Privacy Policy
Last updated: July 17, 2026
Our Privacy Philosophy
We’re a small team that builds tools for people who bring people together. Like you, we’ve been frustrated by apps that treat personal data as a product. We decided to do things differently.
Little Invite’s philosophy is simple: collect only what we need to run the service, and nothing more. We don’t sell your personal data. We never will. Here are a few ways that shows up in practice:
- We only ask for your phone number to log you in — we don’t require your full name, email, or birthdate
- Your phone number is never displayed to other users
- We don’t subscribe you to marketing messages when you sign up
- We don’t sell or share your personal data with advertisers
- We use analytics to improve the product, not to build advertising profiles
Summary of Key Points
This summary covers the highlights. You can read the full details in each section below.
- What we collect: Phone number, display name, optional profile info, event data, RSVPs, and standard device / usage information.
- Why: To operate the service, communicate with you, keep things secure, and improve the product.
- Who we share with: Only the service providers that help us run the platform (database hosting, SMS delivery, analytics). We do not sell your data.
- Your rights: You can access, correct, or delete your personal information at any time. If you’re in the EU or California, you have additional rights detailed below.
- How to reach us: privacy@littleinvite.com
What Information We Collect
Information You Provide
In short: We collect the information you give us when you create an account, set up events, or interact with the platform.
The personal information we collect includes:
- Phone number — used for account creation, login via one-time passcode, and event notifications you opt into
- Display name — shown on your public profile and in guest lists
- Profile information — optionally, a profile photo, bio, and Instagram handle
- Event data — event title, description, date, time, location, and cover photo
- RSVP and guest information — your RSVP status, guest count, and any display name you provide when responding
- Date-poll choices and voter identity — the options you choose and the account associated with each vote
- Comments and reactions — content you post in event activity feeds
Information Collected Automatically
In short: We automatically collect certain technical information when you use the service. This does not include your name or contact details.
- Device and browser data — IP address, browser type, operating system, and device identifiers
- Usage data — pages visited, features used, and interaction patterns, collected through our analytics provider (PostHog)
- Push notification tokens — if you enable push notifications, we store the subscription endpoint needed to deliver them
Information From Other Users
In short: Other users may include your information when they invite you to an event.
When an event host sends you an invitation via SMS, they provide your phone number to trigger the notification. We use this solely to deliver the invitation.
Why We Use Your Information
In short: We use your information to run the service, communicate with you, keep things secure, and improve the product.
To Operate the Service (Legal Basis: Contract)
- Create and manage your account
- Authenticate you via one-time passcode
- Display events, guest lists, and activity feeds
- Deliver event notifications and broadcast messages
- Process RSVPs and manage guest counts
To Improve and Protect the Service (Legal Basis: Legitimate Interest)
- Analyze usage patterns to improve features
- Monitor for abuse, fraud, and security threats
- Debug technical issues
To Communicate With You (Legal Basis: Legitimate Interest / Consent)
- Respond to your questions or support requests
- Send service-related announcements (e.g., policy changes)
To Comply With the Law (Legal Basis: Legal Obligation)
- Respond to lawful requests from authorities
- Enforce our terms and protect rights and safety
When and With Whom We Share Your Information
In short: We share data only with service providers that help us operate the platform, and when legally required. We do not sell your personal information.
Service Providers
We use the following categories of third-party providers, each bound by contracts that restrict how they can use your data:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, file storage | All account and event data |
| Twilio | SMS delivery (login codes, notifications, broadcasts) | Phone numbers, message content |
| PostHog | Product analytics | Usage events, device information |
| Vercel | Website hosting | Server request logs |
Event Hosts and Guests
Event hosts and people marked going or maybe can see the display name, status, and guest count for every RSVP. Everyone else, including people who have not answered or who declined, can see only the total number going. Your phone number is never shown to other users.
Date-poll choices and the identity of each voter are visible to signed-in viewers of published events and hosts of draft events.
Legal Requirements
We may disclose your information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect rights, safety, or property.
