Privacy policy
Last updated: [last updated date]
waadaly is an online wedding planner for Muslim couples. This policy explains how we handle your account, wedding plan and guests’ personal data.
Who is responsible
waadaly is a service of [company name], established in Belgium. Company details: KBO [KBO number] · VAT [VAT number] · [address]. We are responsible for the processing described here. Contact hello@waadaly.com for privacy questions, or hello@waadaly.com for support.
Account and wedding plan
We process your email, first name and role (bride or groom). Your password is stored hashed by our authentication provider. Your plan may contain names, date, city/country, traditions, celebrations, tasks and notes, budget, suppliers (name, price, links, phone/email entered by you), seating and Nikah details (wali, witnesses, imam and mahr).
Guests and your responsibility
You enter family/guest names, phone numbers, side, hall, number of people, selected celebrations and invitation status. You must have a valid reason to store and use these details and inform your guests. Do not enter more information than you need, especially sensitive information in notes or religious details.
Personal RSVP links
Guests see only their own invitation page, never other guests. We process their answer, number of people and optional message and add these to your plan. RSVP links stop working when the guest or the plan is deleted. Anyone with a personal link can open that invitation, so share it carefully.
Private images and partner sharing
Card photos and your own invitation images are stored privately and accessible only to you and your invited partner. Premium lets you invite one partner who sees and edits the whole plan; a wedding has at most two people. You can remove the partner at any time. If the owner deletes their account, the partner keeps the shared plan; the owner’s account data is deleted, but the shared plan remains for that partner.
Why we process data
Our GDPR bases are performance of the contract for accounts, the planner and Premium; legal obligation for invoices/accounting; and legitimate interest for security and fraud prevention. You remain responsible for a lawful basis for the guest details you enter. We do not send marketing emails without consent.
waadaly does not send invitations itself. You send them from your own phone/WhatsApp. We do not independently pass guest phone numbers to WhatsApp or third parties. If you choose to open or send an invitation through WhatsApp, that action is yours and WhatsApp’s own privacy terms apply.
Storage and processors
Database, authentication and private files are stored with Supabase in the European Union (Frankfurt, Germany). Lovable hosts the website. Payments will be handled by Stripe; we never see or store full card details. Our email provider sends transactional messages such as confirmation and password-reset emails. We have data processing agreements with each processor. Transfers outside the EU, if any, are protected by appropriate safeguards, including EU Standard Contractual Clauses.
Retention and deletion
We keep data while the account exists. On account deletion, the relevant data is deleted immediately from the app and from backups within 30 days, except invoices retained for seven years under Belgian accounting law. A shared plan kept by the partner is not deleted with the owner’s account.
Security
We use encrypted HTTPS connections, access rules so each couple only sees their own wedding, and private image storage. Keep your password and invitation links safe. No system can guarantee absolute security.
No advertising or data sales
We do not advertise, sell personal data or share guest data with suppliers. We use only necessary login, plan-cache, language and display storage, with no analytics or tracking cookies. Fonts are served from our own site, not a third-party font service.
Your rights
You can request access, correction, deletion, data portability, restriction and objection where applicable. Download your plan data in Settings → Download your data. Contact hello@waadaly.com to exercise your rights or obtain other personal data we hold. We normally respond within one month; we may need to verify your identity.
Complaints
You can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be, or your local data protection authority.
Changes and questions
We will update this policy when our practices change and notify you of significant changes. For questions, write to hello@waadaly.com. The update date is shown at the top.