Your Privacy Matters

1. Who We Are

The Vow is a wedding planning application. We take your privacy seriously and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national laws.

2. Data We Collect

When you use The Vow, we collect the following categories of personal data:

• Account information: name, email address, and password (stored as a cryptographic hash)
• Wedding data: wedding name, date, guest list, budget, vendor details, and other planning information you enter
• Payment information: order IDs and payment references from PayPal — we never store card numbers or full payment details
• Usage data: page visits and feature interactions, collected via server logs

3. How We Use Your Data

We use your personal data solely to provide and improve the The Vow service:

• To create and manage your account
• To store and display your wedding planning data
• To process payments via PayPal
• To send transactional emails (e.g. invitation links, password resets)
• To diagnose technical issues and maintain service quality

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR Article 6:

• Contract performance — to provide the service you signed up for
• Legitimate interest — to improve the app and prevent fraud
• Legal obligation — where required by applicable law

5. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

6. Third-Party Services

The Vow uses the following third-party processors, each with their own privacy policies:

• PayPal — payment processing
• Sentry — error monitoring (anonymised stack traces only)

7. Your Rights

Under the GDPR you have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your data (right to be forgotten)
• Object to or restrict certain processing
• Data portability — receive your data in a machine-readable format
• Lodge a complaint with your national supervisory authority

To exercise any of these rights, please contact us at the address below.

8. Cookies

The Vow uses only essential session cookies required for authentication and CSRF protection. We do not use tracking cookies or third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the application. Continued use of the service after changes take effect constitutes acceptance of the revised policy.