Privacy policy
last updated August 2026
Tashi holds the details of your wedding, which means it holds details about you, about the person you are marrying, and about everyone you invite. This page sets out exactly what the app collects, why it needs each piece, who else touches it, how long it stays, and how to have it removed. It is written from what the code actually does rather than from a template.
in short
- We collect what the app needs to plan a wedding, and nothing to build a profile of you. There is no advertising in Tashi and we do not sell data.
- Your plan is stored under your own account. No other account can read it, and we do not pass your guest list or your budget to vendors.
- Your card details never reach us. Apple takes the payment and tells us only whether a subscription is active.
- Images you upload are served from a plain web link, so anyone who has that link can open the picture without signing in.
- You can correct anything in the app, and you can write to us to get a copy of what we hold or to have it erased.
Who is answerable for your data
Tashi decides what Tashi collects and why, which makes us the party responsible for it. Everything below applies to the Tashi iPhone app, to the RSVP pages a guest opens from an invitation, and to this website.
Privacy questions and requests go to support@tashi.app, and a person reads them.
The three ways people reach Tashi
What we hold depends on which of these you are, so it is worth separating them before anything else:
- A couple planning a wedding. You have an account in the app and everything in the next section applies to you.
- A guest who was invited. You never install anything. You open a link from an email and answer it. Only the guest section applies to you.
- A business with a listing. You have been given access to edit one vendor listing. Your listing is public information about a business, not private information about you.
What we collect, and why
Every row below is something the app actually stores. Where a field is optional, leaving it blank costs you nothing except the feature it feeds.
Signing in
Tashi can be used three ways, and they collect different amounts. Starting as a guest collects nothing at all beyond a random identifier; if you later link the account to Apple or Google, your existing plan comes with you.
| What | Why we need it |
|---|---|
| A random account identifier, created the moment you first open the app | It is the key every other record hangs off. Without it we cannot tell your wedding apart from anyone else's. |
| Your email address and a password, if you register with one | So you can sign back in, and so we can send a password reset when you ask for one. |
| An identifier from Apple or Google, if you sign in that way | The same purpose. If you use Sign in with Apple and choose to hide your address, we only ever see the relay address Apple gives us. |
Your profile
| What | Why we need it |
|---|---|
| Your name, and the names of the couple | To address the app to you and to print the invitation. |
| Your date of birth | To confirm you are old enough to use Tashi. It is optional and only checked, never published. |
| Your phone number, if you add one | Optional. It is stored on your profile and is not shown to anyone else. |
| A profile photo, if you add one | Shown to you in the app. See the photos section below for how it is served. |
| The wedding date and the place you are marrying | The countdown, the diary, and which city the vendor directory searches. |
| Whether you are the bride or the groom, your guest estimate, and the styles you pick at setup | To set up the first version of your plan, including how the budget is split. |
The plan itself
This is the bulk of what we hold, and all of it is content you typed in yourself:
- Your guest list. For each guest, a first name, and optionally a surname, an email address, and how many people they may bring. Once they reply, whether they are coming.
- Your wedding party. A name, a role, and optionally a phone number, an email address and your own notes about them.
- Your budget. The total, the split across categories, and every expense you record: what it was for, the amount, the date, which supplier, whether it is paid, when it is due, and any note you attach.
- Your diary. The tasks and their due dates, whether each is done, and anything you wrote against them.
- Your seating plan. The tables you drew and which guest sits in which chair.
- Your mood board. The categories you made and the images, videos and links you saved into them, with their captions.
- Your wishlist. The item, and optionally a link, a price, a note, and whether it has been bought.
- Your invitations. The wording, the event details you print on them including the venue and its address, the design you chose, any colours you set by hand, and the photos you placed on the card.
- The vendors you saved, any vendor categories you created yourself, and what you searched the directory for.
We use all of this for one purpose: to show you your own wedding plan and to do the things you asked the app to do with it, such as sending an invitation or reminding you a task is due. It is not analysed to profile you, and it is not used to train anything.
Your subscription
If you buy Premium, Apple takes the payment. We are told whether a subscription is currently active, which plan it is, and when it runs out. Your card number, your billing address and your Apple ID password never reach us and we could not retrieve them if we wanted to.
When you write to us
If you send us a support message or report a problem from inside the app, we keep your message, your address, and anything you chose to attach, for as long as it takes to sort the problem out and to have a record that we did.
The people you add to your plan
Most of what you type into Tashi is about other people. When you add a guest or a member of the wedding party you are giving us their details, not yours, and they did not agree to that with us. Two things follow from that.
The first is your responsibility. Only enter details you are entitled to use, use them for your wedding and nothing else, and take someone out if they ask you to. You can delete any guest or party member from the app, which removes their record.
The second is ours. If someone on your list writes to us directly about their own details, we will help them: we will tell them what we hold, correct it, or remove it, and we will tell you that we did. Someone who never agreed to be on a list should not have to argue with the couple to get off it.
