Privacy policy
This privacy policy applies to the I Do Planner app for mobile devices and the I Do Planner web portal for venues and entertainment providers, together with any related services operated by Filip Kisić (collectively, the "Application"). Filip Kisić is referred to as the "Service Provider".
Information collection and use
The Application collects information when you download and use it. This information may include:
- your device's Internet Protocol address;
- the pages of the Application that you visit, the time and date of your visit, the time spent on those pages;
- the time spent on the Application;
- the mobile operating system you use.
To provide the service the Application also processes the data you give it on purpose: your name and e-mail from your Google or Apple sign-in, the weddings you book (date, venue, guest count, offers, payment confirmations), messages you exchange with a provider inside a booking, the guest list a couple fills in for a venue booking, reviews you write, and — for venues and performers — the business profile, photos, menus, halls, availability and payout bank details you publish.
If you use the Application as a couple, your profile photo is the photo of the Google account you sign in with, or a photo you upload in the app, which takes its place. It is shown to the venues and performers of your bookings, next to your name in their requests and events. The photo is deleted together with your account; a photo you uploaded is also deleted as soon as you remove it, and your Google account photo, if you have one, is shown instead.
Guest lists
When a venue sends a seating plan for a booking, the couple can fill in a guest list: the names of their guests, the table each guest sits at, whether a guest is a child, and an optional note for the venue (for example a dietary requirement, an allergy or a high chair). The list is used to seat the guests and plan the meal, and the venue confirms from it the final guest count on which the final amount of the booking — and the platform's commission — is calculated.
A guest list is visible only to the couple and to the venue of that booking. The guests' details are processed because the couple and the venue need them to organise the wedding (Article 6(1)(f) GDPR). A note about an allergy or a diet can reveal health information: add one only with that guest's consent, and only what the venue needs for the meal (Article 9(2)(a) GDPR). Please let your guests know that you share their names with the venue through the Application.
Guest lists are deleted automatically 30 days after the wedding, 30 days after a booking is declined or cancelled, and immediately when the couple deletes their account. The confirmed final guest count and the amounts it set stay with the booking's payment records, without any guest's name, as described under "Account deletion and data retention".
Cookies and tracking technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels and similar technologies to support functionality, analytics or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Your rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider, and a copy of the data you provided in a machine-readable format (data portability). To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at ido-planner@ido-planner.com from the e-mail address of your account; requests are answered within 30 days. You can also delete your account yourself at any time — see Delete your account.
Account deletion and data retention
Deleting your account removes everything that identifies you immediately: your sign-in, profile and profile photo, favourites, notifications, device tokens, sessions and, for providers, the contact details, photos, menus, halls, bank accounts and offerings. Bookings with a future date are cancelled and the other party is notified.
Booking, offer and payment records on which money actually changed hands (a confirmed advance, remainder or refund) are kept until 31 December of the 11th year after the last such payment, detached from your account and without your personal details, because the Croatian Accounting Act (Zakon o računovodstvu) requires the platform to retain its invoice and commission evidence; this retention is permitted by Article 17(3)(b) of the GDPR, and the records are erased automatically when the period ends. Bookings on which no payment was ever confirmed are deleted together with the account. Payment proofs you uploaded, notes you attached to bookings and the guest lists you filled in are deleted immediately. Reviews written by a couple stay as anonymous "former member" reviews; reviews about a deleted provider are deleted. Encrypted database backups may hold deleted data for up to 30 days and are never used to restore a deleted account. The full list is on the Delete your account page.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at ido-planner@ido-planner.com.
The Service Provider may use the information you provide to send important information, required notices and, where permitted by law, marketing communications.
For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to e-mail. The information the Service Provider requests will be retained and used as described in this privacy policy.
Third-party access
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways described in this privacy statement.
International data transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- adequacy decisions or other legally recognized transfer mechanisms;
- your consent, where required and legally permitted.
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
The Application utilizes third-party services that have their own privacy policy about handling data:
The Service Provider may disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted service providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
Opt-out rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling stops the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at ido-planner@ido-planner.com, or delete your account as described on Delete your account.
Data retention policy
The Service Provider retains personal data based on its necessity for the stated purposes:
- User Provided Data: retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law;
- Automatically Collected Data: retained for up to 24 months from collection, unless longer retention is required for legal compliance;
- Aggregated and Anonymized Data: retained indefinitely as it no longer identifies you;
- Data required for legal compliance (booking, offer and payment records on which money changed hands): retained until 31 December of the 11th year after the last payment under the Croatian Accounting Act, without your personal details, then erased automatically;
- Guest lists (the names, tables and notes of a couple's wedding guests): deleted automatically 30 days after the wedding, or 30 days after a declined or cancelled booking was closed; the confirmed final guest count stays with the payment records;
- Administrative security log (actions taken in the admin panel, referencing internal account identifiers): 2 years;
- Encrypted database backups: up to 30 days.
You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at ido-planner@ido-planner.com. Please note that some User Provided Data may be required for the Application to function properly.
Children
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (ido-planner@ido-planner.com) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic and procedural safeguards to protect information the Service Provider processes and maintains.
Data breach notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this privacy policy from time to time. The Service Provider will notify you of material changes by posting the updated privacy policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this privacy policy will be maintained and made available upon request by contacting the Service Provider at ido-planner@ido-planner.com.
Your consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via e-mail at ido-planner@ido-planner.com.