Privacy policy

Information we collect

When you create a host account, we collect your email address, account identifier and profile information. We use email links to sign you in.

Hosts and guests provide party information, such as event names, dates, venue addresses, notes, cover photos, guest names and contact details, RSVPs, food assignments and contribution amounts or status. Hosted records contributions; it does not collect card or bank credentials or process payments.

If you choose a contact from your iPhone, Hosted receives the selected contact details for you to review and save. It does not upload your full address book. If you choose a photo, Hosted receives the selected image. Displayed cover images are processed to remove embedded EXIF metadata. Large originals can temporarily remain in private Storage during processing or after an interrupted upload; they are not served to invited guests. Account deletion includes original and displayed images owned by the account, including recoverable orphan uploads.

Hosted stores venue addresses and coordinates for address search, weather and directions. It does not request access to your iPhone's GPS location. Reminder preferences and consent records may include contact details and opt-out choices.

Our infrastructure providers may process network information, including IP addresses, request logs and technical diagnostics, to operate and secure the service. If you contact support, we receive your email address and the message and attachments you choose to send.

How we use information

We use information to authenticate hosts, save parties and drafts, manage private invitations, display RSVPs and food assignments, track contributions, provide weather and directions, and honor communication preferences. We also use technical information to maintain reliability and prevent unauthorized access.

The first beta supports reminder settings and previews. It does not automatically send reminder emails, text messages or push notifications. A future delivery feature would use the communication preferences and consent you provide.

Sharing and service providers

Hosts can view and manage information for their parties. Invited guests can view the party and guest information made available through their invitation. A person who receives or forwards an invitation link may gain the access granted by that link. Hosts can reset or disable invitation links.

Supabase provides account authentication, database and image storage. Vercel hosts the website and its server functions. Resend sends authentication emails from login@hostedparties.com through Supabase custom SMTP. Cloudflare provides domain DNS and routes support email to the operator's private Gmail mailbox; Google processes those support messages. During this beta, support replies can come from the operator's Gmail address. These providers process information needed to supply their services and may store it in countries other than your own.

Google Places supports venue searches, and Visual Crossing supplies event weather. Address searches and event venue coordinates may be sent to these providers for the requested service. Cloudflare DNS is configured without proxying website requests; Vercel serves the website over HTTPS.

When you share an invitation, poster, calendar file or directions through another app, that app receives the information you choose to share and handles it under its own terms and privacy policy.

Hosted does not sell personal information or use it for advertising or cross-app tracking.

Storage and security

Hosted uses encrypted connections and access controls to protect host and guest information. Cover image buckets are private. Access to images and party information depends on host authentication or the permissions granted by an invitation. The iPhone app stores authentication material using iOS secure storage.

No system guarantees absolute security. Keep invitation links private and share only the information needed for your party.

Retention and deletion

Hosted keeps account information, party records, uploaded images and reminder consent/preferences while the account and associated records remain in the service, until the host deletes those records or the account. There is no automatic expiry for archived parties; archiving keeps their records stored.

Support correspondence is retained separately to respond to requests and keep a record of their resolution. Service providers may retain backups, email delivery records, security logs and technical diagnostics under their own retention rules. Account deletion does not immediately remove every historical provider backup or log. Hosted does not promise a fixed deletion period for these provider-held copies.

To delete your host account, open Settings → Account → Delete Account in the iPhone app or website. Read the consequences, acknowledge permanent deletion and type DELETE. Hosted first removes the account's private uploaded images through Storage, then deletes the account identity, sessions, profile and owned parties with their invitations, guest access credentials, guest records, food assignments, contribution-tracking records, updates, drafts and reminder/device records. Deleted invitations stop granting access. This does not reverse any actual payment made outside Hosted.

Deletion completes when image cleanup and the final database operation succeed. If cleanup fails or is interrupted, the app reports the problem and lets you retry; some images may already be removed. New parties and photo uploads for that account are paused after deletion begins. If another account's shared records or images would be affected, the process stops for support review rather than delete them automatically. Contact support@hostedparties.com in these cases.

Hosted removes these records from its active service. Information previously shared, downloaded or exported by other people can remain in their copies. Deletion revokes refresh sessions and prevents continued host access to the deleted account's records. Other devices' local drafts and cached copies are cleared when those devices run the app's cleanup or their own storage is cleared.

Guests can ask their host to update or remove information for that party, or contact support@hostedparties.com with a privacy request. We may need information to verify the request and identify the affected party before changing or disclosing records.

Your choices

You can choose whether to use Photos or Contacts and can change those permissions in iPhone Settings. Hosts can edit party and guest information, reset invitations and manage reminder settings. Guests can update the information permitted by their invitation and change available communication choices. You can sign out of the iPhone app; signing out does not delete your account or party records.

Policy changes and contact

We will update this policy when Hosted's data practices change and show the new effective date. Contact support@hostedparties.com with privacy questions or requests.