Privacy notice

What we collect

What you give us: your name, email, and if you add them, a phone number, photo, bio, home city, the neighbourhood you're coming from, payment usernames and dietary notes.

What you create: events, RSVPs, asks and promises, messages, photos, expenses and everything else you add to an event.

What the app records to work: sign-in and device details for notifications, when invites are opened (counted per browser, not linked to a name unless you're signed in), and a small log of product moments (like an event being created) that never holds names, contact details, addresses or messages.

How the app is used: which pages are opened (with no event, message or person in the address), when, for how long while on screen, the kind of device and how you signed in. It helps us see what works and fix what doesn't. It's never sold, shared or used for ads.

Why we collect it

To run the app: show your plans to the people in them, send the notifications you've asked for, keep the shared money record, keep accounts safe and answer reports. We ask for your consent when you sign up, and again before texting you or using your contacts.

We don't sell your information, we don't show ads, and we don't use it for anything you wouldn't expect from a planning app.

Who sees what

People in an event see what the event shows them. The exact address is shared only under the host's reveal rule, and never in a link preview or a notification. Public pages (an invite for a public event, a shared recap) show first names only, never contact details, addresses or the guest list.

Your contact details are never shown to other people unless you choose to share them. Reports go to the review team only.

How long we keep it

Your account and what you add stay until you delete them. Event album photos are deleted 365 days after the event ends. Screenshots sent with feedback are deleted after 180 days. Which pages and invites were opened, and the emails, texts and Updates we sent you, are deleted after 180 days. When you used the app and what you did in it are deleted after 13 months, except records of when you signed in and how you answered invites, which we keep while you have an account. If you joined an event without an account, write to our privacy officer (below) and we'll delete your account and these records. Sign-in codes are deleted after a day.

Server and error logs are kept by our hosting and error-tracking services for up to 90 days. Backups are encrypted and kept for 14 days. The one exception is an encrypted archive of our previous database, deleted on January 7, 2027.

When you delete your account, your name, photo and contact details are removed; records other people rely on, like shared expenses, stay under "Deleted user".

Where it's stored

Our server is in the United States (Oracle Cloud), and some of our providers store or process information outside Canada, where it may be available to authorities under local law. Each provider only gets what it needs: hosting and database (Oracle Cloud); photos and encrypted nightly backups (Cloudflare); email (Resend); texts (Twilio); error reports, with names, contact details and codes removed first (Sentry); AI features (DeepInfra, which runs the AI model and doesn't store what we send or use it for training: the event details and voice you give it to plan an event, the host's announcements and plans it writes reminders and summaries from, the chat you ask Ollie to catch you up on, and chat messages that sound like a promise or a request, like "I'll bring the speaker", so Ollie can offer to add them to the list; you can turn that last one off in Settings, Privacy); GIF search (Giphy: the words you search); place search and maps (OpenStreetMap and Komoot's Photon: what you type); link previews (Microlink: the address of a link posted in chat); push notifications (your browser's push service, from Google, Apple or Mozilla, which delivers them encrypted); weather (Open-Meteo); exchange rates (Frankfurter); and, if you use them, Sign in with Google or Apple.

Photos

Location and camera details (EXIF) are removed from every photo before it's stored. A photo is public only if a host shows it on a shared recap.

Texts and email

We text you only if you confirm your number and turn texts on. Reply STOP to any text to stop. Mobile numbers and text message consent are never sold, and never shared with third parties or affiliates for marketing or promotional purposes. Twilio, our text provider, only uses your number to deliver our texts. Invites a host sends by email say who sent them and how to stop getting them.

Your rights

You can see and download everything you've added (Settings, then Privacy, then Download my data), correct it, and delete your account at any time. You can ask us what we hold about you, how it's used and who it's been shared with, and we'll answer within 30 days.

You can withdraw your consent, for example by turning off texts, email or being findable by your number, or by deleting your account. If you're unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).

Children

PartyPitch isn't for anyone under 13, and we don't knowingly collect their information.