records about you, the hotel's privacy notice gives the legal basis.
- To provide what you asked for — your account and your list of stays. This is necessary for our contract with you (our Terms of Use).
- Legitimate interests — keeping accounts and the service secure, preventing abuse, and improving the service. You can object to this use (section 10).
6. Who else sees your data
| Provider | What they do | App | Where |
|---|---|---|---|
| Stripe | What they do: Card payments (the hotel is the merchant) | App: Guest | Where: EU (Ireland) |
| Google Firebase | What they do: Delivering notifications | App: Both | Where: Global |
| Google, Apple | What they do: Optional sign-in with your Google or Apple account | App: Guest | Where: Global |
| Google Fonts | What they do: Delivering the fonts the apps display; receives your device's internet address | App: Both | Where: Global |
| OpenAI | What they do: The assistant, understanding questions, picking out preferences, guest notes, reading ID documents, indexing hotel content | App: Guest | Where: USA |
| Anthropic, Google Gemini | What they do: Possible alternative AI providers, if the hotel's administrator switches | App: Guest | Where: USA |
| Wasabi | What they do: File storage: attachments, task photos, document images | App: Both | Where: EU (Frankfurt) |
| Cloudflare | What they do: Delivering public media, DNS | App: Both | Where: Global |
| Render | What they do: Hosting the service and its database | App: Both | Where: EU (Frankfurt) |
| Sentry | What they do: Error reports, which can contain technical details of your session | App: Both | Where: EU |
| Hetzner | What they do: Sending email (sign-in codes, notifications) | App: Both | Where: EU (Germany) |
| Your hotel's property management system — for example Mews, Oracle Opera, Protel, Clock, Bentral or a Fidelio-compatible system | What they do: Holding your reservation and your bill. Your hotel chooses this supplier, not us | App: Guest | Where: Varies by hotel |
| Your hotel's cash register system | What they do: Recording orders that are not paid by card | App: Guest | Where: Varies by hotel |
If you write to a hotel on WhatsApp, Messenger, Instagram or Telegram, those messages are covered by the hotel's privacy notice, and Meta or Telegram also receive them.
We do not sell your personal data, and we do not use it for advertising.
Transfers outside the EU/EEA
Our AI providers are in the United States. This matters most for the passport or ID photograph, which is sent there to be read automatically when the hotel has switched this on. Google and Apple may also process data outside the EU/EEA. Sentry and Cloudflare store or deliver data in the EU or worldwide, but people or systems outside the EU/EEA may have access to it, for example for support. Where data is transferred outside the EU/EEA, we rely, where applicable, on the EU–US Data Privacy Framework or on standard contractual clauses in the provider's data processing terms.
7. Nevron Staff
For Nevron Staff, the hotel is both your employer and the controller of your work records. We run the app for the hotel as its processor.
| Data | Why | Who sees it |
|---|---|---|
| Work email address, name, password | Why: Signing in with your hotel's code. There is no self sign-up — your manager invites you | Who sees it: Your hotel |
| Shifts: when you start, pause, resume and end, and the reason you give for each pause | Why: Recording working time | Who sees it: Your hotel. Who sees which part: see below |
| Tasks: when each task was assigned, accepted, started, completed, checked, cancelled or escalated, with a full history of status changes | Why: Coordinating work between staff and managers | Who sees it: Your hotel |
| Minutes worked and a personal productivity figure | Why: Showing you your own work summary | Who sees it: Only you |
| Guest chats you handle: when a chat was assigned to you, and when you read and replied | Why: Making sure guests get an answer | Who sees it: Your hotel |
| When you open a guest's preference record | Why: Protecting guests' privacy: each look is recorded | Who sees it: Your hotel |
| Checklists and comments | Why: Coordinating work | Who sees it: Your hotel |
| Photos you take of tasks | Why: Evidence that work was done, and reporting problems | Who sees it: Your hotel. Stored in EU storage |
| Notification token and device identifiers | Why: Telling you about assigned tasks and shifts | Who sees it: Google Firebase |
| Usage statistics: which screens and features of the staff app and the admin panel you use, and for how long, with your role, but not your name. Off until we switch it on; your hotel can limit it to recording only when the app is opened | Why: Improving the service | Who sees it: Your hotel. Our own reports show only totals per hotel, without names |
| Your device's internet address, when the app loads | Why: Displaying the app's fonts | Who sees it: Google (fonts) |
| Location, payments | Why: — | Who sees it: Not in the app. Your location is never recorded. |
What supervisors and managers see about you. In the staff app and the admin panel, supervisors and managers see whether you are on shift or on a break, when your shift started, how long you have worked so far, and how many tasks you have open. They do not see your pause reasons or pause times, and they do not see your productivity figure. Nevron's platform administrators can see your full shift records, including pause reasons, when they give support.