If you were invited to a wedding
You are reading this because a couple sent you an invitation and you followed the link. You do not have an account with us and you do not need one. Here is the whole of it.
The couple gave us your name and your email address so the invitation could reach you. Our email service delivered it, and we recorded that it was sent, and whether it arrived or bounced.
Your invitation link carries a long random code that stands in for you. It is what lets you open the page and answer without signing in, and it is the reason the page can greet you by name. Treat the link as private until you use it: anyone you forward it to before you reply can read your invitation and answer in your place. The link is good for one reply. Once your answer is in, it stops opening the page. If you need to change what you said, ask the couple to send the invitation again and you will get a new link.
When you reply, we store your answer and pass it to the couple:
- Whether you are coming.
- How many of you are coming.
- Your meal choice, if the couple asked for one.
- Any dietary requirement you tell them about. Say only as much as you want the couple to see, and note that a food allergy or a religious diet can reveal something personal about you.
- Any message you write to the couple.
That is all. We do not know your location, we do not put a tracker in the invitation email, and we do not use your address for anything but delivering that couple's invitation. To have your reply corrected or removed, ask the couple, or write to us at support@tashi.app and we will deal with it ourselves.
Photos, videos and saved links
You can upload a profile picture, put photos and videos on a mood board, save a link from another app into a mood board category, and place a photo on an invitation. There is something specific about how these are stored that you should know before you upload anything.
Uploaded media is served from an ordinary web address, and that address is not behind a sign-in. Nobody is shown it who was not given it, and it is not listed or indexed anywhere by us, but anyone holding the link can open the file without being logged in. This is how an invitation photo reaches a guest's email in the first place, since an email client cannot sign in to fetch it. Treat anything you upload as shareable, and do not put a document, a screenshot of something private, or a picture you would not want passed on into a mood board.
A photo you place on an invitation is re-encoded when we resize it, which drops the hidden data cameras attach to a file, including the place it was taken. A mood board upload is stored as you sent it, so if your photo carries location data, it stays on the file.
Choosing an image gives Tashi only the file you picked. The app does not read your photo library, and it does not ask to.
Your device, notifications and diagnostics
Push notifications
If you turn on reminders, your device gives us a delivery token that lets Apple route a notification to your phone. We store it against your account and use it for one thing: telling you a planning task is coming due, at the notice you chose. Turning reminders off or signing out removes it.
App analytics
The app includes Google's analytics component, which records basic usage in an aggregated form: that the app was opened, which screens were reached, the model of phone, the version of iOS, the app version, the general country you are in, and a random identifier for the installation. We use it to see which parts of the app people struggle with. It carries none of your wedding content, and Tashi does not use the identifier Apple reserves for advertising, so nothing here follows you into another app.
This website
The pages you are reading now, and the RSVP page a guest opens from an invitation, use the same Google analytics component as the app. It records that a page was opened, which page, the general country you are in, and a random identifier for the visit. On the RSVP page it also records that a reply was sent and how many people it was for. It does not record your name, your email address, the invitation you were sent, or the link you followed to get here.
It is switched on without Google’s advertising features, so nothing here is used to build an advertising profile or to recognise you on another site. That is why there is no cookie banner: there is nothing to consent to beyond counting the page you asked for.
Diagnostic logs
The app keeps a short technical log on your phone, recording things like which request failed and with what error. It is stripped of access tokens and email addresses as it is written, it holds no request or response content, it deletes itself after ten days, and it stays on your device unless you tap Report a problem, at which point it is attached to an email you send us and can read first.
Separately, our servers keep normal operational logs of requests reaching them, which include your account identifier and which endpoint was called, so that we can find a fault or investigate abuse.
What we do not collect
- Your location. The app has no location permission and never asks for one. When you search for a city, that text is looked up as a place name and no more.
- Your contacts, calendar, microphone or camera roll. Tashi asks for none of these.
- Your card, bank or billing details. Apple holds those.
- Anything from a social account beyond the sign-in identifier you chose to use.
- Your browsing outside the app. There is no advertising network in Tashi and no cross-app tracking.
- Sensitive categories on purpose. The one place something sensitive can appear is a dietary note a guest writes on an RSVP, which is why that field says only as much as the guest chooses.
We have never sold personal information, and we do not share it for cross-context behavioural advertising. There is nothing to opt out of because there is nothing being sold.
The companies that process it for us
Tashi is a small operation and runs on other people's infrastructure. Each company below handles data on our instructions, for the purpose named, and for nothing else of their own.
| Who | What reaches them |
|---|---|
| Google Firebase and Google Cloud | Sign-in, and the servers, database and file storage that hold your whole plan. This is where your data lives. |
| Google Places | The city you type when searching for where you are marrying, and the category and city we use to build the vendor directory. Your plan is never sent. |
| SendGrid | The invitation email itself, which means your guest's name, their email address, and the event details you printed on the card. |
| Apple | The purchase, if you buy a subscription, and the delivery of push notifications to your phone. |
| RevenueCat | Whether a subscription is active, held against your account identifier. No wedding content and no payment details. |
| OpenAI | Public business listings only, while we sort real wedding suppliers from unrelated shops. Nothing about you or your wedding is ever sent, and nothing here is used to train a model. |
Beyond those, we disclose data only where the law requires it, where it is needed to establish or defend a legal claim, or where someone is at risk of serious harm. If Tashi is ever sold or merged, your data would move with it, and this policy would continue to apply until you were told otherwise.
