Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains how Fiori EJE Ab collects, uses, stores and shares personal data when you use Bröllopsappen, visit our website or contact us.

1. Who is responsible for your data?

The data controller is:

Fiori EJE Ab
Åland, Finland
Email: support@brollopsappen.se

2. What data do we process?

Depending on how you use Bröllopsappen, we may process the following information.

Account and profile information

  • Name and display name;

  • Email address;

  • Profile picture;

  • Firebase user identifier;

  • Authentication provider, such as email, Google or Apple; and

  • Account and language preferences.

We do not receive your Google or Apple password.

Wedding and membership information

  • Weddings you create or join;

  • Your role within a wedding;

  • Wedding dates and settings;

  • Invitation and membership information;

  • Attendance status; and

  • Information connected to your participation in a wedding.

RSVP and dietary information

When responding to a wedding invitation, you may choose to provide:

  • Your attendance response;

  • Plus-one information, where applicable;

  • Ordinary dietary preferences, such as vegetarian or vegan meals;

  • Allergies, intolerances or food-related notes concerning your own dietary needs;

  • Transport selections; and

  • An optional RSVP message.

Allergy, intolerance and certain food-related information may reveal information about your health and is therefore treated as sensitive personal data.

We collect and process this sensitive information only when you provide explicit consent. Providing allergy information is optional, and you can submit your RSVP without providing it.

You can withdraw your allergy consent through the RSVP feature in the app. When you withdraw consent, your sensitive allergy information and associated consent details are removed from active RSVP records, while your ordinary attendance response remains.

Wedding owners and authorised administrators may access relevant RSVP and dietary information to help organise the wedding.

The app does not support collecting another adult's sensitive allergy information through the plus-one fields.

Content you share

We process content that you choose to share, including:

  • Chat and private messages;

  • Photos and profile pictures;

  • Captions and comments;

  • Memories and greetings;

  • Display names; and

  • Other information entered into wedding pages or free-text fields.

The visibility of content depends on the feature used. For example, private messages are available to the participants in that conversation, while wedding chat and shared photos may be visible to members of the wedding.

Purchase information

When a wedding is activated through Google Play or Apple, we may process:

  • Product identifier;

  • Purchase and transaction status;

  • Purchase platform;

  • Server-generated purchase-session identifiers;

  • Purchase tokens or transaction identifiers required for verification; and

  • The wedding to which the activation is assigned.

Payment-card and bank details are processed by Google or Apple. Bröllopsappen does not receive your complete payment-card information.

Device, security and technical information

We may process:

  • Push-notification tokens;

  • Device platform and app version;

  • Security and application-attestation information;

  • IP address and server logs;

  • Error and diagnostic information; and

  • Information required to prevent fraud, abuse and unauthorised access.

Support and safety information

When you contact support or report content, we may process:

  • Your contact details;

  • The content of your request;

  • Information about the relevant wedding, account or content;

  • Screenshots or files you choose to send; and

  • Actions taken in response to a report.

Website information

When you visit our website, Squarespace and its service providers may process technical information such as your IP address, browser, device information and necessary cookies.

Optional analytics or marketing cookies will only be used where enabled and permitted by applicable consent requirements.

3. Why do we process personal data?

We process personal data to:

  • Create and manage user accounts;

  • Provide wedding-planning and guest features;

  • Enable chat, photos, memories and notifications;

  • Manage RSVP, dietary and transport information;

  • Verify purchases and activate the correct wedding;

  • Provide support and respond to safety reports;

  • Prevent fraud, abuse and unauthorised access;

  • Maintain, secure and improve the service;

  • Communicate important service information;

  • Comply with legal and accounting obligations; and

  • Send optional marketing communications where you have consented.

4. Legal bases

We process personal data only where we have a lawful basis under the General Data Protection Regulation (GDPR).

Depending on the purpose, we rely on:

  • Performance of a contract (Article 6(1)(b)) — where processing is necessary to provide Bröllopsappen, manage accounts and wedding participation, and deliver purchased services.

  • Consent (Article 6(1)(a)) — where you voluntarily agree to specific processing, including optional marketing communications and sensitive dietary information.

  • Legitimate interests (Article 6(1)(f)) — where necessary for service security, fraud prevention, handling support requests, content moderation and maintaining service reliability, provided these interests are not overridden by your rights and freedoms.

  • Legal obligations (Article 6(1)(c)) — where processing is necessary to comply with applicable accounting, consumer-protection or other legal requirements.

  • Vital interests (Article 6(1)(d)) — in exceptional circumstances where processing is necessary to protect someone's life or physical safety.

Sensitive dietary and allergy information

Allergy, intolerance and certain food-related information may constitute health data under Article 9 of the GDPR.

We rely on your explicit consent under Article 9(2)(a), together with consent under Article 6(1)(a), to process this information for wedding-planning purposes.

Providing this information is voluntary. You can submit an RSVP without disclosing allergies or other sensitive dietary information.

You may withdraw your consent at any time through the RSVP feature or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

When consent is withdrawn, the sensitive information is removed from active RSVP records. Information may remain temporarily in backups in accordance with applicable retention and security procedures.

5. Who can access your information?

Your information may be accessible to:

  • Members of the same wedding, where required by the selected feature;

  • Wedding owners, co-owners or authorised administrators;

  • Participants in a private conversation;

  • Fiori EJE Ab personnel and authorised moderators where necessary;

  • Service providers that operate the app, website, storage, authentication, notifications, support and security; and

  • Authorities where disclosure is required by law or necessary to protect someone's safety.

