PartyPlan Privacy Policy

1. Who we are

PartyPlan is operated by Lutfi Haji-Cheteh, operating as "Lutfisk" (a private individual / sole trader, not a registered Swedish company), based at Torsgatan 1, 111 75 Stockholm, Sweden. PartyPlan is a record-keeping utility for planning social events and tracking shared expenses among friends. For privacy questions, data-subject requests (access, export, deletion), or to report a security concern, contact contact.partyplan@protonmail.com. No dedicated Data Protection Officer has been appointed — the service operates below the GDPR Art. 37 mandatory-DPO threshold — so data-protection enquiries are handled at the same address. All software, interfaces, branding, and designs associated with PartyPlan are the intellectual property of Lutfi Haji-Cheteh, operating as 'Lutfisk'. Your account grants you a personal, revocable, non-exclusive license to use the utility as intended.

2. Age restriction (COPPA / GDPR Art. 8)

PartyPlan is not directed at children under 13. You must be at least 13 years old to create an account (16 in the European Economic Area unless local law sets a lower minimum). During sign-up we ask for your date of birth solely to compute your age. We only store the year of birth; the day and month are discarded immediately after the age check. If we learn that an account belongs to a user under the applicable minimum age we will delete it.

3. What data we collect

• Account data: name, username, email, optional phone number, password (stored only as a bcrypt hash), birth year, age-verified flag, optional avatar image.
• Event data: events you create or are invited to, itinerary items, checklists, RSVP status, chat messages.
• Ledger data: expenses you add, how they are split, and settlement records. PartyPlan never connects to a bank, card network, or payment processor — all amounts are informational only.
• Device data: a Firebase Cloud Messaging push token, stored only while you have notifications enabled.

4. What we do not collect

• We do not import your phone's address book.
• We do not transmit raw contacts, phone numbers, or emails of people who are not PartyPlan users to our servers.
• We do not handle, store, or transmit payment-card or bank-account information.
• We do not sell personal data to third parties (CCPA § 1798.120).

5. Contact hashing (when contact-discovery is enabled)

If a future release lets you find friends already on PartyPlan, the match runs on a one-way hash. Specifically: each phone number / email is normalised on your device, hashed locally with SHA-256 plus a per-app salt, and only the resulting opaque digest is sent to our servers for comparison against existing accounts. Raw phone numbers and emails of non-users never leave your device, and digests for non-matches are discarded immediately.

6. How we secure data

• Passwords: bcrypt with per-password salt.
• Auth tokens: short-lived JWT access tokens (15 min) plus revocable refresh tokens.
• Transport: HTTPS in all hosted environments.

7. Data export (right to portability)

You can download every piece of data linked to your account at any time from Account → Download my data in the app, or directly via GET /users/me/export. The export is a single JSON file containing your profile, events you host or attend, expenses, settlements, and chat messages.

8. Account and data deletion (right to erasure)

You have the right to request the erasure of your personal data at any time, free of charge. PartyPlan offers three independent channels so you can exercise this right whether or not you still have access to the app:

• In-app (instant): Open Account → Delete my account in the PartyPlan mobile or web app. The deletion runs immediately against the live database (see effects below).
• Web form (no app required): Submit the Delete My Account request on our public support page at https://partyplan.website/support. Web form requests are processed manually and typically complete within 7–14 business days.
• Email: Write to contact.partyplan@protonmail.com from the address associated with your account.

However the request reaches us, deletion will:

• Hard-delete all personally identifying information: name, email, phone, password hash, avatar, birth year, push token.
• Hard-delete all events, itinerary items, checklists, expense splits, and settlement records you own and that are not shared with other guests.
• Anonymise shared records that other users still rely on for group balances. Your name is replaced with "Deleted Guest" on past expenses, settlements, and chat messages so other guests' ledgers remain mathematically correct.
• Revoke every active login session.
• Remove you from friend lists and event invitations.

Regardless of channel, all manual erasure requests are completed within a maximum of 30 days of receipt, in line with GDPR Art. 12(3) and CCPA § 1798.130 timelines. This anonymisation is irreversible. Any encrypted backups maintained by our hosting infrastructure are systematically rotated out according to our provider's standard operational schedule, after which no copies of personal data remain.

9. Your other rights

Under GDPR and CCPA you may request access, correction, or deletion of your data, and may opt out of the (non-existent) sale of personal data. Email contact.partyplan@protonmail.com and we will respond within 30 days.

10. Changes

If we change this policy materially we will notify you in-app before the change takes effect.