Yes, I Do
Privacy Policy
Who we are
Yes, I Do is published by Simone Salvucci, Kaukysos g. 4-41, 11342 Vilnius, Lithuania ("we", "us"). We are the data controller for the personal data described here. For anything about your data, write to support@getyesido.com.
What we collect
| What | Details |
|---|---|
| Account | Your email address, an optional first name, and your password, which is stored only as a secure hash. With Sign in with Apple we receive the identifier and email address Apple shares (it can be a relay address that forwards to you) and your name if you give it, and we keep the token Apple issues so we can revoke it when you delete your account. |
| Your wedding plan | What you enter: your names, the date, city and country, budget, expenses, vendors, payment schedules, notes, tasks, seating and gifts. |
| Guest details | Names, replies, plus ones, dietary notes, email addresses and phone numbers you add for your guests. |
| Files | Photos and PDFs of quotes, invoices and contracts you attach to expenses. |
| Guest camera | If you make a guest camera link, anyone who opens it can send photos to your wedding from their phone's browser, with a name if they choose to give one. We keep each photo (made smaller in their browser before it is sent), a small copy for the photo grid, its size, the time it arrived and that name. Only you and your partner can see them. |
| Partner sharing | Invite codes and which accounts share a wedding. Your partner sees the shared plan and your name and email. |
| Invitations | The invitation designs you make stay on your device. When you order printed cards, the print files of your design (which show what you wrote on them, such as your names, date and venue), what you ordered and its price are stored with your account, and Stripe collects the delivery address, email and phone number for the courier. We pass the print files and that address to Printify, which prints and posts the cards, and keep the order's status and tracking. We never see your card details. |
| Purchase status | Whether you have a subscription, a free week on the web or access we granted you, when it started, whether it is in its free week, and when it renews or ends. In the app stores, Apple or Google takes the payment. On the web, RevenueCat takes it through Stripe, and its checkout is given your account's email so it does not ask for it again. Either way, we never see your card details. |
| In your browser | The web app at app.getyesido.com keeps a copy of your plan in your browser's local storage, so it opens quickly and keeps working if the connection drops, and removes it when you sign out. Files you attach are held only while the page is open. The website and web app use the optional cookies described below only when allowed. |
| Usage events | Which steps you reach in the app, such as answering a setup question (and on the web, which version of setup you were shown, and how many invitation designs you looked at and kept, by design name), seeing your plan, finishing setup, seeing the unlock screen, each of its steps and which offer it showed, tapping to subscribe, whether you chose the yearly or the monthly plan, and whether the purchase went through, failed or was cancelled, creating an account, starting a free week, opening the app from a link in one of our emails, adding a first guest or inviting your partner, or arriving from a link that carries a plan made elsewhere (how many answers it carried and the campaign name in the link, never the answers), with your device model, app version and a random identifier (your account ID once you sign in). Never names, amounts or anything you type. |
| Screen recordings | A recording of the screens you move through in the app and where you tap, so we can see where the app is confusing. Every piece of text, every field and every image is replaced by a blank block on your phone before anything is sent, so the recording never shows names, amounts, guest details or anything you type. Linked to the same random identifier. |
| Web app pages | In the web app, which pages you open (such as each setup question, the plan, the unlock screen or a tab) and when you leave them. These carry the campaign name in the link that brought you and the same random identifier. The part of a web address after a # is never recorded, and advertising click identifiers and sign-in codes in an address are replaced before anything is sent. |
| Error reports | When something in the app fails: the kind of error, where in the app's code it happened, the screen, your device model, app version and the same random identifier. Never names, amounts or anything you type. |
| Website home page, tool and guide usage | When you visit the home page or a version of it our ads link to, use a free planning tool or read a planning guide on this website, which steps you reach (opening the home page, a tool or a guide, getting a result, downloading a file, the box about the app coming into view, tapping the Plan my wedding button), which page, tool or guide, the kind of device (phone, tablet or computer), the website that sent you and the campaign, ad and page named in the link (for example which ad brought you). Nothing you type into a tool leaves your browser: no dates, names, amounts or guest details. With analytics allowed, these pages also record which page you open and when you leave it, and a replay of the visit in which every field is masked, and on the tools all text too. They use the same random identifier as the web app, so a visit can be followed from this website into setup. They follow the optional analytics choice described below. |
