Privacy Policy
Plain-language summary: WedGen is a private, invite-only app for running a specific wedding. We collect only what's needed to coordinate that event, we don't sell your data, we don't run ads, and you can delete your account and data at any time. Government IDs (if you choose to share one) are treated as sensitive and are not viewable as images inside the app.
This Policy explains what we collect, why, who can see it, and your rights. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDPA) and the IT (Reasonable Security Practices) Rules, and the disclosure requirements of the Apple App Store and Google Play.
1. Who this is for
WedGen is used by wedding hosts (the couple/family — “Owner/Admin”), guests, event managers, vendors, and hotel staff, all invited by code to one event. The app is not directed at children; you must be 18+ (or the age of majority) to create an account.
2. What we collect
We collect only what a role needs for the wedding it belongs to:
- Account & identity: your phone number (used to sign in via one-time code) and your name (first / middle / last) and which side (bride/groom) you belong to.
- RSVP & party: whether you're attending and the family members you RSVP on behalf of.
- Travel: arrival/departure dates and times, mode, and pickup/drop preferences you enter.
- Accommodation: your room assignment and stay dates (managed by the hosts/hotel).
- Government ID (sensitive): to arrange hotel check-in we ask you to upload a photo of one government-issued ID for yourself (and anyone you RSVP on behalf of). Any government ID works, and a masked Aadhaar — one that hides the first 8 digits — is perfectly acceptable and preferred; we do not ask for, parse, or store your full Aadhaar number as data. Sharing an ID is voluntary and recorded with your explicit consent. The ID image is stored encrypted with access restricted to your event's hosts/organisers and the hotel team (and people they specifically authorise), for check-in only. Inside the app the image is not shown to guests or to most roles — only its present/missing status is displayed; authorised organisers/hotel staff can securely download or export your ID (on its own or grouped by room) solely to complete hotel check-in. It is never shown to other guests, and never sold or shared with anyone else. (During pre-launch testing on test events an in-app preview may also exist for the hosts; this is disabled on real events.)
- Content you create (UGC): chat messages, guest photos/videos you upload, feedback, and any reports/blocks you file.
- Device & technical: a push-notification token (if you allow notifications), and basic app/diagnostic data. We keep an internal activity log of actions (who did what, counts) that is de-identified — it does not store the content of your messages or your personal data.
We do not collect precise GPS location. Pickup/drop points are a curated list the hosts set — we do not use a maps/location SDK.
3. Why we use it (purposes)
To let you sign in; to coordinate RSVPs, travel, rides, rooms, and the event schedule; to deliver notifications and chat; to host the guest photo gallery; to keep the event safe (automated and human content moderation); to provide support; and to meet legal obligations. We process your data to perform the wedding-coordination service you were invited into and, where required, with your consent (e.g. an explicit, recorded consent before you share a government ID).
4. Who can see your data
- Within your event only. WedGen separates three “worlds” (guests · event team · hotel). People see only what their role needs. Guests never see the budget; hotels never see guest phone numbers they aren't entitled to; event managers don't see guests' phone numbers.
- Phone numbers are masked by the server based on role and your hide-phone setting.
- We never sell your data and don't share it for advertising.
5. Service providers (processors)
We use trusted providers strictly to run the service, under their own security terms:
- Supabase — database, authentication, storage (including the encrypted government-ID images), edge functions (hosting our backend).
- Cloudflare (R2) — encrypted storage/CDN for photos.
- MSG91 — sending your sign-in OTP by SMS (India).
- Resend — transactional email (e.g. deletion confirmations, host document links).
- Apple / Google — app distribution, push delivery (APNs/FCM), and in-app purchases (they are the merchant for any paid plan and handle applicable taxes).
- Expo — delivering push notifications (Expo Push relays to Apple APNs / Google FCM).
- RevenueCat — validating in-app purchases.
- OpenAI — automated moderation of text and images (chat messages and uploaded photos/videos) to detect objectionable or illegal content and keep events safe. Government ID images are never sent to OpenAI or any other third-party scanner.
6. International transfers
We aim to store and process your core personal data on infrastructure located in India. Some necessary functions rely on providers that may process limited data outside India — app distribution and push delivery (Apple / Google / Expo), in-app-purchase validation (RevenueCat), and automated content moderation (OpenAI) — done only to the extent necessary to deliver and protect the service, and under those providers' contractual safeguards. We do not sell your data or use it for advertising, and we do not otherwise transfer your personal data outside India.
7. How long we keep it
- Government IDs are securely deleted 7 days after the last wedding function.
- Event data is retained for the event's lifecycle and a short archival window, then removed.
- Your account data is deleted when you delete your account (see §9).
- In-app purchase records (held by the App Store / Google Play / RevenueCat for entitlement and tax) are retained per those providers' policies; we keep only the minimum needed to honour your plan.
- De-identified activity/analytics may be retained longer as it does not identify you.
8. Security
Data is encrypted in transit (HTTPS) and access is enforced server-side (row-level security). Sensitive IDs are stored encrypted with strictly limited access and are not shown as images to guests or most roles in the app; authorised organisers/hotel staff can download or export them only to complete hotel check-in. We follow reasonable security practices under the IT Rules and the DPDP Act; no method is 100% secure, but we work to protect your data.
9. Your rights & choices
You can, at any time:
- Access / correct your profile data in the app.
- Control your phone-number visibility (hide-phone toggle).
- Withdraw ID consent and delete a shared ID.
- Delete your account and personal data — in-app (Menu → Settings → Delete account) or by emailing help@wed-gen.com. Full details: Delete your account. If you solely own an active event you'll first be asked to transfer or delete that event.
Under DPDPA you also have rights of access, correction, erasure, grievance redressal, and nomination.
10. Grievance Officer (India)
As required by Indian law, you may contact our Grievance Officer:
Name: Kajal Goenka ·
Email: help@wed-gen.com ·
Address: as in the header. We acknowledge grievances within the timelines
required by law.
11. Children
WedGen is not intended for anyone under 18. We do not knowingly collect data from children. Details of minors attending a wedding are entered by the responsible adult host and are treated as event data.
12. Changes
We may update this Policy; the “Effective date” shows the latest version, and material changes will be notified in-app or by email.
13. Contact
Questions or requests: help@wed-gen.com, Radharaman Technologies Private Limited.