Privacy Policy

Version: 2026-09-12. Last updated: 12 September 2026.

This notice explains how JoinOurDay handles personal data in its app, wedding services and related website. It covers organisers, guests, invited people who have not joined, and people appearing in shared content. It provides information; accepting our Terms of Service is not blanket consent to processing.

1. Who is responsible and how to contact us

JOINOURDAY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Architektów 3/22, 35-082 Rzeszów, Poland. KRS: 0001190359; NIP: 8133938778; REGON: 542528081. Share capital: PLN 5,000.

JoinOurDay is the controller for account administration, service security, moderation, purchases, support and its own service operations. Wedding organisers choose whom to invite and what guest information to add or share, and are responsible for their own use of that information. Where data protection law applies to an organiser, their responsibilities depend on their actual activities; these Terms do not replace a required data-processing agreement or their own privacy notice.

2. Data we receive and its sources

Account and profile data: login identifiers, email, name, profile photo, language, account and wedding roles, invitation status and verification records. We receive these from you, your chosen sign-in provider or the organiser who invites you.
Wedding and guest planning data: event names, dates, locations, schedules, guest lists, seating assignments, profile descriptions, tags, social links and notes added by you or an authorised organiser.
Content and safety data: photos, videos and other shared content; Board posts, comments, hearts, pins and read state; blocks, reports, content references, evidence, decisions and appeals. Other participants can provide content or reports that concern you.
Purchase and communication data: purchase identifiers, product and access status, support correspondence, notification device tokens and delivery information. Apple and RevenueCat provide purchase status; notification providers provide delivery information. We do not receive your full payment-card details from Apple.
Technical and usage data: app and operating-system versions, device characteristics, identifiers, network and security logs, feature events, crashes and performance information. Diagnostic tools may capture a sampled replay around an error; image masking and sensitive-content protections are configured to reduce exposure of private wedding data.
Legal-notice records: when the app sends an acceptance with Create Wedding or Accept Invitation, we record the user, action, time and document versions to evidence agreement to the Terms and acknowledgement of this notice. A record is not evidence of reading every paragraph, a separate marketing consent or verified age.

3. Purposes and legal bases

We process account and wedding-service data to perform our contract with users: authenticate access, create a wedding, deliver an invitation, manage participation and purchases, and store or display content you choose to share. Required account and invitation information is needed to provide those functions; optional profile content and Board participation are your choice. You can attend a wedding without contributing to the Board.

Our legitimate interests include delivering invitations requested by organisers to people who have not yet joined, keeping the service reliable, preventing abuse and fraud, investigating reports, handling support and establishing or defending legal claims. We consider the impact on the people concerned and you may object as described below. We process data to comply with specific legal obligations where they apply, such as responding to lawful authority requests or keeping required transaction records.

We use diagnostics and product-usage events to understand failures and improve the service. Essential security and reliability processing relies on our legitimate interests. Where optional analytics, marketing, device access or another purpose requires consent by law, it requires a separate valid choice; accepting the Terms or acknowledging this notice does not supply that consent. You can manage operating-system permissions, including notifications, in device Settings.

4. Sensitive information and children

Do not add medical details, allergies, disability information, religious beliefs or similar sensitive information to shared profiles, notes or the Board. A wedding invitation or Terms acceptance is not explicit consent under Article 9 GDPR. Organisers who need such information must arrange an appropriate private process and lawful basis with the person concerned. Contact us if sensitive information has been shared and needs removal.

Accounts and app use are intended for people aged 16 and over. A child may nevertheless be included in an organiser’s guest list or appear in a photograph. Organisers and uploaders must have the necessary authority and respect the child’s interests and any parent or guardian rights. Contact us about an underage account or a concern about a child’s data so we can assess and address it.

5. Visibility, recipients and service providers

Authorised wedding participants see shared content according to roles and privacy settings. Organisers manage guest information and can export shared media. Blocking on the Board changes what you see there; it does not erase another person’s copies or guarantee that they cannot view information elsewhere. Restricted reports and moderation evidence are available to authorised staff for review, rather than the general wedding audience.

We use Google Firebase for authentication, databases, media storage, hosting, backend operations, security, analytics, crash reporting and performance monitoring; Sentry for error and performance diagnostics, including sampled error replays; OneSignal for notifications and service messages; and RevenueCat for purchase verification and access management. Apple operates App Store payments and sign-in where chosen, and Google operates Google sign-in where chosen. Providers receive the data needed for their functions; their role as processor or independent controller depends on the service.

We do not sell personal data. We may disclose necessary information to professional advisers or competent authorities to comply with law, investigate abuse or protect rights. A disclosure is limited to what the relevant purpose requires. We do not grant ourselves advertising rights to your wedding photos or Board content.

6. Automated checks and human review

Board text passes through automated rules that check spam patterns and configured prohibited terms and may refuse a post or comment. We keep relevant policy results and identifiers for safety and troubleshooting. Authorised staff can review reports, evidence and appeals and decide on content or access restrictions. Contact us to challenge a restriction or request human review.

7. International transfers and security

Providers may process data outside the European Economic Area, including in the United States. Transfers requiring GDPR safeguards must use an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, with additional measures where needed. Contact us for information about the safeguards applicable to your data and how to obtain a copy.

We use access controls, authenticated connections, encrypted transport and provider storage protections, together with restricted staff access and audit records for moderation. No service can guarantee absolute security. Report suspected unauthorised access promptly and avoid sharing invitation credentials or unnecessary private information.

8. Retention, deletion and copies

We retain account, wedding and shared-content data while needed to provide the service, unless it is deleted earlier or a longer period is required for a specific legal obligation or claim. The relevant criteria are whether the account or wedding remains active, the purpose of the record, an unresolved dispute or safety case, and applicable legal requirements. We do not treat a Premium purchase as a promise of indefinite storage.

Request account deletion in the app, through our deletion page, or by email. We may need to verify your identity. Account erasure initiates removal of associated profile and media data and visible Board posts, comments, reactions, blocks and read state. Removing a participant from a wedding is different: a former-guest label or wedding history may remain until the applicable deletion process is completed. Technical cleanup and provider requests may take additional processing time.

Our retention period for closed Board reports, moderation decisions and restricted evidence is 90 days after case closure, unless a documented legal hold or legal obligation requires longer retention. Access is restricted and audited. We keep other support, security, purchase and legal-notice records only while needed for their purpose and relevant legal obligations or disputes.

Deleting information from the service cannot delete screenshots, exports or other copies already held by organisers or guests. Contact those recipients about their copies. Where we are legally required to notify recipients of rectification, erasure or restriction, we will do so.

9. Your rights and choices

Under applicable data protection law, you may request access, correction, erasure, restriction and portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. These rights have legal conditions and exceptions; we will explain any refusal and available remedies.

Send requests to privacy@joinourday.app. We respond within the time limits required by law, normally one month for GDPR requests, and tell you if a permitted extension is needed. You may complain to the President of the Personal Data Protection Office in Poland (UODO) or the competent authority where you live, work or believe a violation occurred.

10. Website information and changes

Our Cookie Policy describes website storage and related choices. We update this notice when processing changes and identify the version above. For material changes affecting existing users, we provide at least 15 days’ notice before they take effect. If a new purpose requires separate consent, updating this page or recording Terms acceptance does not replace that consent.