Privacy policy

Occasion Apps is a small Australian business. We follow the Australian Privacy Principles in the Privacy Act 1988(Cth) and collect only what it takes to run your event's app.

What we store

• Organisers: your email address (to sign you in with a one-time link), your answers to the setup questions, and a record of what you've bought.
• Guests: the name you join with and your PIN. PINs are stored hashed — we can't read them.
• What the group adds: photos, chat messages, poll votes and RSVPs, jobs, cost entries, profile details and flight details that members choose to enter.
• Technical data: a sign-in cookie, push-notification subscriptions if you turn them on, and standard server logs (such as IP address and browser) used for security and fixing faults.

We don't use advertising trackers and we don't sell personal information.

Who can see it

• Each event is separate. Its content is visible only to that event's members and its organiser.
• Platform support: we can open an event to help with a problem or to deal with a breach of our terms. Every support access is logged.
• Nothing from your event is public or shown to other events.

Who helps us run it

We use a small number of service providers, who process data only to provide their service to us:

• Vercel — hosts the app (servers in Australia and the United States).
• Supabase — stores the database and photos (Australia or the United States).
• Stripe — takes card payments. Your card details go straight to Stripe; we never see or store them.
• An email provider — sends sign-in links to organisers.
• An AI provider (Anthropic) — drafts your app from the organiser's setup answers. Guests' photos and chat are not sent to it.

Because some of these providers are in the United States, your information may be stored or processed outside Australia.

How long we keep it

An event's app is live until 30 days after the event, then read-only. One year after the organiser signed up, the event and everything in it — names, photos, messages — is deleted, unless the organiser has paid to keep it longer. Payment records are kept as long as tax law requires.

An organiser can ask us to delete their event sooner. A guest can ask the organiser, or us, to remove their posts and details.

Your rights

You can ask to see or correct the personal information we hold about you by emailing hello@occasionapps.com. If you're unhappy with how we've handled a privacy concern, tell us first; if it isn't resolved you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

If something goes wrong

If a data breach is likely to cause serious harm, we'll tell the people affected and the OAIC as the Notifiable Data Breaches scheme requires.