Privacy Policy
Effective: 3 November 2026 · Version 2026-11-03
UtsavOne (“we”, “us”) operates the UtsavOne Android app and the website utsavone.app. We are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the controller under the EU and UK General Data Protection Regulation (GDPR). Contact: hello@utsavone.com. Registered address: [registered address].
In short
- Your event plans — names, budgets, vendors, bookings, payments, expenses, contributions, guests, gifts, reminders, documents and photos — are end-to-end encrypted on your phone. We cannot read them.
- We collect only what we need to run your account, sync your plans between devices and family members, send notifications you ask for, and process purchases.
- No ads, no advertising ID, no selling or sharing of data for advertising, no analytics or tracking SDKs.
- Device permissions (camera, contacts, notifications) are optional and asked for only when you use the feature that needs them.
- You can download your data and delete your account at any time, in the app or at utsavone.app/delete-account.
What we process, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR / DPDP) |
|---|---|---|
| Email address, display name and sign-in method. With Google sign-in we receive your name and email from Google; we do not receive your Google password or contacts. | Create and secure your account | Contract / consent |
| Age confirmation (18+), the date and version of the Terms and this policy you accepted | Prove consent; keep the app adults-only | Legal obligation / consent |
| Language, country, currency and notification choices | Show the app the way you chose | Contract / consent |
| Membership metadata: which accounts belong to which event or MyGuests list, roles, access settings, and when records were created or changed (not what they contain) | Sharing and permissions within a family | Contract / consent |
| Invitations: an optional email address you type to invite a family member, and who invited whom | Deliver the invitation in that person's in-app inbox | Contract / legitimate interest |
| Devices: a random device ID created by the app, device name you see in Security, app version, last-seen time, push-notification token, and public encryption keys | Sync, notifications, end-to-end encryption, letting you revoke a lost phone | Contract / consent |
| Encrypted event content and files (see “In short”), including photos and documents you choose to upload | Store and sync your plans across your devices and family (we cannot read them) | Contract / consent |
| Encrypted MyGuests directory: names, villages/cities and optional mobile numbers of people you invite | Keep your guest records and reuse them across events (we cannot read them) | Contract / consent; you confirm you may record these details |
| Purchases: order ID, product, status and dates from Google Play (never card, bank or UPI details) | Provide what you bought, handle refunds, keep tax records | Contract / legal obligation |
| Support messages you send us | Answer your request | Consent / legitimate interest |
| Security and audit logs (account ID, action, time; no event content) | Prevent abuse, rate-limit attacks, investigate incidents | Legitimate interest / legal obligation |
You give consent when you create your account by confirming you are 18 or older and accepting this policy and the Terms. Optional features (contacts import, camera, notifications) also ask for your permission at the moment you use them.
Device permissions and on-device features
| Permission / feature | When it is used | What happens to the data |
|---|---|---|
| Contacts (READ_CONTACTS) | Only when you tap MyGuests → Import from contacts, after an in-app explanation. You can refuse and still add guests one at a time. | Your address book is read on your phone only to show a list you can tick. Only the names and numbers you select are saved, end-to-end encrypted, to MyGuests. The rest never leaves your phone and is not stored by the app. |
| Single contact picker (no permission) | “Pick from phone contacts” in the guest form | Android shares only the one contact you choose. |
| Camera | When you take a photo of a bill, receipt, gift or document, or scan an invitation card | Photos you save to Documents are compressed and end-to-end encrypted before upload. Photos taken to scan a card are read on the phone and deleted immediately; they are never uploaded. |
| Photo picker (no permission) | When you choose a photo from your gallery | The app sees only the photo you pick. Card photos are read on the phone and not copied or uploaded. |
| Text recognition (card scanning) | When you tap Scan card or From photo | Text is recognised on your phone by Google ML Kit, provided through Google Play services. Images and recognised text are never sent to us or to Google. Google Play services may send Google anonymous usage and performance statistics about the feature and download its language model once. |
| Spreadsheet import (no permission) | When you choose a .csv or .xlsx file to import guests | The file is read on your phone and not uploaded; only the guests you import are saved, encrypted. |
| Notifications | Reminders and family activity you switched on | Push messages carry only an event ID; the text is built on your phone. |
| Files you create | PDF reports, statements, receipts, invoices, CSV/Excel exports, “Download my data” | Created on your phone. Invoices are listed from your encrypted payment records; a PDF is made only when you
open, share or copy one, kept as a temporary file and deleted automatically (within a day at most).
Exports leave the app only when you share or save them, and they are not encrypted.
