InviteNest Privacy Policy

1. Introduction

ClearStack Apps ("we", "us", "our") operates the InviteNest mobile application and its reply pages at invitenest-rsvp.web.app. InviteNest lets a host design an invitation, share a link to a reply page, and see the guest list fill in as guests reply. This policy explains what the app keeps on the host's phone, what goes to our server, what guests share, how long we keep it, and how to delete it.

2. What Stays on the Host's Phone

Your designs, the photos you add to them, and your event details are stored in the app on your phone. A photo you pick is copied into the app's own storage and never leaves the phone on its own. You can back everything up to a file from Settings; that file is yours and we never receive it. Uninstalling the app deletes what is on the phone.

3. The Reply Page

When you create a reply page, the app sends our server:

• The card image: a picture of your finished invitation, including your photo if the design has one. It is shown to anyone who opens your link, and in link previews in chat apps unless you set a password.
• The page details: the event name, date, the date replies close, which questions to ask, your language, and a password if you set one. A password is stored only as a salted hash.
• An owner key: a random code that proves the page is yours, so a restored backup can take it over on a new phone.

Anyone with the link can see the card and reply. Do not put anything on an invitation you would not want the people you send it to, and the people they forward it to, to see.

4. Guest Lists and Replies

• Names you add: if you add your guest list, each name is stored with a random personal link key so you can see who has not replied.
• Guest replies: a guest's name, whether they are coming, how many people, any dietary needs or allergies they choose to share, and a note to the host. Replies you enter by hand are stored the same way.
• Who sees replies: only the host. Guests see the card and their own reply. A guest's browser keeps a copy of their own reply so they can change it later from the same phone.
• No guest accounts: guests never sign up and are never asked for an email address or phone number.

Dietary needs can say something about a guest's health or beliefs. Guests decide what to write, and it is shown only to the host to plan the event.

5. How Long We Keep It

The card, page details, guest list and every reply are deleted when the host deletes the event, and automatically 90 days after the event date. To stop abuse of the reply pages, our server counts requests per hour using a one-way hash of the visitor's IP address; those counters are deleted after about a day.

6. The Host's Account

There is no sign-up and we never ask for your name, email address or phone number. On first launch the app creates an anonymous account with Firebase Authentication. For each install we keep whether a plan is active, unused invitation unlocks, and, if you allow notifications, a push token and your language so we can tell you when a guest replies.

7. Purchases

Purchases are handled by Google Play. When you buy, the app sends the purchase token to our server so it can confirm the purchase with Google and unlock the invitation or the plan. We keep a record of each purchase so it is counted once. We never see or store your card details. A plan is cancelled in Google Play, not in the app.

8. Crash Reports and Analytics

• Firebase Crashlytics (Google LLC): crash reports, stack traces, device model, operating system and app version, so we can find and fix bugs. These never include your designs, photos or guest lists.
• Firebase Analytics (Google LLC): basic usage events such as app opens and screen views. InviteNest shows no ads and does not collect the advertising ID.

9. Who Else Handles the Data

• Google LLC: Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, Cloud Messaging, Crashlytics, Analytics and Google Play Billing, with our server data held in the United States. Firebase privacy information.

We do not sell this data, rent it, or use it for advertising. We do not read guest lists or replies.

10. Deleting Data

• One event: delete it in the app. Its reply page, card, guest list and replies are deleted from our server at the same time.
• Everything: open Settings, then Delete all my data. This deletes every event on your phone and every reply page, guest list and reply on our server, with your install's record. It cannot be undone.
• Guests: a guest who wants their reply removed can ask the host, who can delete it in the guest list, or write to us.
• By email: write to support@clearstackapps.com with the reply page link and what you would like deleted. We delete it within 30 days and reply to confirm.

Purchase records are kept so a purchase cannot be counted twice. Crash and analytics data follow Google's retention periods.

11. Permissions

• Photos and camera: you pick a photo in the system photo picker or take one with the camera. The app sees only the photo you choose.
• Notifications: to tell you when a guest replies and the day before replies close.
• Alarms: to deliver the closing reminder at the time it is due.
• Internet: reply pages, guest lists, purchases and crash reports.

12. Children

InviteNest is made for adults who host events and is not directed at children under 18. Hosts sending invitations to children's parties should share the link with parents or guardians.

13. Your Rights

Under UK GDPR, EU GDPR and similar laws you can ask to access, correct or delete your data, and object to how it is used. Email us at the address below. You can also complain to the UK ICO or your local data protection authority.

14. Changes to This Policy

We may update this policy. The date at the top shows the latest version.

15. Contact Us

Questions or requests: support@clearstackapps.com or clearstackapps.com/contact.