Privacy Policy

BridalBash ("we," "our," or "us") is operated by Verve and Vow. This Privacy Policy explains how we collect, use, share, and protect your information when you use the BridalBash mobile application (the "App") and related services. By using the App, you agree to the practices described in this policy.

If you have questions, please contact us at bridalbashapp@gmail.com.

1. Information We Collect

1.1 Information You Provide

• Account information: When you register, we collect your email address, display name, and optionally a profile photo.
• Sign-in credentials: You may create an account using your email and password, your Google account, or your Apple ID. We receive only the profile information your chosen provider shares with us (typically name and email).
• User-generated content: Any content you create within the App (such as event plans, notes, or checklists) is stored on our servers.

1.2 Information Collected Automatically

• Device tokens: We collect your device's push notification token (FCM token) to send you notifications. This is stored securely and linked to your account.
• Usage data: We may collect information about how you interact with the App, such as features used and session duration, to improve the App experience.
• Log data: Our servers may automatically record information such as your IP address, device type, operating system version, and timestamps of requests.

1.3 Information from Device Permissions

The App requests the following device permissions. We only access these when you actively use the corresponding features:

• Camera: Used to take photos or videos within the App (e.g., capturing moments at your bridal event).
• Microphone: Used to record audio or video clips within the App.
• Photo Library: Used to upload photos or videos from your device to the App, and to save media to your library.
• Location: Used to find nearby venues, vendors, or event locations. You may be asked to allow location access while using the App or, for specific features, in the background. We do not sell or share your location data with advertisers.
• Notifications: Used to send you reminders, event updates, and messages from your party group.

You can revoke any of these permissions at any time through your device's Settings app. Revoking a permission may limit certain App features.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Provide and improve the App's features and functionality
• Send push notifications for event reminders, group messages, and App updates (you can opt out in your device Settings)
• Respond to your support requests and inquiries
• Ensure the security and integrity of the App
• Comply with legal obligations
• Analyze App usage in aggregate to improve performance and user experience

We do not use your personal information for targeted advertising and we do not sell your data to third parties.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in these circumstances:

3.1 Service Providers

We use trusted third-party services to operate the App. These providers process your data only on our behalf and are bound by confidentiality obligations:

• Supabase — Database hosting and authentication infrastructure. Your account data and content are stored on Supabase servers. (Supabase Privacy Policy)
• Google Firebase (Cloud Messaging) — Used to deliver push notifications to Android and iOS devices. (Google Privacy Policy)
• Google Sign-In — Optional sign-in method. Google may share your name and email with us upon authentication.
• Apple Sign-In — Optional sign-in method. Apple may share your name and email (or a private relay address) with us upon authentication.
• Expo (Expo Application Services) — Used for App builds, updates, and crash reporting. (Expo Privacy Policy)

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If we merge with, are acquired by, or sell assets to another company, your information may be transferred as part of that transaction. We will notify you via email or an in-App notice before your data is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as fraud prevention or dispute resolution).

Push notification tokens are deleted when you sign out or uninstall the App.

5. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information through the App's profile settings, or by contacting us.
• Deletion: Request deletion of your account and associated data. You can submit a deletion request at our data deletion page.
• Portability: Request a copy of your data in a portable format.
• Opt-out of notifications: Disable push notifications at any time in your device Settings.
• Withdraw location access: Revoke location permissions at any time in your device Settings.

To exercise any of these rights, contact us at bridalbashapp@gmail.com. We will respond within 30 days.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission using TLS/HTTPS
• Encrypted storage of sensitive data at rest
• Row-level security policies on our database
• Authentication tokens with limited lifespans

No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at bridalbashapp@gmail.com.

7. Children's Privacy

BridalBash is not directed at children under the age of 13 (or 16 where applicable under local law). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without parental consent, we will delete that information promptly. If you believe a child has provided us with their data, please contact us at bridalbashapp@gmail.com.

8. Third-Party Links and Services

The App may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

9. International Data Transfers

Your information may be processed and stored in servers located outside your country of residence. By using the App, you consent to the transfer of your information to countries that may have different data protection laws than your country. We take steps to ensure your data is handled in accordance with this Privacy Policy and applicable laws wherever it is processed.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your California privacy rights, contact us at bridalbashapp@gmail.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the Effective Date at the top of this page and, where appropriate, by sending a notification through the App or by email. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: