Skip to main content
PaanyayaSign in

Privacy policy

Last updated September 28, 2026

Paanyaya helps hosts create invitation cards and send each guest a copy with their own name on it. This page explains, in plain language, what information we collect, why, who can see it, and how to delete it.

What we collect from hosts

When you sign in with Google, Facebook, or Yahoo, we receive:

  • your name, email address, and profile picture
  • an ID that tells us it's the same account next time

We never see your Google, Facebook, or Yahoo password, and we don't post anything on your behalf.

When you use Paanyaya, we store what you enter:

  • your events: name, date, and start time
  • your guest lists: names, and email addresses and mobile numbers if you add them
  • your card designs and the background images you upload (photos are saved at card size, without their hidden details such as the camera and the place they were taken)
  • when each guest checks in at your event, if you use check-in
  • if you turn on notifications, a delivery address for each device where you turned them on (made by your browser; it doesn't identify you)

What we collect from guests

Guests don't create an account. The host adds each guest's details. When a guest opens their invitation link, our hosting provider keeps standard technical logs (such as IP address and browser type) for security and to keep the site running.

How we use it

  • to sign you in and keep you signed in
  • to show your events, guests, and cards to you
  • to show each guest their own invitation
  • if you turn them on, to notify you when a guest replies and before your events
  • to keep the service secure and fix problems

We don't sell your information, show ads, or send marketing emails. We don't contact your guests.

Who can see it

  • You see your own events, guest lists, and cards. Other hosts can't see them.
  • Each guest sees only their own invitation: their name, your event's name, date, and time, and your card. Guests never see other guests or anyone's email address or mobile number.
  • Anyone with a guest's link can open that invitation, so share links only with the guest. You can reset a link at any time, and the old one stops working.
  • Our service providers store and process data for us: Supabase (database and file storage, in Singapore) and Vercel (website hosting). Google, Facebook, and Yahoo handle sign-in. Notifications you turn on are delivered, encrypted, through your browser's own service (Google, Apple, Mozilla, or Microsoft).

Invitation pages are hidden from search engines.

Cookies

We use one cookie to keep you signed in. On an invitation page, a second cookie remembers that you already opened the envelope, so it opens straight to the card next time; it holds nothing else and is only sent back to that one invitation. If you pick a theme in your settings (light, dark, or match device), a cookie remembers that choice on your device; your browser also remembers how many guests to show at a time. Neither holds anything about you. We don't use advertising or tracking cookies.

To see how many people visit Paanyaya, we count page visits with Vercel Web Analytics. It uses no cookies and doesn't identify you: it records the page, the country, and the kind of device and browser. Invitation and check-in pages are never counted.

How long we keep it

We keep your information until you delete it or ask us to. Deleting an event removes its guest list, card design, and uploaded images. To delete your whole account, see how to delete your data.

A note for hosts about guest information

Your guests' names, email addresses, and mobile numbers are personal information. Only add details your guests would expect you to have, and use them only for your event. Under the Philippine Data Privacy Act of 2012, guests can ask you, or us, to correct or remove their information.

Your rights

You can ask to see, correct, or delete the information we hold about you, or object to how we use it. Guests can do the same for the details a host added about them. Email us at paanyaya.help@gmail.com. If you're not satisfied with our answer, you can contact the National Privacy Commission of the Philippines.

How we protect it

Your data is sent over encrypted connections. The database only lets each host reach their own events and guests, uploaded images are stored privately, and guest links use long random codes that can't be guessed. No system is perfectly secure, but we work to keep your information safe.

Age

Hosts must be at least 18 years old to create an account.

Changes

If we change this policy, we'll update the date at the top of this page. For important changes, we'll tell signed-in hosts in the app.

Contact

Questions about privacy? Email paanyaya.help@gmail.com.