We do not sell personal data and do not use Bröllopsappen data for third-party advertising.

6. Service providers

Bröllopsappen uses service providers including:

  • Google Firebase and Google Cloud for authentication, databases, file storage, backend functions, push notifications and security;

  • Google Play for Android distribution, purchases and purchase verification;

  • Apple for iOS distribution, purchases and Apple authentication where used;

  • Squarespace for website hosting and related website functionality; and

  • Email and support providers needed to respond to enquiries.

These providers process information according to their own terms and privacy documentation and, where applicable, on our behalf.

7. International transfers

Some service providers may process personal data outside Finland or the European Economic Area.

Where required, we rely on recognised transfer mechanisms such as adequacy decisions, standard contractual clauses or other safeguards permitted under applicable data-protection law.

8. How long do we keep personal data?

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements.

Wedding information and shared content

Bröllopsappen is designed to support wedding planning before the event, communication during the celebration and access to shared memories afterwards.

Wedding owners may prepare their wedding in advance. The intended service period continues until 24 months after the final wedding day.

Wedding information, shared photos, messages, memories and other associated content may be retained during this period, unless deleted earlier or subject to a longer legally justified retention period.

Automatic deletion of entire weddings after this period is not currently implemented. Until an automated deletion process is available, wedding-data retention and deletion requests are handled through our operational procedures.

Allergy and sensitive dietary information

Allergy, intolerance and sensitive food-related information is collected only with explicit consent and is intended to be retained no longer than necessary for wedding planning.

Our retention policy sets a deadline of 30 full calendar days after the final wedding day, calculated using the wedding's configured time zone.

The automatic deletion process for this deadline is not yet active. Until it is enabled and verified, sensitive information may require manual deletion in accordance with our retention procedures.

You may withdraw your allergy consent earlier through the RSVP feature. Withdrawing consent removes the relevant sensitive information from active RSVP records without deleting your ordinary attendance response.

Account information

Account and profile information is generally retained while your account remains active and as necessary to provide the service.

When you delete your account, certain account information is removed, while some previously shared content and technical identifiers may remain as described in Section 9.

Purchases and legal records

Purchase-verification records, accounting information and other records required for legal compliance may be retained for the periods required by applicable law.

Information relevant to disputes, security incidents, abuse reports or legal claims may be retained for an additional period where necessary and legally justified.

Backups

Deleted information may remain temporarily in security backups until the applicable backup retention period expires.

Backups are maintained for recovery and security purposes and are not intended for ordinary access to deleted information.

9. Account and content deletion

You can request deletion of your Bröllopsappen account through the app or through our account-deletion page.

When an account is deleted, we remove the user's authentication account, associated profile information and wedding memberships as part of the account-deletion process.

Shared content

Content previously shared with other wedding members, such as chat messages, photos and memories, may remain to preserve shared conversations and wedding history.

Where supported, the user's visible name is removed or replaced with an anonymous designation.

Some technical identifiers or references may remain associated with shared content. Replacing a display name does not necessarily remove every technical connection to the original account.

Wedding ownership

If you are the sole owner of a wedding, automatic account deletion may be unavailable until the wedding's ownership has been resolved.

In this situation, please contact support@brollopsappen.se for assistance.

Other retained information

Certain information may be retained where necessary to comply with legal obligations, investigate security incidents, handle disputes or establish, exercise or defend legal claims.

Some files or information may also remain temporarily in backups or other storage systems until the relevant deletion or retention procedures have been completed.

If you have questions about information associated with your account or wish to exercise your data-protection rights, please contact us.

10. Your rights

Subject to applicable law, you may have the right to:

  • Receive information about how your data is processed;

  • Access your personal data;

  • Correct inaccurate or incomplete data;

  • Request deletion of your data;

  • Restrict processing;

  • Receive certain data in a portable format;

  • Object to processing based on legitimate interests;

  • Withdraw consent; and

  • Object to decisions based solely on automated processing.

These rights do not apply in every situation and may be limited by law.

To exercise your rights, contact support@brollopsappen.se. We may need to verify your identity before completing a request.

You may also lodge a complaint with the Finnish Office of the Data Protection Ombudsman at tietosuoja.fi.

11. Children

Bröllopsappen is not intended for children under the age of 16 to create and manage their own accounts.

A parent or legal guardian should manage participation for a younger person where appropriate. If you believe that a child has created an account or provided personal data without appropriate permission, contact support@brollopsappen.se.

Wedding content may include photographs of children. Users sharing such content are responsible for ensuring that they have the appropriate permission.

12. Security

We use technical and organisational measures intended to protect personal data, including authentication, access controls, wedding-scoped permissions, server-side verification and application-attestation mechanisms.

No method of storage or transmission is completely secure. Users are responsible for protecting their login credentials and devices.

13. Community safety

User-generated content is subject to our Community Guidelines.

Users can report inappropriate content or behaviour through the app or by contacting support@brollopsappen.se. We may review relevant information and take appropriate moderation action.

14. Changes to this policy

We may update this Privacy Policy when Bröllopsappen changes or when legal and platform requirements evolve.

The latest version will be published on this page. If a change materially affects how we process personal data, we will provide appropriate notice.

15. Contact

For privacy questions, requests or complaints, contact:

Fiori EJE Ab
Åland, Finland
Email: support@brollopsappen.se