Your account

Creating an event requires an account, using your email and password, Google sign-in, or your phone number, handled by Firebase Authentication. We store whichever identifier you sign in with (email or phone number) to identify which events belong to you. We never see or store your password, and phone sign-in works via a one-time SMS code — we never see that code either. If you sign in with your phone number, Google's reCAPTCHA is used to confirm you're not a bot before the code is sent.

If you're signed in when you open someone else's invitation link, we remember that you viewed it so it appears under "Invited" on your Profile page — this happens automatically and isn't shared with the host beyond what your RSVP already tells them.

What we collect

When you create an event, we store the details you enter: host and family name, event type, date, venue, location, your phone number and an event-day point of contact if you add one (both shown to guests so they have someone to reach with questions), and any optional links you add (photo/video, Google Drive album, payment handle for cash gifts).

When a guest submits an RSVP, we store their name, dietary preference, party size, and optionally an email address or phone number if they choose to provide one.

If a host adds gifts to a registry, we store the product link, name, price, and photo they provide. If a guest checks off a gift as bought, or logs a cash gift payment, we store the name and amount they enter — this is self-reported by the guest, not verified against any bank, payment app, or retailer.

Where it's stored

Event and RSVP data is stored in a Firebase Firestore database. We do not sell or share this data with third parties. Event links are not indexed or discoverable — only people with the exact link can view an event or its RSVPs, and only the host who created an event can edit or delete it.

Photo & video uploads

Pre-event photos and videos a host uploads, and photos guests add to the Memory Vault, are stored by Cloudinary, a media hosting service, and served from Cloudinary's servers when anyone views an event. We don't send guest or RSVP data to Cloudinary — only the media file itself.

AI features

If a host uses the AI invitation writer, the event type, host/family name, venue, location, and date are sent to Groq's API (or, as a backup if Groq is unavailable, OpenRouter's API) to generate invitation text. No guest or RSVP data is sent to any AI service.

Third-party links

Ceremoniz links out to Google Maps for directions, WhatsApp for sharing, payment apps (UPI apps like GPay/PhonePe/Paytm, Venmo, or PayPal, depending on your country) for cash gift payments, gift registry links a host adds (any retailer, anywhere), and any photo/video or Google Drive links a host adds. Payments made through one of these apps happen entirely within that app — we never see or handle payment details ourselves. These services have their own privacy policies, which we don't control.

No ads, and how we use analytics

Ceremoniz does not run advertising and does not sell your data. We do use privacy-focused product analytics (Vercel Analytics and PostHog) to understand which features get used and where people get stuck, so we can improve the app — this records things like which pages are visited and which actions are taken (e.g. an event was created, an RSVP was submitted), and links your activity to your account once you're signed in. This may include session replay (a playback of on-screen activity, not audio or video) to see where people run into trouble — phone numbers, addresses, and payment handles are automatically blocked out of these recordings before they're stored. It's used to make Ceremoniz better, never to advertise to you or to sell to anyone else.

Deleting your data

Hosts can delete an event at any time from "My Events," which removes its data. Guests who want an RSVP removed can ask the event host to do this, or contact us directly. To delete your account and email address entirely, contact us at the email below.

Contact

Questions about this policy: adityakukreti8@gmail.com