About this Privacy Policy
This Privacy Policy explains how EverAfter collects, uses, stores and protects personal information when you use the EverAfter mobile application, website and related services.
EverAfter is developed and operated by Andrei Albu, an independent developer based in Romania, who acts as the data controller for personal data processed through EverAfter where applicable.
EverAfter is designed to help users organize celebrations such as weddings, birthdays, baby showers and corporate events.
Information you provide
When you create and use an EverAfter account, you may provide information such as your name, email address, profile information and profile image.
You may also provide information about events you are planning, including event titles, dates, locations, budgets, tasks, guest lists, invitations, seating plans and other planning information.
The information processed depends on the EverAfter features you choose to use. You are not required to provide optional information unless it is necessary for a feature you choose to use.
Guest and third-party information
EverAfter allows users to enter information relating to other people, such as invited guests.
This may include names, attendance information, guest groups, seating assignments, meal preferences, adult or child guest information, invitation or RSVP information, or other information relevant to organizing an event.
Users are responsible for ensuring that they have an appropriate basis for providing this information to EverAfter and should only enter information that is reasonably necessary for event planning.
Users should avoid entering unnecessary sensitive or confidential information about guests or other individuals.
Authentication information
EverAfter allows users to create or access an account using supported authentication methods.
Authentication may include email and password and supported third-party authentication providers such as Google or Apple, depending on platform availability.
When third-party sign-in is used, EverAfter may receive basic account information made available by the provider, such as an account identifier, name or email address, depending on the user's settings and the provider's policies.
Authentication credentials and authentication-related information may be processed through Firebase Authentication.
How information is used
Information is used to create and maintain user accounts, authenticate users, provide EverAfter features, save event-planning data, personalize the experience and synchronize information associated with a user account.
Information may also be used to maintain the security and integrity of EverAfter, prevent or investigate misuse, diagnose technical issues, respond to user requests and improve the reliability of the service.
EverAfter does not use personal information for unrelated purposes without an appropriate legal basis.
Firebase and cloud services
EverAfter uses services provided by Google Firebase and Google Cloud to support core application functionality.
Firebase Authentication may process account and authentication information.
Cloud Firestore may store account information and event-related information, including planning data created through EverAfter.
Firebase Storage may be used to store files uploaded by users, such as profile images.
Google and Firebase may process technical or account-related information as necessary to provide these services and in accordance with their applicable terms and privacy documentation.
Event-planning data
EverAfter may process information created through planning features such as Checklist, Budget, Guests, Invitations, Seat Planner and other event-specific planning tools.
This information is processed to provide the features requested by the user and to preserve the user's event-planning progress.
EverAfter does not claim ownership of the event content or planning information that users create through the service.
Profile images and uploaded files
If you choose to upload a profile image or another file supported by EverAfter, that file may be stored in cloud storage associated with your account.
Profile images may be replaced or removed using available profile controls.
Users should only upload files they are authorized to use and should avoid uploading unnecessary confidential or sensitive information.
Information processed automatically
Certain technical information may be processed automatically when EverAfter is used.
Depending on the platform and services involved, this may include device or application information, operating-system information, technical identifiers, authentication information and diagnostic or security-related information.
Such information is processed where necessary for security, authentication, technical operation or reliability of the service.
Analytics and diagnostics
EverAfter may process technical diagnostics necessary to identify errors, maintain application performance and protect the service.
EverAfter does not currently use third-party advertising or behavioral advertising tracking as part of the service.
If additional analytics, advertising or tracking technologies are introduced, this Privacy Policy and any required consent mechanisms will be updated as appropriate.
International data processing
Some service providers used by EverAfter may process or store personal information in countries other than the country in which the user resides.
Where European data-protection law applies and personal data is transferred outside the European Economic Area, appropriate safeguards will be relied upon where required by applicable law.
