Privacy & help

This is a test version

Use fictional families and a sample or redacted invitation card for now. Family invitations do not require guest accounts when the host opens them. The hosting provider’s model-training treatment for Sites data has not been confirmed; this app does not promise that data is excluded from training.

What we save

Event details, the card image you upload, household names, the names and adult/child category of invited or self-registered people, RSVP answers, hosting-team accounts, and a small record of changes. Guest email addresses, phone numbers and birthdays are not required.

Where it lives

Structured records are saved in the website’s hosted database (D1). Uploaded images are saved in its file store (R2). It is not a file stored only on your phone. The app does not send RSVP information to an AI model or include any AI service calls. The hosting platform and your ChatGPT development conversations have their own policies.

Who can see it

The event owner and approved co-hosts can see the event’s guest list. A family link opens only that family’s invitation. When invitations are open, anyone you forward a family link to can read and change that family’s RSVP, subject to the host’s settings. Treat these links like private keys. A host can replace a link to disable the previous one.

Your host controls

A general link shows the event and lets visitors enter their own name and RSVP, without seeing the guest list. Anyone it is forwarded to can register. After responding, keep the private response link shown on the confirmation page. The displayed “Hosted by” names are entered by the host; they are not a verified identity or a list of account permissions.

Owners control co-host access and can delete the event. Editors can manage the invitation, guests, responses and settings. Viewers can read and export data. Archiving a household disables its link and excludes it from totals, but keeps its data so it can be restored.

Maps, calendars and sharing

Google Maps receives the venue address when you open directions. Google Calendar receives event details when you use its calendar link; the downloaded calendar file does not require an email address. WhatsApp, SMS and Messenger receive what you choose to share. Calendar entries do not automatically update when the host changes the event.

Saving, changes and removal

Replies are saved only after you confirm. Retrying the same submission does not add another guest. Opening a general link again and making a new submission can create a duplicate; use your saved personal response link instead. Names are not proof of identity and are never used to reveal someone else’s response. If two people edit a family at once, the app asks the later person to reload before overwriting anything. Hosts can export data and delete the event. Provider backups or operational logs may follow separate retention rules, and downloaded or forwarded copies are outside the app’s control.

What this version does not claim

It has no added advertising or third-party analytics scripts. The hosting provider may still collect operational or traffic information. It is not end-to-end encrypted, does not guarantee storage only in Canada, and has not had an independent security audit.

Need to change a reply?

Reopen your original family link or saved personal RSVP link. If you lost it, contact your host. If changes are closed or the deadline has passed, contact your host through the same messaging app they used to invite you.