Privacy Policy

1. What we collect

Your account

You sign in with Google or Apple. From that sign-in we receive and store your name and email address (and, if you use "Hide My Email" with Apple, the private relay address Apple gives us). We don't see or store your Google or Apple password. You may optionally add a phone number or profile photo.

Your wedding data

Everything you enter to plan: your events and ceremonies, guest list (guests' names and, if you add them, phone numbers, email addresses, dietary needs, relationships, and notes), seating arrangements, budgets and expenses you record, tasks, the day-of schedule, vendors you engage, and photos you upload (cover photos, gallery photos, invitation-card designs, payment receipts).

Contacts (only if you use "From contacts")

To add guests quickly, you can pick people from your phone's address book. This works the way you'd hope:

• We ask permission first, and explain why before your phone's own prompt appears.
• Your address book is read on your device only. Nothing leaves your phone until you choose exactly who to add.
• Only the name and phone number of the people you select are sent to our servers — as guests on your list. Contact emails, photos, and everything else are discarded on-device.
• Decline the permission and the app still works — you can add guests by hand or by paste.

Photos and media

Photos you choose to upload (from your library or camera) are stored so they can be shown where you put them — event covers, the showcase gallery, invitation-card backgrounds, receipt attachments. After check-in, your guests can add photos to your wedding's shared album through their invitation link; those are visible to you and your collaborators, and the couple can delete any of them.

Notifications and devices

If you turn on notifications, we store a push token for your device (via Firebase Cloud Messaging) so we can deliver activity updates, task reminders, and the live check-in count. Guests who opt in to event reminders from their invitation get the same treatment — a push token tied to their invitation, nothing more. Tokens are removed when they stop working or when you turn notifications off.

Venue search

When you search for a venue, the text you type is sent to Google Places to return suggestions. We never read your device's location — there is no GPS, no location permission, nothing running in the background.

This website

This site uses no cookies and no analytics. Fonts and scripts are loaded from content-delivery networks (Google Fonts, jsDelivr), which see your IP address as part of serving those files — the same as any website using them.

2. What we don't do

• No ads, no ad networks, no third-party analytics or tracking SDKs in the apps. We don't profile you and we don't track you across other apps or websites.
• No selling or renting of your data — or your guests' — to anyone, ever.
• No device location. Venue search is text-only.
• No marketing to your guests. Guests hear from apé poruwa only about the wedding they're invited to, and only if they opt in to reminders.

3. If you're a guest (no account needed)

Guests never create accounts or install anything. Your invitation is a private link with a unique code. Opening it shows your invitation; from there you can RSVP, check in at the event, download your invitation card or a calendar invite, opt in to reminders, and — after check-in — add photos to the couple's album.

• Your RSVP (yes / no / maybe, how many of your party are coming, any note you leave) and your check-in time are visible to the couple and the people helping them plan.
• Your invitation page shows only your own details — your name, your table, your dietary note if the host recorded one — never other guests' contact details.
• Anyone with your invitation link can act on it, so treat it like a ticket: don't post it publicly. If a link leaks, the couple can remove your seat and seat you again, which issues a fresh code — you'd just RSVP again on the new link.
• The host added your details (name, and possibly phone/email/dietary needs) to invite you. If you'd rather not be on the list, ask the couple to remove you — or contact us and we'll help.

4. How we use your information

Only to run the service:

• keeping your wedding's guest list, seating, budget, tasks, and schedule in sync for everyone you've invited to help;
• delivering RSVPs and live check-in counts to you as they happen;
• sending the notifications and reminders you've turned on;
• generating the documents you ask for — invitation cards, guest-list exports, QR tent cards, calendar invites;
• keeping an activity log of changes to your wedding, so your family can see what happened while they were away;
• binding collaboration invitations to the invited person's email, so a forwarded invite link can't be claimed by someone else;
• keeping the service safe — investigating abuse and moderating content that violates our Terms.

We don't use your content to train AI models, build advertising profiles, or for any purpose unrelated to your wedding.