| Advertising measurement | On getyesido.com and throughout app.getyesido.com, including setup, payment screens and the dashboard, the Meta Pixel sends page views and the steps from our home page through setup, account creation and checkout when advertising is allowed. Setup in the web app has twenty screens, and each time you open one or go on from it Meta receives only a fixed label naming the screen (such as surprise, style, date, guests, budget or fit), never what you choose or type on it. It records a trial or subscription only after our billing provider confirms it. When advertising is allowed, a trial start or a purchase also tells Meta the list price of the plan you chose in US dollars, 49.99 for the yearly plan or 8.99 for the monthly plan, a fixed figure and not what you were charged. A purchase is also sent to Meta as a Purchase event with the same figure. A trial start is not, because nothing has been paid yet. A tap on a Plan my wedding button on our website sends Meta a Lead event that names which button you tapped (header, hero, steps, closing or sticky), once per page visit, only when advertising is allowed. Joining a partner with their code sends no Lead. On our guest camera page, a tap on a buy button sends Meta an InitiateCheckout event, and the page you return to after paying sends a Purchase event, each with the camera's list price, 49 US dollars, and which button you tapped. Meta receives the page address, your IP address and browser information, and may use its browser identifiers and the ad click identifier in the address to match the visit to an ad or a Meta account. No wedding plan, tool answers, guest details or account IDs are deliberately sent to Meta. Automatic event detection and automatic advanced matching are disabled. The pixel never loads in the phone apps. Sign-in tokens, plan-import fragments and unrecognized query parameters prevent pixel tracking until the address is safe. |
| Cookie choices | A necessary cookie, yesido_privacy_v1, records your analytics and advertising choices and the time you made them for 180 days, shared between getyesido.com and app.getyesido.com. Vercel uses the request country to decide whether to prompt for consent; the consent endpoint returns only Europe, other or unknown, and does not store the country or IP address. |
| Technical data | IP addresses and request logs kept by our hosting providers for security and to fix problems. |
| Support emails | What you send us when you write to support. |
Payment reminders are scheduled on your phone and are not sent through our servers. The web app does not send them. We use PostHog, hosted in the EU, to count the usage events above so we can see where the app helps and where people get stuck, to make masked recordings of the app's screens, and to receive reports when something in the app fails. The web app sends the same events, recordings and reports, with your browser and operating system in place of a device model. You can turn this off in the app under Settings, Share how the app is used. The web app follows the same switch and the analytics choice in Cookie settings, and sends nothing if your browser sends a Global Privacy Control or Do Not Track signal. On this website, the home page and the versions of it our ads link to, the tools and the guides follow the analytics choice in Cookie settings, and send nothing if your browser sends a Global Privacy Control or Do Not Track signal. Advertising measurement on the website and web app is separate from app usage analytics and follows Cookie settings below. Meta may link a permitted visit to activity on its own services and other websites under its privacy policy.
Guests and other people
When you add guests, vendors or your partner, you give us details about people other than yourself. Please add only what you need to plan your wedding. We process that data on your behalf and only to run the app for you.
If you sent photos to a couple's guest camera
The couple who shared the link asked for your photos, and we keep them for that couple. We store the photos you send, a small copy of each, when each arrived and the name you typed, if any, in private storage in the EU. Only the couple can see them; other guests cannot. The page you use runs no analytics or advertising and sets no cookies. It remembers the name you typed and how many photos you have shared only in your own browser, and our hosting providers log your IP address as they do for any visit. The photos stay until the couple delete them, their wedding or their account. To have a photo removed, ask the couple, or write to support@getyesido.com with the link you used and when you sent it.
Why we use it
- To provide the app, including saving your plan, restoring it on a new phone, sharing it with your partner and collecting your guests' photos when you share a guest camera link. Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).
- To read quotes, lists and contracts and to suggest a plan, only when you use those features. Legal basis: performance of our contract with you.
- To confirm your purchase and unlock the app for you and your partner. Legal basis: performance of our contract with you.
