Privacy Policy
Last updated: August 28, 2026
This Privacy Policy explains how Studio Byway (Lasco, we, us, or our) processes personal data when you use the Lasco app and Lasco Cloud.
- Lasco app is a free, open-source photo and video backup application.
- Lasco Cloud is an optional storage service that is accessed through the Lasco app.
Studio Byway is established in France. For privacy questions or requests, contact us at contact@studiobyway.com.
1. Our privacy approach
Lasco is designed to minimise the personal data we collect. Your library is encrypted on your device before it is uploaded to Lasco Cloud. We do not hold the keys required to decrypt it and cannot view your photos, videos, or the encrypted metadata in your library.
This does not mean that Lasco Cloud is anonymous: we need limited account, security, usage, and billing data to operate the service. The sections below distinguish between the app and Lasco Cloud.
2. Data we process
Data stored locally by the Lasco app
Applies to: Lasco app.
The app stores your photos, videos, library metadata, encryption keys, connected-storage configuration, and preferences on your device. The app encrypts library content and metadata before it sends them to a remote storage location.
When you use the app only with storage you configure yourself, Lasco does not receive your library content or personal data from the app, except for the update and compatibility check described below.
The Lasco app does not gather or send us tracking or analytics data when you use it without Lasco Cloud.
App update and compatibility checks
Applies to: Lasco app.
When the Lasco app opens, returns to the foreground, or prepares a Lasco Cloud sync, it contacts the Lasco Cloud API to check whether an update is available and whether that app version is supported for Lasco Cloud synchronisation. This request includes the app platform and build number, and may include the display version.
Lasco Cloud account and security data
Applies to: Lasco Cloud.
When you create or use a Lasco Cloud account, we process:
- your email address;
- your password, stored only as a secure hash; and
- browser and device-session information, including session identifiers, platform, app version, creation and last-use times, and device name where provided.
Encrypted library data
Applies to: Lasco Cloud.
Lasco Cloud stores encrypted photos, videos, thumbnails, metadata, and library-operation data. This data is encrypted by the Lasco app before upload. We cannot decrypt or inspect it.
Payment and subscription data
Applies to: Lasco Cloud.
Payments are handled by Stripe. We do not store your full payment-card or bank-account details.
3. Retention and deletion
Applies to: Lasco Cloud.
We retain account, security, subscription, and usage data for as long as needed to provide Lasco Cloud and meet legal, security, accounting, and dispute-resolution obligations.
When you request account deletion, access to Lasco Cloud ends immediately. We schedule deletion of the encrypted library data stored by Lasco Cloud 30 days after your request. During that 30-day period, if you contact support and have your recovery code, we can restore access to your data.
If you cancel your subscription or a payment fails, you retain read-only access to your data for 30 days: the Lasco app can fetch data, but cannot upload, modify, or synchronise it. We delete the encrypted library data stored by Lasco Cloud after that 30-day period. We may retain or anonymise limited account and billing records when necessary for the purposes above.
Applies to: Lasco app.
Without Lasco Cloud, we possess no data about you. Data kept solely on your device remains under your control. Deleting the app or its local data does not delete data you have uploaded to any remote storage location.
4. Third-party data processors
Applies to: Lasco Cloud, except where noted.
We use service providers to operate Lasco Cloud. They process only the data needed to provide their service to us.
| Processor | Purpose |
|---|---|
| Fly.io | Application hosting |
| Wasabi | Encrypted cloud storage |
| Backblaze B2 | Encrypted cloud storage |
| Stripe | Subscription billing and payment processing |
| Resend | Sending account-verification emails |
Applies to: Lasco app. The app does not include analytics, advertising, or tracking SDKs.
5. Cookies and tracking
Applies to: Lasco app. The app does not use cookies, analytics, advertising, or tracking SDKs.
Applies to: Lasco Cloud. The Cloud account website uses strictly necessary session and security cookies to sign you in, protect requests, and keep the service functioning. We do not use advertising or analytics cookies.
6. Your rights
Depending on applicable law, you may have the right to request access to, correction of, deletion of, restriction of, or portability of your personal data, and to object to certain processing. You may also lodge a complaint with the French data-protection authority, the CNIL, or your local supervisory authority.
To exercise your rights, contact contact@studiobyway.com.
7. Children
Lasco Cloud is not intended for children under 16 years of age, or a higher age where required by applicable law. We do not knowingly create Lasco Cloud accounts for children below that age.
8. Changes to this policy
We may update this Privacy Policy when our services or legal obligations change. We will publish the updated version here and change the “Last updated” date. For material changes, we will provide additional notice where required by law.