Privacy Policy

Bluething is the controller of the data processed in the app and on this website, under Brazilian Law No. 13,709/2018 (LGPD). For any privacy matter, contact our Data Protection Officer at privacidade@example.com. This is a translation; the Portuguese version prevails.

Legal name

Bluething (being incorporated)

CNPJ (Brazilian company ID)

being incorporated

Address

being incorporated

Data Protection Officer

being incorporated

Email

privacidade@example.com

From the couple

• Account: email and password. The password is kept securely by Amazon’s authentication service (Cognito); we never see it.
• Wedding: the couple’s names, date, venue, digital invitation, schedule, seating plan, budget, vendors and installments, checklist, gift registry and Pix key.

From guests

• Name and phone number, age group, group (family, friends…), the family or invitation they belong to, RSVP answer and companions.
• Dietary restrictions, if provided, in an optional free-text field. Please do not include health details beyond what the caterer needs.

Phone contacts

When the couple imports guests from their contacts, reading happens on the device itself, with the system’s permission. Only the selected contacts (name and phone number) are sent to Bluething; the rest of the address book never leaves the phone.

Photos and messages

Photos and texts posted to the Feed and the Wall, the wedding cover and dress code photos, with the name of whoever posted them.

Technical and usage data

• A technical identifier created the first time the app opens, which allows using Bluething without an account.
• Usage metrics (which screens and features are used) through PostHog, without name, email or phone number. When there is an account, they are linked only to an internal code.

• Providing the service (accounts, invitations, RSVP, seating, budget, photos, album): performance of the contract with the couple (art. 7, V).
• Guest data added by the couple: legitimate interest of the couple and the guest in organizing the wedding (art. 7, IX), limited to that purpose.
• Access to the device’s contacts and photos: only with the permission granted in the system, which can be withdrawn at any time in the phone settings.
• Security and abuse prevention (usage limits, technical logs): legitimate interest (art. 7, IX).
• Metrics without direct personal data, to improve the app: legitimate interest (art. 7, IX).
• Transactional emails, such as the album-ready notice: performance of the contract. We do not send marketing emails.

• The couple sees the guest list, the answers and everything posted to the wedding.
• Guests see the invitation, the information published by the couple, the directory and tables (to find their seat), and that wedding’s Feed and Wall.
• Nobody outside the wedding can access this data through Bluething.

We do not sell personal data. We share only what is needed with those who help us run the service:

• Amazon Web Services: hosting, database, authentication, photo storage and email delivery, in the São Paulo region (Brazil).
• PostHog: usage metrics without direct personal data, in the United States.
• Apple and Google: app distribution and plan billing, under each store’s rules.
• Authorities, when required by law or court order.

Wedding data stays in Brazil. Usage metrics go to servers in the United States (PostHog), with the contractual safeguards provided for in art. 33 of the LGPD. They do not include names, emails, phone numbers or photos.

• Account and wedding data: while the wedding or the account exists.
• Wedding drafts created without an account: deleted automatically if never linked to an account.
• High-resolution photos: 60 days after the wedding date, they move to long-term storage; lighter versions stay in the app.
• Full album files (ZIP): deleted 14 days after being prepared.
• When the wedding is deleted, its photos and stored files are deleted too.

• All communication with the app and the website is encrypted (HTTPS).
• Every request to the server is signed with temporary credentials and checked before being served.
• Feed and Wall photos only open through temporary links, created for people with access to the wedding. The cover and dress code photos, shown on the invitation, have a fixed, unguessable address.

Under the LGPD (art. 18), you may ask at any time for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• data portability;
• information about who we share it with;
• review of decisions made solely by automated means;
• objection to processing and withdrawal of consent.

Write to privacidade@example.com. We reply within 15 days. Guests can also ask the couple directly for corrections. If you are not satisfied, you may file a complaint with Brazil’s National Data Protection Authority (ANPD).

Bluething is not directed at people under 18. The couple may add invited children only by name and age group, for the catering headcount, in their best interest (art. 14 of the LGPD).

This website uses no cookies, has no analytics tools and collects no data from visitors, apart from the technical access logs kept by the hosting provider for security.

When data processing changes, we update this page and the date at the top. Relevant changes will be announced in the app or by email. See also the Terms of Use.