Privacy Policy

1. Who is responsible for your data

The data controller for the Service is WillYou?. For any privacy question or request, contact us at privacy@willyou.app (or hello@willyou.app).

2. Information we collect

We collect the following categories of personal data:

• Account data (senders): if you create an account to send invitations, the email address and authentication details used to sign in.
• Invitation content (senders): the details you enter when you create an invitation, such as the recipient’s name, your message, the occasion, proposed dates, and activities.
• Response data (recipients): when you respond to an invitation, whether you accept or decline, the date and activities you choose, and any optional message you write. Recipients do not need an account and we do not ask recipients for a name, email, or phone number.
• Technical data: information collected automatically when you use the Service, such as your IP address, device and browser type, and timestamps. We use this to operate the Service, secure it, and prevent abuse (for example, rate-limiting how many responses can be submitted).
• Communications: the content of messages you send us, for example by email to support.

We do not knowingly collect special categories of data (such as health, religion, or political views). Please don’t include such information in an invitation or message.

3. How we use your information

We use personal data to:

• provide the Service — create and host invitations, deliver each invitation to its recipient, and return the recipient’s response to the sender;
• keep the Service secure — authenticate accounts, prevent fraud and abuse, and enforce our Terms;
• support you — respond to your questions and requests;
• comply with our legal obligations; and
• maintain and improve the Service, using aggregated or de-identified information where possible.

We do not sell your personal data, and we do not use it to serve you third-party advertising.

4. Legal bases (GDPR)

If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on these legal bases:

• Performance of a contract — to provide the Service you asked for, including delivering invitations and responses.
• Legitimate interests — to secure the Service, prevent abuse, and improve what we offer, balanced against your rights.
• Consent — where we ask for it (you can withdraw it at any time).
• Legal obligation — where the law requires us to process or retain certain data.

5. A note about invitation recipients

When a sender creates an invitation, they may include another person’s name and other details. The sender chooses who to invite and is responsible for having a lawful basis to share that information with us; we process it on their behalf to deliver the invitation.

If you received an invitation and want your information corrected or deleted, contact the person who sent it, or reach us at privacy@willyou.app and we will help.

6. How we share information

We share personal data only as needed to run the Service:

• Between sender and recipient: an invitation and its response are shared between the two people involved — that is the purpose of the Service.
• Service providers (processors): trusted companies that host our infrastructure, store our database, and distribute the app (including our cloud/hosting and database providers and the Apple App Store). They may process data only on our instructions and under contract.
• Legal and safety: where we must comply with the law, respond to lawful requests, or protect the rights, safety, and property of users or the public.
• Business transfers: if we are involved in a merger, acquisition, or sale of assets, data may transfer as part of that transaction, subject to this Policy.

We do not sell personal data and we do not share it for cross-context behavioural advertising.

7. International data transfers

We operate from Ukraine and use providers that may store and process data in other countries, including within the European Union and the United States. Data-protection laws in those countries may differ from yours.

Where we transfer personal data across borders, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, so your data stays protected.

8. How long we keep data

We keep personal data only as long as needed for the purposes above. Account data is kept while your account is active; invitation and response data is kept while the invitation is live and for a reasonable period afterwards. When data is no longer needed, we delete or anonymize it, allowing for limited backup retention and any period the law requires.

You can ask us to delete your account and associated data at any time (see “Your rights”).

9. How we protect data

We use technical and organizational measures to protect personal data, including encryption in transit, access controls, and rate-limiting to reduce abuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already carried out; and
• lodge a complaint with a data-protection authority.

To exercise any of these, email privacy@willyou.app. We will respond within the time the law allows. If you are in the EU/EEA or UK you may also complain to your local supervisory authority; if you are in Ukraine, to the Ukrainian Parliament Commissioner for Human Rights (Ombudsman).

11. California privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to request access to or deletion of it, to correct it, and not to be discriminated against for exercising these rights.

We do not sell your personal information and do not share it for cross-context behavioural advertising. To make a request, contact privacy@willyou.app.

12. Children’s privacy

The Service is intended for adults and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Cookies and similar technologies

We use only the cookies and local storage that are strictly necessary to make the Service work — for example, to remember your language preference and to keep the Service secure. We do not use advertising cookies or third-party tracking for advertising.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Please check back periodically.

15. Contact us

For any privacy question or request, email privacy@willyou.app or hello@willyou.app.