Privacy Policy

1. Who We Are

Eterno ("we", "us", "our") is a wedding planning application developed and operated as an independent software product. For any privacy-related enquiries, please contact us at the email address listed at the bottom of this policy.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable international data protection law.

2. What Data We Collect

We collect only the data necessary to provide the Eterno service. This includes:

For Couples (Wedding Planners)

For Guests

For Vendors

If you submit a listing through the Eterno vendor directory on our website, we collect the following:

A note on meal choices and dietary data

When guests submit meal choices, this information (food preferences for each course) is shared directly with the couple planning the wedding. Eterno stores this data only to display it to the couple and does not use it for any other purpose. Guests may update their choices at any time from within the app.

A note on Our Story

The Our Story feature allows the couple to write a personal narrative and optionally upload a photo. Both the text and photo are stored in our database and are made visible to all guests who have been approved for the wedding. The couple may update or remove their story at any time from within the app. When a couple's account is deleted, the story text and photo are permanently deleted along with all other account data. Guests cannot download, copy or share the photo through the app — it is displayed for viewing within the Eterno app only.

iOS Home Screen Widget

If you add the Eterno widget to your iPhone home screen, the following data is copied from the app to a local shared storage area on your device (an iOS App Group container) so the widget can display it:

• Wedding date — used to calculate and display the countdown
• Partner names — displayed on the medium widget
• Profile photo — displayed as a circular image on the medium widget

This data is stored entirely on your device and is never sent to our servers or any third party as part of the widget. It is only accessible to the Eterno app and the Eterno widget extension on your device. The widget data is updated each time you open the app, and is removed if you uninstall Eterno.

Biometric Authentication

If you choose to enable Face ID or fingerprint sign-in, biometric data is processed entirely by your device's operating system (iOS or Android). Eterno never receives, stores or transmits your biometric data. We only store a local preference flag indicating that biometric sign-in is enabled.

What We Do Not Collect

• We do not collect or store payment card or banking details — couple subscriptions are billed through the Apple App Store or Google Play, and vendor listing payments are handled directly by Stripe
• We do not collect location data from the app
• We do not track your activity across other apps or websites
• We do not collect data from children under 16 without parental consent
• We do not use advertising SDKs or analytics trackers
• We do not store biometric data of any kind

3. How We Use Your Data

We use your data solely to provide the Eterno service. Specifically:

• To create and maintain your account
• To display your wedding details across the app
• To allow guests to RSVP using your unique wedding code
• To send in-app notifications between couples and guests
• To enable features such as seating plan, timeline, budget tracker, meal choices, vendor search and Our Story
• To share meal preferences with the couple for catering arrangements
• To send push notifications about RSVP approvals, wedding updates and day-of reminders
• To allow the couple to approve or decline guest RSVPs
• To manage couple subscriptions via RevenueCat, Apple App Store and Google Play
• To process vendor listing payments via Stripe
• To display approved vendor listings to couples searching for wedding suppliers
• To display a couple's Our Story (text and photo) to their approved guests
• To enable biometric sign-in via your device's Face ID or fingerprint sensor

We never use your data for advertising, profiling or any purpose beyond operating the Eterno service.

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

5. Who We Share Your Data With

We do not sell, rent or trade your personal data. We share data only with the following trusted service providers who help us operate Eterno:

Guest personal details (name, email, phone) entered during RSVP are shared with the couple who created the wedding — this is the core purpose of the RSVP feature and is disclosed at the point of submission.

Vendor listing details (business name, contact information, location) are displayed publicly within the Eterno app to couples searching for suppliers. By submitting a listing, you consent to this information being visible to Eterno users.

RevenueCat manages couple subscription entitlements and communicates with Apple App Store and Google Play billing on your behalf. Payment card data for subscriptions is handled entirely by Apple or Google — Eterno never receives it.

Stripe processes vendor listing payments directly and is PCI-DSS compliant. Eterno never receives or stores card numbers, CVV or full payment details — only a payment confirmation.

6. How Long We Keep Your Data

We retain your data only for as long as necessary:

• Account data — kept for as long as your account is active
• Wedding details — kept until you delete your account
• RSVP data — kept until the couple or guest deletes their account
• Messages and song requests — kept until deleted by the couple
• Our Story text and photo — kept until updated or deleted by the couple, or until the account is deleted
• Push notification tokens — deleted when you sign out of the app or delete your account

When you delete your account through the app, all your personal data — including your profile, wedding details, and associated RSVPs — is permanently and immediately deleted from our systems. This cannot be undone.

7. Your Rights Under UK GDPR

As a UK or EU resident, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at the email address below. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. How We Protect Your Data

We take data security seriously. Your data is protected by:

• Encryption in transit — all data between the app and our servers is encrypted using TLS/SSL
• Encryption at rest — data stored in our database is encrypted on disk
• Row Level Security — each user can only access their own data; other users' data is completely inaccessible
• Secure authentication — passwords are never stored in plain text; we use industry-standard hashed authentication
• EU data residency — your data is stored on servers in Frankfurt, Germany, within the European Economic Area

In the unlikely event of a data breach affecting your personal data, we will notify you and the ICO within 72 hours as required by law.

9. Children's Privacy

Eterno is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data without parental consent, please contact us and we will delete it promptly.

10. Cookies, Local Storage and Tracking

The Eterno Mobile App

The Eterno mobile app does not use cookies. It uses the following device storage mechanisms:

• Secure Store (encrypted) — stores your session token and biometric sign-in preference securely on your device. This data never leaves your device except as part of authenticated API requests.
• AsyncStorage — stores lightweight app preferences and cached data locally on your device to improve performance. This is cleared when you delete your account or uninstall the app.
• App Group shared container (iOS only) — if you use the Eterno home screen widget, your wedding date, partner names and profile photo are written to a sandboxed shared storage area on your device. This area is only accessible to Eterno and its widget extension and is never transmitted externally.

The Eterno Website (eternoapp.com)

The Eterno website does not use advertising cookies or third-party analytics trackers. The following limited storage is used:

• Cloudflare — our website is protected by Cloudflare, which may set a short-lived security cookie (__cf_bm) to distinguish humans from bots. This cookie contains no personal data and expires within 30 minutes.
• Vendor sign-up flow — when a vendor submits a listing and is redirected to Stripe for payment, their listing details are temporarily saved in browser localStorage so they can be activated on return. This data is cleared immediately after the listing is activated and is never sent to any third party other than Supabase.

What We Do Not Use

• No advertising or retargeting cookies
• No third-party analytics (Google Analytics, Meta Pixel, etc.)
• No tracking pixels or fingerprinting

Because our cookie usage is limited to functional and security purposes only, we are not required to display a cookie consent banner under UK GDPR. We do not use cookies that require consent.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. For significant changes, we will notify users through the app. Continued use of Eterno after changes constitutes acceptance of the updated policy.