Where your data is held
The servers and the database that run Tashi are in the United States, and the companies above are largely American. If you are in Europe or the United Kingdom, that means your data leaves your country to reach us. Our providers cover those transfers with the standard contractual clauses the European Commission publishes for the purpose, which is the mechanism we rely on.
Everything moves between your phone and our servers over an encrypted connection, and it is encrypted again while it sits at rest on Google Cloud.
How long we keep it
| What | How long |
|---|---|
| Your account and everything in your plan | Until you delete it, or you ask us to. We do not expire an account for going quiet, since a long engagement is normal. |
| A guest, a party member, an expense or an image you delete | Removed when you delete it. |
| A guest's reply to an invitation | Kept with that invitation, because it is the record of who is coming, and removed when the invitation or the account goes. |
| Diagnostic logs on your phone | Ten days, then deleted automatically. |
| Server request logs | A short operational window, measured in weeks. |
| Support correspondence | As long as needed to resolve it and keep a record. |
| Vendor listings | Indefinitely. They describe businesses, not people, and they are not tied to your account. |
Deleting your account
Profile, then delete account, closes your account and ends your ability to sign in. That step is immediate and cannot be undone.
Erasing the records that sat behind that account is a separate step on our side today rather than an automatic consequence of it. If you want everything gone, write to support@tashi.app and say so, and we will erase it and confirm when it is done, within thirty days. We would rather tell you that plainly than let you assume a button did more than it does.
Deleting your Tashi account does not cancel a subscription. That is held by Apple and has to be cancelled in your Apple ID settings.
Your rights, and how to use them
Wherever you live, you can ask us for any of the following. In Europe and the United Kingdom these are your rights under the General Data Protection Regulation; in California they sit under the Consumer Privacy Act; elsewhere they may not be written down at all. We do not intend to check your address before helping you.
- See what we hold. Ask, and we will send you a copy of your data in a form you can read and take elsewhere.
- Correct it. Almost everything can be edited directly in the app. Write to us for anything that cannot.
- Have it erased. See the section above. We will act within thirty days.
- Object, or ask us to pause. You can object to a particular use, or ask us to hold your data without using it while a question is being settled.
- Withdraw a permission. Turn off push notifications on your phone or in Profile at any time. Doing so does not undo what was sent before.
- Complain. If we handle this badly, tell us first, then take it to the data protection authority where you live. You do not need our permission to do that.
We will not charge you for a request, and we will not treat you differently for making one. We may ask you to sign in, or to answer from the address on the account, so that we are not handing your wedding to a stranger who asked nicely.
Why we are allowed to hold it
For readers who need the basis under the General Data Protection Regulation stated: we process your account, your profile and your plan because it is necessary to perform the contract you entered into by using Tashi; we process diagnostics and analytics under our legitimate interest in keeping the app working; and we send push notifications on the consent you gave, which you can take back at any time. Guest information is processed under the couple's legitimate interest in inviting the people they are inviting.
How it is protected
- Every request to our servers has to carry a valid sign-in token, and every one of them is scoped to the account it belongs to. One account cannot read another's wedding.
- Traffic is encrypted in transit, and stored data is encrypted at rest by Google Cloud.
- We do not hold your password. Sign-in is handled by Firebase, and a reset goes to your email address rather than through us.
- Client diagnostics are redacted at the point they are written, so a log cannot accumulate what it was never allowed to hold.
- Uploaded images are the deliberate exception, and are readable by anyone with the link, as set out above.
No system is perfect. If something happens to your data that puts you at risk, we will tell you and the relevant authority as quickly as we can establish what occurred.
Age
Tashi is for adults planning a wedding. It is not directed at children, we do not knowingly collect anything from a child, and the app asks you to confirm you are at least eighteen. If you believe a child has given us information, write to us and we will remove it.
A guest replying to an invitation is a different case: a couple may well invite a child, and a reply may carry that child's name and meal choice. That information comes from the couple and their guest, not from the child, and a parent can ask us to remove it at any time.
Changes to this policy
When this policy changes we update the date at the top of the page. If a change actually affects you, such as a new company processing your data or a new purpose we put it to, we will tell you in the app before it takes effect rather than relying on you to reread this page.
Contact
Write to support@tashi.app about anything on this page, including a request to see or erase what we hold. For everything else, the support page is the place to start, and the terms of service cover subscriptions and what you agree to by using the app.