Privacy policy

Invited (weinvited.app and the Invited app) helps people send invitations and collect replies. This page explains what we collect, why, who we share it with and what you can do about it. It covers hosts (people with an Invited account) and guests (people who open an invitation, with or without an account).

Invited is run by DailyTaskApps Ltd, a company registered in Scotland (company number SC879270, registered office: The Melting Pot, 15 Calton Road, Edinburgh EH8 8DL), which is the data controller and is registered with the Information Commissioner’s Office. Contact: [email protected].

Hosts and guests

A host decides who to invite and what to ask, so for their guest list the host is responsible for having a good reason to use their guests’ details, and Invited handles that information for them. Invited is responsible for everything else here: accounts, emails we send, payments and keeping the service safe.

What we collect

• Host accounts: name, email address and password (stored only as a secure hash). Sign-in sessions record the device’s IP address and browser or app version.
• Events: what the host enters, such as title, date, venue, description, schedule, updates and photos.
• Guests: name, and if given, email address and phone number; the reply (going, maybe, can’t go), how many people are coming and their names (including whether they’re a child), a message to the host, and answers to the host’s questions. Answers might include things like dietary needs, so please only share what you’re happy for the host to see. Guests can be added by the host (typed in or imported from a spreadsheet) or reply through a link.
• Payments: if a guest pays by card, the payment is handled by Stripe; we see the name, email, amount and status, never the card number. If a guest pays the host directly, we only record that they said they paid. Hosts who get paid out give Stripe their name, date of birth, home address and bank details through our form; we keep only the last 4 digits of the account.
• Premium and Premium Plus purchases in the app go through Apple; we receive a record of the purchase, not payment details.
• Technical data: push notification tokens for hosts’ phones; error reports (with names, emails and links removed before they’re sent); and an approximate location worked out from your IP address, used only to show nearby places first when a host searches for a venue. We don’t use advertising or tracking cookies.

Why we use it

• To provide the service: run accounts, show invitations, record replies, send the emails and notifications you’d expect (confirmations, reminders, updates), and take payments. This is to perform our agreement with you, or, for guests, our legitimate interest in delivering the host’s invitation.
• To keep Invited safe and working: preventing abuse and spam, rate limits, fixing errors. Legitimate interests.
• To keep records the law requires, such as payment and purchase records. Legal obligation.

We don’t sell personal information, and we don’t use it for advertising.

Who sees what

• The host and any co-hosts they add see their event’s guest list and replies.
• Other guests see only first names, and only if the host turns on “Show who’s going”. A host’s email address is never shown to guests.
• Private invitations only show details to people with their personal link.

Services we use

These companies process information for us, under contracts that protect it:

• Neon (database, London, UK) and Railway (servers, Amsterdam, EU).
• Cloudflare (photo storage in the EU, and network security).
• GitHub (nightly backups of the database, encrypted before they are stored so that GitHub cannot read them).
• Resend (sending emails), Stripe (card payments and payouts), Apple and RevenueCat (in-app purchases), Expo (push notifications), Mapbox (venue search and maps), and Sentry (error reports).

Some of these are based in the United States. Where information leaves the UK, it’s protected by the UK’s adequacy rules or the standard contractual clauses approved for that.

How long we keep it

• Guest details (names, contact details, replies and answers) are deleted 12 months after the event. The host is emailed at least 30 days before, so they can download the list first.
• Events and photos stay until the host deletes the event or their account; then they’re deleted, photos included.
• Deleting an account (Profile → Delete my account) removes the account and every event it owns straight away.
• Payment and purchase records are kept for 6 years, as UK tax law requires, without the names or emails of a deleted account.
• Encrypted backups are kept for 30 days and then deleted, so something you delete can remain in a backup for up to 30 days. Backups are only used to recover from a fault.
• Email codes expire after 5 minutes. Sign-in sessions end after 60 days without use.

Your rights

You can ask to see, correct or delete your information, object to how we use it, or ask for a copy. Hosts can do most of this themselves in the app. Guests can change their reply from their invitation link, unsubscribe from reminders and updates from any email, or ask the host to remove them; you can also email us and we’ll help (we may need to check it’s you). If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk), though we’d appreciate the chance to sort it out first.

Children

Hosts must be 16 or over (18 to get paid). Guests’ children may be listed by name on a reply by the parent or host.

Changes

If we change this policy in a way that matters, we’ll update the date above and tell hosts by email or in the app.