Privacy Notice

This Privacy Notice explains how FitFindAI ("we", "us") collects, uses and protects your personal data when you use EverAfter. FitFindAI is the data controller for the personal data described here.

1. Data we collect

• Account data — your name, email address and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Wedding planning data — the content you add: partner names, wedding date and location, budget figures, guest details, suppliers, tasks, notes, documents and images, used to provide the service (legal basis: contract).
• RSVP responses — names, attendance, meal choices, dietary requirements and messages submitted by your guests on your public RSVP page, used to provide the service to you (legal basis: contract and legitimate interests).
• Support messages — anything you send us when asking for help (legal basis: legitimate interests).
• Usage and device data — IP address, device identifiers and telemetry about how the service is used, used for security, fraud prevention and product improvement (legal basis: legitimate interests).

Payment data (card details, billing address) is collected and processed by Paddle, our Merchant of Record, not by us.

2. How we use AI

If you use Evie, our AI assistant, relevant wedding data from your workspace is sent to our AI provider solely to generate a response for you. We do not use your wedding data to train AI models.

3. Who we share data with

• Service providers — hosting, database, storage and analytics providers who process data on our behalf under contract.
• Paddle — our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

4. International transfers

Some of our service providers are located outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

5. Retention

We keep your data for as long as your account is active. When you delete your account, your wedding data is deleted. We may keep limited records where required by law (for example, transaction records held by Paddle). Data that is no longer needed is deleted or anonymised.

6. Your rights

Under UK GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You can exercise these rights from Settings (export or delete your account) or by contacting us; we respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO).

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, row-level access controls so each wedding workspace is isolated, and private access-controlled file storage.

8. Cookies

We use essential cookies and local storage only — to keep you signed in and remember your preferences. We do not use analytics or marketing cookies. You can clear these in your browser settings, though signing in will no longer persist.

Contact

Questions about this notice or your data? Contact FitFindAI via the support options in the app.