Privacy Policy

Willu (“we,” “us”) helps hosts create event pages, share invite links, and collect guest replies. This Privacy Policy explains what information we collect, how we use it, where it is stored, and the choices you have. It applies to our website and mobile app, to hosts who create events, and to guests who respond to invites.

Information we collect

• Host account information: the email address you use to sign in and credentials managed by our authentication provider. If you sign in with Google or Apple, we receive limited account information, such as your email address and profile details made available by that provider.
• Event details and photos: event names, dates, locations, descriptions, theme and publish settings, and photos you choose to upload. Uploaded photos are stored so we can display them on your invite page.
• Guest replies: name, attendance choice, party size, an optional message, and an email address if provided. Email is optional unless the event requires host approval, when it is needed to send the guest an approval confirmation.
• Push notification information: if you enable notifications in the mobile app, we store a device push token and device platform to send alerts, such as when a guest replies. On Android, Firebase may create installation identifiers to operate notification services, independently of notification permission.
• Technical information: standard server, diagnostic, and security logs, and information used to prevent abuse, such as a hashed IP address for reply rate limiting.

How we use information

• Display your public invite and save guest replies for the host.
• Authenticate hosts and protect accounts.
• Send account emails, event-related emails such as reply and approval notifications, and push notifications you have enabled.
• Improve reliability and prevent abuse (e.g. duplicate replies, rate limits).
• Respond to support requests and comply with applicable legal obligations.

Who can see your data

Published invite pages and their photos are visible to anyone with the link. The host who owns an event can view and export its guest replies, including any email addresses and messages. Replies are not displayed to other guests on the public invite page. A guest can access and update their own reply using its private edit link or the device where they replied; anyone you share that edit link with may also access it.

Third-party sign-in

If you choose Google or Apple sign-in, that provider authenticates you and shares limited account information with us. Your use of those services is also governed by Google's or Apple's privacy policy.

Storage & processors

We use Supabase for our database, authentication, and file storage, Vercel to host our website, Resend for event-related email delivery, and Expo and platform notification services for push delivery. These providers process the information needed to provide those services, including notification content where applicable. Their infrastructure may be located in the United States or other regions where they operate.

Data retention

We keep event and guest-reply data while your account and the related event exist and as needed to provide the service. Hosts can delete individual replies and events. We may retain limited information longer where needed for legal, security, or fraud-prevention purposes, after which it is deleted or anonymized.

Account deletion

You can delete your Willu account from the menu in the mobile app. Deleting your account removes your events, uploaded photos, and their guest replies from active use, subject to the limited retention described above and the time needed to remove data from backups.

To request account or data deletion without using the app, email team@willu.app and tell us you want your Willu account and associated data deleted. Send your request from the email address linked to your account when possible. Never send your password or verification codes. You do not need to install or reinstall the app to make this request. Uninstalling the app alone does not delete your account.

Your choices and rights

You can disable push notifications in your device settings. Depending on where you live, you may have rights to access, correct, export, or delete personal data, or to object to or restrict certain processing. Guests can use their private edit link to change a reply or contact the host to change or remove it. Hosts can manage event data in the app or dashboard, or contact us for assistance.

Children's privacy

Willu is intended for adults and is not directed to children. We do not knowingly collect personal information from children under the age required by applicable law. Contact us if you believe a child has provided personal information so we can delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, provide additional notice.

Contact

Questions about privacy: team@willu.app.