- To understand how the app, the home page and the versions of it our ads link to, the website tools and the guides are used, from the usage events, and improve them. Legal basis: consent for optional website and web app analytics where required (Article 6(1)(a) GDPR), and our legitimate interest in improving app usage elsewhere (Article 6(1)(f) GDPR). You can stop app analytics with the switch in the app, and website and web app analytics with Cookie settings or your browser's Global Privacy Control or Do Not Track setting.
- To email you twice during your free trial: on the first day, with what your plan holds so far, and a few days before it ends, with the date and the price. Only the counts of your guests, tasks and costs go into these emails, never names or amounts. Every one has a link to stop them. Legal basis: our legitimate interest in telling you where your plan and your trial stand (Article 6(1)(f) GDPR).
- To email you three times after you set up your plan, if you have not started the free week: a day after, three days after and a week after. These emails use your first name, your partner's first name, your wedding date, your budget total, your guest estimate and the names of the first tasks on your checklist. They stop as soon as you start the free week, and every one has a link to stop them. Legal basis: our legitimate interest in helping you use the plan you set up (Article 6(1)(f) GDPR).
- To send the free week emails on the web: when your free week starts, a day and three days after, the day before it ends and the day after it ends, each with one next step for your plan, and once, to accounts made before the free week existed, a note that it is ready. These emails use your first name, your partner's first name and the counts of your guests, costs, tasks and planned moments of the day, never names or amounts, and every one has a link to stop them. Legal basis: our legitimate interest in helping you use the plan you set up (Article 6(1)(f) GDPR).
- To sign you in from our emails: the buttons in the plan and free week emails open the app already signed in to your account. Each link works only for the account it was sent to, for 14 days, and we record that it was used, which email it was in and the screen it opened. Legal basis: our legitimate interest in letting you get back to your plan easily (Article 6(1)(f) GDPR).
- To keep the service secure and prevent abuse. Legal basis: our legitimate interest in running a safe service (Article 6(1)(f) GDPR).
- To answer you when you contact support. Legal basis: our legitimate interest in helping you, or our contract with you.
We do not sell your wedding plan. Where advertising is allowed, website and web app visits are shared with Meta for advertising measurement. Legal basis: consent in Europe (Article 6(1)(a) GDPR); elsewhere our legitimate interest in measuring our ads, subject to Cookie settings and your browser's privacy signals.
Cookies and your choices
On this website and throughout app.getyesido.com, visitors detected in Europe, including the EEA, United Kingdom and Switzerland, see a choice before optional tracking starts. Reject optional is as easy to choose as Accept all. Choose cookies lets you allow analytics and advertising separately. The page still works if you refuse. Closing the banner with the × (or the Escape key) before you have chosen counts as Accept all, and the banner says so; once you have chosen, closing it changes nothing. Outside Europe optional tracking can start without a prompt, unless you have refused it or your browser sends Global Privacy Control or Do Not Track. If the country cannot be determined, we also show the choice and keep optional tracking off until you choose or close the banner.
Use Cookie settings in the footer of any website page, or the Cookie settings row on the web app’s Settings page, to change or withdraw your choice. Withdrawal stops future tracking and removes the Meta and PostHog cookies we can access; it does not undo processing of earlier visits. Your choice expires after 180 days. Rejecting optional tracking still stores the necessary preference cookie. If cookies are blocked, your choice applies to the current page and may be requested again on a later visit.
With advertising allowed, Meta can set _fbp (a browser identifier) and _fbc (an ad click identifier), normally for up to 90 days. With analytics allowed, PostHog keeps a random identifier and session data in local storage and in a first-party cookie on getyesido.com, shared by this website and the web app, and records a replay of the visit. In the web app's replay, text, inputs and images are masked, and the app’s Share how the app is used switch must also be on. On the planning tools every field and all text is masked; on the rest of this website every field is masked. We do not send a Meta fallback image when JavaScript is disabled, so it cannot bypass consent.
