Plan with JAM (“Plan with JAM,” “we,” “us”) is a wedding-planning application that helps couples manage their schedule, tasks, guest list, and team, and send event updates by text message and email. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Who is responsible for what
Two different relationships run through this service, and they carry different responsibilities.
- Your own account information — your name, email, and how you use the app. We decide how that is handled, and this policy describes it.
- Your guest and team list — the names, phone numbers, emails, RSVP replies and other details you enter about other people. You decide what to collect and why; we store and process it on your instructions so the service works. In data-protection terms you are the controller of that information and we act as your processor. You are responsible for having a proper basis to give it to us — including that anyone you text genuinely opted in — and we are responsible for handling it only as described here and in our Terms.
Information we collect
- Account information — your name and email address, provided through our authentication provider when you sign up or sign in.
- Event content you create — schedules, tasks, notes, and settings for your event.
- Guest and team information you enter — names, phone numbers, email addresses, and details such as RSVP status, dietary needs, and group/relationship, which you add to plan and communicate about your event.
- Messaging preferences — text-message consent status and opt-out state.
- Technical data — basic log and device information needed to operate and secure the service.
Sensitive details, stated plainly
Two kinds of information in a guest list deserve naming rather than burying in a list.
- Dietary needs and allergies are health information. We hold them only because you enter them to cater an event, we do not use them for anything else, and they appear only to people you have given access to your event. In regions that treat health data as a special category, you are responsible for collecting it from your guests fairly — asking on your RSVP form is normally enough.
- Children. Guest records can include an age band (baby, kid, teen) so you can plan seating and catering. That is information about a child, entered by an adult planning their event. We do not knowingly collect information directly from children, and children do not use the service.
How we use information
- To provide and operate the planning tools you use.
- To send the reminders, email digests, and text announcements you configure.
- To secure the service, prevent abuse, and comply with law.
Text messaging (SMS)
If you use text announcements, phone numbers and SMS opt-in information are used solely to deliver the messages you choose to send to your own guests and team. We do not sell, rent, or share your or your guests’ mobile phone numbers or SMS opt-in/consent information with third parties or affiliates for their marketing purposes. SMS consent is never shared with third parties. Every message includes a way to opt out — recipients can reply STOP to unsubscribe or HELPfor help. Message frequency varies; message and data rates may apply. Messages are sent only between 8am and 9pm in the event’s local time.
Service providers
A short list of providers runs the service on our behalf. They process data only to provide their service to us, under their own security and privacy obligations, and never for their own marketing. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
- Clerk — sign-in and account security.
- Supabase — database and file storage.
- Vercel — application hosting and delivery.
- Resend — transactional and reminder email.
- Notifyre — text-message delivery.
- Sentry — error reporting, so faults can be found and fixed.
We may change providers as the service evolves; this list is kept current, and the categories above are the only purposes any of them are used for. We run no advertising or analytics trackers.
Where your information is processed
Our providers operate primarily in the United States, and information you enter is processed there. If you are outside the United States, that means your information is transferred to and handled in a country whose data-protection laws differ from your own. Where the law requires a transfer mechanism for that, we rely on our providers’ standard contractual clauses.
Why we are allowed to hold it
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you, to give you the service you signed up for; our legitimate interests in keeping the service secure and working; your consent, where we ask for it (text messages are the clear case, and can be withdrawn by replying STOP); and compliance with law. For information you enter about your guests, the basis for collecting it is yours to establish, as described above.
Data retention
We keep your information while your account is active and as needed to provide the service. You can edit or delete your event data in the app at any time.
- Deleting your account removes your profile and the events you own, including the guest and team records in them. It is immediate and cannot be undone.
- Encrypted backups are kept for up to 30 days so the service can be restored after a failure. Deleted information can persist in those backups until they age out, and is not used for anything else.
- Text-message consent and opt-out records are kept for as long as the guest record exists, and are retained after consent is withdrawn. This is deliberate: those records are the evidence that messages already sent were permitted, and deleting them would remove the proof that protects both you and the guest.
Your rights and choices
- See and correct — everything you have entered is visible and editable in the app, which is the fastest way to exercise this.
- Delete — delete individual records, an entire event, or your whole account from Settings. Deleting the account is immediate and permanent.
- Take a copy — you can export your guest list from the app, and you can ask us for a copy of the rest of your information.
- Email and push — manage reminders in Settings, or use the unsubscribe link in any reminder email.
- Texts — any recipient can reply STOP at any time. Opted-out numbers are suppressed everywhere, across every event.
- Object, restrict, or complain — where the GDPR or UK GDPR applies you can object to or restrict certain processing, and you may complain to your local supervisory authority. Where US state privacy laws apply you may exercise the equivalent rights, and appeal if we decline. We will not treat you differently for exercising any of them.
If you are a guest rather than an account holder and want your details changed or removed, the couple who invited you holds that list and can do it directly — ask them first, as they will usually be quickest. You can also email us at the address below and we will help, working with them.
Children
The service is for adults planning an event. It is not directed to children, and we do not knowingly allow anyone under 18 to create an account. A guest record may include a child’s name and age band because an adult entered it while planning — see “Sensitive details” above. If you believe a child has created an account, email us and we will remove it.
If something goes wrong
If we discover a breach affecting your personal information, we will investigate it, take steps to contain it, and notify you and any regulator required by law without undue delay. Where the information affected is your guest list, we will notify you as its controller so you can decide what your guests need to be told.
Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.
Changes to this policy
We may update this Privacy Policy from time to time; the “last updated” date above reflects the current version.
Contact
Questions about this policy? Email hello@planwithjam.com.