Privacy Policy

InviteWith (“we”, “us”) provides a mobile app and website for planning events, sending invitations and collecting RSVPs. For the personal data described in this policy, we act as the data controller, except where stated otherwise in section 4.

If you have any question about this policy or how we handle your data, contact us at support@invitewith.co.uk.

We collect only what the product needs to work.

• Account data— your name, email address, and optionally a phone number and profile photo. If you sign in with Apple or Google we receive your name and email from them; if you use Apple’s Hide My Email, we only ever see the relay address.
• Event data — the events you create: title, description, date and time, location, cover image and design choices.
• Guest and RSVP data — names, email addresses and RSVP replies for people invited to an event, including plus-ones, dietary notes and answers to any custom questions the host asked.
• Device data — a push notification token, so we can send you the alerts you have opted into.
• Contacts— if you choose to invite people from your device’s address book, we read the contacts you select in order to create those invitations. We do not upload or store your full address book.

We never see your card. Subscriptions are bought and billed through Apple’s App Store or Google Play, and we receive only the fact that a subscription is active and which plan it is — never a card number, and never a billing address.

InviteWith has a free plan and three paid plans. Your privacy is the same on every plan: paying never changes what we collect about you or your guests, and guests never pay anything.

Free — no payment method needed:

• Up to 2 events a month and 50 email invitations a month
• One invitation design in each event type
• Unlimited guests on every event
• Share links for WhatsApp, iMessage and anywhere else
• RSVPs with plus-ones, dietary notes and your own questions, from the app or any browser
• Automatic reminders a day and an hour before your event
• Exporting your data and deleting your account

Paid plans — monthly subscriptions, billed by Apple or Google:

• Lite, £2.99 a month — 10 events and 1,000 email invitations a month, every invitation design, guest analytics, QR codes and manual reminders
• Standard, £3.99 a month — 50 events and 5,000 email invitations a month, everything in Lite, plus exporting your guest list
• Gold, £4.99 a month — unlimited events and email invitations, and everything in Standard

Prices are shown in pounds; the App Store or Google Play shows the price in your local currency before you confirm. Subscriptions renew monthly until you cancel them in your store account settings.

For businesses— if you’d like InviteWith for your company, email us at info@invitewith.co.ukand we’ll agree a plan with you directly. Any business agreement covers how we handle your company’s data.

• To provide the service — creating your account, hosting your events, delivering invitations and recording RSVPs. Lawful basis: performance of a contract with you.
• To send service messages — invitations, RSVP confirmations and event reminders. Lawful basis: performance of a contract, or the legitimate interests of the host in reaching their guests.
• To keep the service safe — investigating reports of abuse and preventing misuse. Lawful basis: legitimate interests in protecting our users.
• To meet our legal obligations — for example responding to a valid data request. Lawful basis: legal obligation.

We do not sell your personal data, and we do not use it to build advertising profiles.

When you create an event and invite people, you decide who is invited and what you ask them. For that guest list, youare the controller of your guests’ personal data and we act as your processor, handling it on your instructions.

As a host, you are responsible for having a proper basis to invite the people you add, for only asking questions you genuinely need answered, and for handling the replies you receive responsibly.

If you are a guest and want your details removed from an event, ask the host in the first instance. If you cannot reach them, contact us at support@invitewith.co.uk and we will help.

We share data with a small set of service providers who process it on our behalf under contract:

• Supabase — database, authentication and file storage.
• Resend — delivery of invitation, RSVP and reminder emails.
• Vercel — hosting for this website.
• Expo — delivery of push notifications to your device.
• Google Maps Platform — venue and address search when you add a venue to an event. Only the text you type and the place you pick are sent, from our servers — not your location or your account details.
• RevenueCat — keeps track of which plan you are on when you subscribe through Apple or Google. It receives your account ID and your subscription status, never your card details.
• Apple and Google — where you choose to sign in with their accounts.

We also share data with your event’s other participants as the product requires: hosts see their guest list and replies, and guests see the event details and who is hosting.

We may disclose data where we are legally required to, or to establish or defend legal claims.

Some of our providers process data outside the UK and the European Economic Area. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the European Commission’s Standard Contractual Clauses. You can ask us for details of the safeguards that apply.

• Account data — for as long as your account is open.
• Event and guest data — until the host deletes the event, or their account is deleted.
• Deleted accounts — when you delete your account we schedule it for permanent deletion after a 30-day grace period, so you can change your mind. You will receive an email with a link to cancel. After the grace period, your data is permanently removed.

We may keep limited records for longer where we have to for legal reasons.

Under the UK GDPR and the EU GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, ask for it in a portable format.

• Access and portability — use Settings → Export my data in the app. We email you a copy of your data in a machine-readable format.
• Deletion — use Settings → Delete account in the app.
• Correction — edit your profile in the app, or email us.

We respond to requests within one month. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority in the EEA.

The InviteWith app does not include analytics or crash-reporting tools, and it does not track you across other companies’ apps or websites. Because there is no tracking, the app does not show Apple’s App Tracking Transparency prompt.

This website uses only the cookies necessary to make it work, such as keeping you signed in when you manage an event. We do not use advertising cookies.

Data is encrypted in transit and at rest. Access to your events and guest lists is restricted at the database level to you and the guests you invite. Authentication tokens are stored in your device’s secure keychain. No system is perfectly secure, but we take these safeguards seriously and review them regularly.

InviteWith is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

If we make a material change to this policy we will let you know in the app or by email before it takes effect. The date at the top of this page always shows when it was last revised.