If you choose a folder for invoices (on the phone or in a cloud app such as OneDrive), the app copies invoice
PDFs there and keeps them up to date until you stop it; that cloud provider's own terms then apply. The app
gets access to that one folder only and never signs in to your cloud account.
If you connect Google Drive, the app (with Google's drive.file permission, which only
covers files the app creates) uploads invoice PDFs from your phone straight to your own Drive, in
My Drive › UtsavOne, also in the background after a payment changes, and removes copies of reversed payments.
They do not pass through our servers. You can stop it in the app and remove the access in your Google
account; files already in Drive stay there under Google's terms. |
| UPI payment apps and WhatsApp | When you tap Pay or Send on WhatsApp | The app opens the other app with the amount, payee or PDF you chose; that app's own privacy policy applies. We never see your UPI or bank details. |
Information about other people
When you add guests, vendors, family members or gift details, you share information about other people. Please add only what you are allowed to and what is needed for your event. This information is end-to-end encrypted, so we cannot read it; you can edit or delete it at any time. If someone asks us to remove their details, we will help you find the right event owner, because only the members of that event can read or delete them.
Who can see your data
- Your family members — only the people you invite to an event or MyGuests list, with the role and access you choose.
- Our processors, acting only on our instructions under data-processing terms: Supabase (database, authentication, encrypted file storage; servers in [region, e.g. India – Mumbai]); Google Firebase Cloud Messaging (push notifications carrying only an event ID); Google Play Billing (payments); Google sign-in (if you choose it); Google Play services (on-device text recognition models); Vercel (hosting of this website; standard server logs such as IP address are kept briefly for security).
- Authorities — only when the law requires it. Because event content is end-to-end encrypted, we can only ever hand over encrypted data and account metadata.
We do not sell personal data, and we do not share it for advertising or for anyone else's own purposes.
International transfers. Google services may process data outside your country. For people in the EU/UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. We only transfer personal data outside India where the DPDP Act allows it.
How long we keep data
- Account, event and MyGuests data: until you delete it, the event, or your account.
- Deleted accounts: removed 7 days after the request (the grace period lets you cancel a mistake).
- Event activity log (who changed what, when; no content): 2 years.
- In-app notifications: 1 year. Finished or expired invitations: 180 days.
- Closed support requests: 2 years. Security and admin audit logs: 3 years.
- Purchase records: up to 8 years where tax law requires.
- On your phone: the encrypted offline copy and app files stay in the app's private storage and are removed when you uninstall the app or clear its storage; temporary photos and files are cleared automatically.
Records you created in other people's events stay in those events, encrypted, after you delete your account.
Your rights and choices
Wherever you live, you can:
- Access and portability — Settings → Download my data gives you a machine-readable (JSON) copy of your account, your events and your MyGuests list.
- Correction — edit your name, language, guests and plans in the app, or ask us.
- Erasure — delete individual records, guests (one by one or many at once) or events in the app; delete everything with Settings → Delete account, or follow utsavone.app/delete-account.
- Withdraw consent — turn off notifications, revoke contacts or camera permission in Android settings, leave an event, revoke devices, or delete your account. Withdrawal does not affect processing that already took place.
- Object or restrict processing based on legitimate interest (GDPR).
- Nominate another person to exercise your rights in case of death or incapacity (DPDP Act) — write to us.
- Complain — to our Grievance Officer first (below); we respond within 30 days. You may then approach the Data Protection Board of India, or your local data-protection authority in the EU/UK.
Grievance Officer
Ankit Singh · hello@utsavone.com. Please write from the email address of your account so we can verify it is you.
Security
Data in transit uses TLS. Event and MyGuests content is end-to-end encrypted with per-event keys (Google Tink, AES-256-GCM); keys are shared between your family's devices with public-key encryption and backed up only with your recovery key. Local data on your phone is stored in an encrypted database. Access is enforced on our servers by row-level security. Admin access to our systems requires two-step verification and is logged, and admins cannot read event content. If a personal-data breach occurs, we notify the Data Protection Board of India and affected users as the DPDP Act requires, and the relevant EU/UK authority within 72 hours where the GDPR applies.
Children
UtsavOne is only for people aged 18 or over and is not directed at children. Everyone confirms their age when creating an account. If we learn that an account belongs to a child, we delete it.
Website
utsavone.app uses no cookies, no analytics and no third-party trackers. Our hosting provider keeps standard server logs (such as IP address and time) for a short period to keep the site secure.
Changes
We will notify you in the app before material changes take effect and ask for your consent again where the law requires. The version and effective date at the top show the current policy.