5. Who can see what

• Your collaborators, by role. The couple and their event planner can see and edit everything. Family and friends you add can view the wedding's logistics — guests, seating, schedule — but can't change them (except a task assigned to them). Money is different: budgets, expenses, payments, and receipts are visible only to the couple and the event planner — never to family/friend collaborators.
• Your guests see only their own invitation (and, via a group link the host chooses to share, their group's invitation codes and RSVP status).
• Our platform staff can access data only to moderate the service and keep it wedding-only. Every staff action on your data is separately audit-logged, and if staff ever flag or suspend an event, that appears in your own activity log — nothing is hidden from you.
• Authorities, only when the law requires. We may disclose information where a court, regulator, or law that applies to us lawfully demands it. Where we are permitted to, we will tell you first.

6. Service providers

We use Google as our service provider:

• Firebase Authentication — your Google/Apple sign-in.
• Google Cloud Platform — application hosting, our database, and file storage for photos and attachments.
• Firebase Cloud Messaging — push notification delivery.
• Google Places — venue search suggestions (receives only the text you type).

These providers process data on our instructions to run the service. We add no other third parties — no analytics vendors, no ad networks, no data brokers.

Google's data centres are located outside Sri Lanka, so your information is stored and processed abroad. It stays encrypted in transit and at rest, and is handled only on our instructions under Google's data-processing terms. By using apé poruwa you agree to this — it is what makes the service work.

7. How long we keep things

Wedding data lives as long as the wedding is being planned. After your last ceremony date has passed, your event is archived automatically, and a 30-day countdown to permanent deletion begins. We notify every collaborator when this starts, and during those 30 days the couple can download a full archive of their photos and media. When the countdown ends, the event — guest list, RSVPs, seating, budget, photos, everything — is permanently deleted, including stored files. Weddings still being planned are never auto-deleted.

Your account itself stays until you delete it (next section).

8. Deleting your account and data

You can delete your apé poruwa account at any time:

• In the app: Profile → Delete account.
• By email: write to privacy@apeporuwa.lk from the address on your account — even if you've already uninstalled the app.

What deletion does:

• Weddings where you are the only owner are deleted entirely — guests, seating, budgets, photos, files, everything.
• Weddings you share with a co-owner, or help with as a collaborator, keep running — only your own presence in them is removed.
• If you appear as a guest on someone else's list, that host's entry for you stays (it's their guest list), but it is unlinked from your deleted account.
• Your sign-in identity, devices, and notifications are deleted. If you signed in with Apple, we also revoke the Sign in with Apple token with Apple.

Deletion is permanent — we can't restore a deleted account or wedding, so download any exports you want first.

9. Security

• All traffic is encrypted in transit (HTTPS), and data is stored on Google Cloud infrastructure with encryption at rest.
• Access is role-based and checked on every request — a collaborator sees only what their role allows, and resources you shouldn't know exist aren't revealed at all.
• Guest links use unguessable codes; collaboration invites use long single-use tokens that expire after 7 days and only work for the invited email address.
• Staff access is audited (see Who can see what).

No system is perfectly secure; if a breach ever affects your data we'll notify you and the relevant authorities as the law requires.

10. Your rights

We honour the rights in Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and extend the same to everyone regardless of where you live:

• Access what we hold about you — most of it is visible right in the app, and exports are built in.
• Correct anything inaccurate — editable in the app, or ask us.
• Delete your account and data (section 8).
• Withdraw consent — notification and contacts permissions can be revoked any time in your device settings; reminders have an unsubscribe built in.
• Complain — we'd rather you tell us first (contact), but you may also complain to the Data Protection Authority of Sri Lanka.

If you're a guest, the couple controls their guest list, but we'll always help route a request to them — and where the request is about our systems (like a reminder opt-in), we handle it directly.

11. Children

apé poruwa is for adults planning weddings and is not directed at children. We don't knowingly create accounts for anyone under 18. A host's guest list may naturally include children attending the wedding; that information is entered and controlled by the host, used only for seating and headcounts. A guest under 18 uses their invitation link under a parent or guardian's responsibility — their RSVP, check-in, and any album photos are handled exactly like any other guest's, under the host's control.

12. Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and tell you in the app before the change takes effect. We will never quietly weaken how your data is treated.

13. Contact us

apeporuwa.lk, Sri Lanka
Privacy questions and requests: privacy@apeporuwa.lk
Everything else: hello@apeporuwa.lk