Legal bases for processing
Where the General Data Protection Regulation applies, EverAfter processes personal data only where an appropriate legal basis exists.
Processing may be necessary to provide the EverAfter service requested by the user and perform the relationship established when an account is created.
Processing may also be based on compliance with legal obligations, legitimate interests such as security and service reliability, or consent where consent is required by law.
Where processing is based on consent, consent may be withdrawn subject to applicable law, without affecting the lawfulness of processing carried out before withdrawal.
Data retention
Personal information is retained only for as long as reasonably necessary to provide EverAfter, fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes and protect the service.
Event-planning information associated with an active account may generally be retained while needed to provide the service or until it is deleted through available functionality.
Different categories of information may have different retention periods depending on their purpose, technical requirements and applicable law.
Some limited information may be retained after an account deletion request where retention is required by law or reasonably necessary to establish, exercise or defend legal claims, prevent fraud or protect the security of the service.
Account and data deletion
EverAfter provides users with controls to request deletion of their account.
When an account deletion request is completed, EverAfter will take reasonable steps to delete or anonymize personal information associated with the account, subject to information that must or may lawfully be retained for legal, security, fraud prevention or other legitimate purposes.
Users may also contact EverAfter at everafterstudiosofficial@gmail.com regarding account or personal data deletion.
Deleting an EverAfter account does not automatically cancel an active subscription purchased through Apple App Store or Google Play. Any active subscription must be managed separately through the app store through which it was purchased.
Your privacy rights
Depending on applicable law, you may have rights relating to your personal information, including the right to request access to, correction of or deletion of your personal data.
You may also have rights to restrict or object to certain processing, receive certain personal data in a portable format, or withdraw consent where processing is based on consent.
Requests relating to privacy rights may be sent to everafterstudiosofficial@gmail.com .
Before responding to certain requests, reasonable steps may be taken to verify the identity of the person making the request.
EEA, GDPR and complaints
Users in the European Economic Area have the rights provided by the General Data Protection Regulation where it applies to the processing of their personal data.
If you have concerns about how EverAfter processes your personal data, you are encouraged to contact EverAfter first so the matter can be reviewed.
Where applicable, you also have the right to lodge a complaint with the competent data-protection supervisory authority, including the Romanian National Supervisory Authority for Personal Data Processing where it is the competent authority.
Security
Reasonable technical and organizational measures are used to protect personal information against unauthorized access, alteration, disclosure or destruction.
EverAfter relies in part on security measures provided by its cloud, authentication, subscription-management and app-store service providers.
No internet-based service or electronic storage system can be guaranteed to be completely secure. Users should also protect their account credentials and devices and should not share passwords with others.
Children
EverAfter is an event-planning service intended for adult users and is not designed for use by children as account holders.
Users should not knowingly create EverAfter accounts for children where doing so would violate applicable law or platform requirements.
An event organizer may enter limited information about children as part of a guest list or event-planning feature. Such information should be limited to what is reasonably necessary for organizing the event.
Third-party services
EverAfter may rely on or interact with third-party services such as Google Firebase, Google Sign-In, Sign in with Apple, Google Play, Apple App Store and RevenueCat, where applicable.
Independent third parties process information according to their own applicable terms and privacy policies.
EverAfter is not responsible for the independent privacy practices of third-party websites or services that are outside its control.
Changes to this Privacy Policy
This Privacy Policy may be updated when EverAfter changes, when new features or service providers are introduced, or when legal or regulatory requirements change.
The date shown at the top of this Privacy Policy will be updated when revisions are made.
Where required or appropriate, users may be informed of material changes through EverAfter or another reasonable communication method.
Data Controller and contact
For the processing described in this Privacy Policy, the EverAfter data controller is Andrei Albu, an independent developer based in Romania, where he acts as controller under applicable data-protection law.
For privacy questions, requests concerning personal data, account deletion requests or other privacy-related matters, contact: everafterstudiosofficial@gmail.com .