Business Transfers
If Little Invite is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
How Your Information Is Displayed
In short: Your public profile is visible to other users. Your phone number is never displayed.
Your public profile includes your display name and, optionally, your profile photo, bio, and Instagram handle. This is visible to other Little Invite users.
When you RSVP to an event, your display name appears on the guest list. Comments and reactions you post in an event’s activity feed are visible to other attendees.
Your phone number is private. It is never shown to hosts, guests, or any other user.
How Long We Keep Your Information
In short: We keep your data as long as your account is active or as needed to operate the service, then delete it within defined timeframes.
| Data Type | Retention Period |
|---|---|
| Account data (profile, phone, avatar) | Life of account + 30 days after deletion |
| Event data (title, date, location, cover photos) | Life of the host’s account |
| RSVPs, comments, and reactions | Life of the associated event |
| Broadcast / SMS records | 12 months after delivery |
| Analytics data | 12 months |
| Server and access logs | 90 days |
| Push notification tokens | Until unsubscribed or account deleted |
When you delete your account, we remove your personal data from our active systems within 30 days. Some information may persist in encrypted backups for a limited time before being overwritten.
How We Protect Your Information
In short: We use technical and organizational measures to protect your data, but no system is perfectly secure.
We protect your information through encryption in transit (TLS), encrypted database storage, row-level security policies that restrict data access to authorized users, and regular security reviews. Authentication uses one-time passcodes delivered via SMS — we never store passwords.
That said, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to protect your information using commercially reasonable measures.
International Data Transfers
In short: Your data is stored in the United States. If you are outside the US, your information is transferred internationally.
Little Invite is based in the United States and our service providers process data in the US. If you access the service from outside the US, including from the European Economic Area (EEA) or United Kingdom, your personal information will be transferred to and processed in the US.
We rely on standard contractual clauses and other lawful transfer mechanisms to ensure appropriate safeguards are in place for international data transfers.
We are in the process of appointing an EU representative under Article 27 of the GDPR. Once appointed, their contact details will be listed here. In the meantime, you may reach us at privacy@littleinvite.com for any data protection inquiries.
Your Privacy Rights
In short: Depending on where you live, you may have legal rights over your personal data. We make it easy to exercise them.
Rights for Everyone
Regardless of where you are, you can:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Delete your account and personal data
Additional Rights in the EEA and UK (GDPR)
If you are in the European Economic Area or United Kingdom, you also have the right to:
- Restrict processing of your personal data
- Object to processing based on legitimate interests
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with your local data protection authority
Additional Rights in California (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Delete your personal information
- Opt out of the sale or sharing of personal information — though we do not sell or share your data for advertising
- Non-discrimination for exercising your rights
How to Exercise Your Rights
You can update or delete most of your information directly in the app. For any other requests, email us at privacy@littleinvite.com. We will respond within 30 days (or sooner where required by law). We may ask you to verify your identity before processing your request.
Cookies and Tracking
In short: We use cookies for authentication and analytics. You can control cookies through your browser settings.
We use cookies to keep you logged in (session cookies) and to understand how the service is used (analytics cookies via PostHog). We do not use advertising or third-party tracking cookies.
You can disable cookies in your browser settings, though this may prevent you from logging in. Most browsers also support the Global Privacy Control (GPC) signal — we respect GPC signals where required by law.
Children’s Privacy
In short: We do not knowingly collect data from anyone under 18.
Little Invite is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child under 18 has provided us with personal information, please contact us at privacy@littleinvite.com and we will promptly delete it.
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify you by posting a prominent notice on the service or sending you a notification. The “Last updated” date at the top of this page reflects the most recent revision.
Contact Us
If you have questions about this privacy policy or want to exercise your privacy rights, contact us:
Email: privacy@littleinvite.com
EU/UK Representative: We are in the process of appointing a representative under Article 27 of the GDPR. This section will be updated once the appointment is finalized. In the meantime, please direct any inquiries to the email address above.