These are employment records. Your hotel decides how long it keeps them. Before it starts to use the app, your hotel, as your employer, must tell you the purposes, the data, who can see it, how long it is kept, and whether it is used to assess your work. This policy does not replace that information — ask your employer.
How we protect your data
Data travels between the apps and our servers over encrypted connections (HTTPS). We store it with providers in the European Union, on servers in Frankfurt, Germany. Passwords are stored only in a scrambled (hashed) form, so nobody can read them, including us. Photos of identity documents are kept in private storage that is not publicly reachable. Each hotel's data is kept separate from every other hotel's data.
8. How long we keep things
Stay records are kept for as long as the hotel decides — each hotel sets its own periods in its own privacy notice. Photos of passports or ID cards are the exception: they are deleted automatically 30 days after your latest check-out at that hotel. Detailed usage statistics are also deleted automatically, after 90 days unless we have set another period for that hotel (30 to 730 days); daily totals without names are kept. Your Nevron account is kept until you delete it (section 9).
Today no automatic deletion period applies to chat attachments, document numbers, the list of your stays or device records. Chat attachments and document numbers stay in the hotel's records until the hotel deletes them. The list of your stays and your device records stay until you delete your account (section 9).
9. Deleting your account
Guests. You can delete your Nevron account in the app under Account → Delete Account. It takes effect after 30 days; until then you can cancel it using the link we email you.
When you request deletion, you are signed out on every device straight away and cannot sign in during the 30 days unless you cancel.
What we remove after 30 days:
- your name, email address and password;
- any Google or Apple sign-in linked to your account;
- the list of your stays. Your stays are unlinked from your Nevron account; the hotels' own records of those stays remain with the hotels (see below);
- the devices registered to receive notifications;
- your answer about marketing offers.
What we keep:
- a history of account events (for example sign-ins and the deletion request) under a code instead of your name or email address, for security and as proof of what happened to the account;
- the record of which Terms version you accepted and when, without your internet address or device description.
What stays with the hotels. Deleting your Nevron account does not delete what each hotel holds about your stay with them — your reservation, orders, bill, check-in details, messages and recorded preferences. Each hotel controls that data and keeps it under its own privacy notice; after deletion it is no longer linked to your Nevron account. To have it removed, contact each hotel. You can also erase the preferences a hotel has recorded yourself, under Privacy choices in the app, before you delete your account.
Staff. In the Nevron Staff app, open the menu and choose Delete my account. Deletion is immediate and final; there is no waiting period. You are signed out on every device.
What we remove: your name and email address are replaced with the label "Deleted User"; your phone number, language, password, profile picture (the file is deleted) and job title are removed; the devices registered to receive notifications are removed. Your open tasks return to the queue, and your supervisor is told.
What stays with the hotel, under "Deleted User": tasks and their history, comments, photos, chat messages, and shift records, including pauses and pause reasons. These are the hotel's work records (section 7). Deleting your account does not affect your employment.
Asking by email. If you have removed the app or cannot sign in, write to support@nevron.co from the email address linked to your account (staff: from your work email, with the name of your hotel), or see https://nevron.co/guest-account-deletion/ (guests) and https://nevron.co/staff-account-deletion/ (staff).
10. Your rights
You may ask for a copy of your data, ask us to correct it, ask us to delete it, object to certain uses, ask us to restrict them, or ask for the data you gave us in a format you can take elsewhere. Where we use your data because you agreed, you may withdraw your agreement at any time; this does not affect what we did before you withdrew it.
For data we control (section 2), we answer you ourselves. We ask you to prove who you are only when we have a reasonable doubt about your identity. For stay data, the hotel is the controller: we will pass your request to the hotel and help it answer. In each hotel, the app's Privacy choices page lets you turn off personalisation and erase recorded preferences yourself.
Write to support@nevron.co. You may also complain directly to a data protection authority, without contacting us first — in Slovenia, the Information Commissioner (Informacijski pooblaščenec, ip-rs.si), or the authority in the country where you live or work.
11. Children
You must be 18 or older to hold a Nevron account, to agree to our terms, to order services or to charge anything to a room. Children may of course stay at a hotel as guests on an adult's booking; the adult is responsible for them and for anything ordered on the stay.
12. Where to read this policy
This policy is linked from the sign-up screen and from the app. You do not need to agree to it; it is here to tell you how we use your data. You agree only to our Terms of Use, at https://nevron.co/app-terms/.
13. Changes to this policy
We may update this policy. The date at the top always shows the current version, and we will tell you in the app or by email about significant changes.