Your wedding website
If you publish a wedding website, anyone with its link (getyesido.com/w/ and the address you chose) can read it: your names, wedding date, city and country, and what you wrote for it, such as the venue, your story, travel notes, registry links and questions. If you choose to show the schedule, the titles and times of your day's moments appear too, never their notes. Your guest list never appears on it. The page asks search engines not to index it, and it uses no cookies, analytics or advertising pixels, so we learn nothing about the guests who visit it. Unpublish it in the app and it is gone within a minute; deleting your plan or your account deletes it.
Reading quotes, lists and contracts
Some features read content for you: photographing a quote or invoice, pasting a guest list, reviewing a contract, and suggestions for your plan, budget, home screen and seating. When you use one, the content it needs (for example the photo, the pasted text, or your plan's dates, amounts and guest names) is sent through our server to nexos.ai, which passes it to a language model provider, currently OpenAI, to produce the result. The result comes back to your phone and is saved with your plan. These providers act as our processors, do not receive your account details, and are not allowed to use the content to train their models.
If you would rather not use these features, you can still enter everything by hand.
Yes, I Do in ChatGPT
If you use Yes, I Do inside ChatGPT, ChatGPT sends our server what a calculation needs, such as your budget, guest count, wedding date, vendor amounts or guest names, and our server sends back the result. We do not store any of it, link it to you or keep logs of it. In PostHog we count which calculation was used, whether it worked, how long it took and which app called it, never what was sent, and without linking one calculation to another. When you open your plan in Yes, I Do, your answers travel inside the link itself, in the part your browser never sends to a server. OpenAI handles your conversation under its own privacy policy.
Who processes your data
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Accounts, database and file storage | EU (Ireland) |
| PostHog | Counts the usage events in the app, the home page and the versions of it our ads link to, the website tools and the guides, and the calculations used in ChatGPT, and receives masked screen recordings from the app and this website and error reports from the app | EU (Germany) |
| Meta | Advertising measurement on website and web app visits when allowed, under Meta's Business Tools Terms and privacy policy | Ireland and United States |
| Resend | Account emails such as confirmation codes, the two trial emails, the three emails after you set up your plan and the free week emails | EU |
| nexos.ai | Routes requests from the features above | EU |
| OpenAI | Reads the content those features send | United States |
| RevenueCat | Checks purchase status with Apple and Google, and runs subscriptions bought on the web | United States |
| Stripe | Takes the card payment for subscriptions bought on the web and for printed invitations, and collects their delivery address | United States and EU |
| Printify | Prints and posts the invitations you order, through its print partners, with the print files and delivery address of the order | United States and EU |
| Apple | App distribution, payment and Sign in with Apple | Under Apple's own privacy policy |
| App distribution and payment on Android | Under Google's own privacy policy | |
| Vercel | This website, the web app at app.getyesido.com, and the server Yes, I Do in ChatGPT calls | Global |
| Cloudflare | Our domain and support email | Global |
| Unsplash | Serves the photographs in the guides from its image network, which receives your IP address and browser details when a guide loads | United States |
Where data leaves the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
- Your account and plan are kept until you delete them.
- Delete all data in the app removes your wedding, guests and files. Delete account removes your account and everything tied to it; if you made it with Apple, it also revokes the Sign in with Apple token. Both take effect straight away.
- If you share a wedding, deleting your account leaves the plan with your partner.
- Guest camera photos are kept until you delete them, the wedding or your account.
- Backups held by our database provider expire within 30 days.
- Usage events are kept for up to 12 months, then deleted.
- Support emails are kept for as long as we need them to help you, and no longer than two years.
- Printed orders and their print files are kept with your account and deleted with it. Stripe and Printify keep order records as the law requires for tax and accounting.
- Apple, Google, RevenueCat and Stripe keep purchase records as the law requires for tax and accounting.
Your rights
You can ask to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw any consent you gave. Most of this you can do in the app; for anything else, email support@getyesido.com and we will answer within 30 days. You also have the right to complain to a data protection authority. Ours is the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt), and you can also go to the one where you live. The European Data Protection Board keeps a list of them.
Security
Data travels encrypted. Each wedding is readable only by its members, which the database checks on every request, and files are kept in private storage.
Children
Yes, I Do is not meant for anyone under 16, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top, and tell you in the app when the change matters.