Privacy Policy

Last updated: October 17, 2026

This Privacy Policy applies to the “Ślubny Organizer” app available on Google Play for Android and on the App Store for iOS, including under its localized names.

1. Data Controller

The controller of personal data processed in connection with purchase management, support and communication with users is:

Robert Kostrzewa, trading as KOSTRZEWADESIGN.COM
Address: ul. Stefana Okrzei 109, 55-080 Kąty Wrocławskie, Poland
Tax Identification Number (NIP): 8961456432

For privacy-related matters and data deletion requests, please contact:
Email: [email protected]

The controller does not receive wedding planning data stored locally in the app unless the user voluntarily provides it, for example in a message to technical support.

2. Data Stored on Your Device

The app works without creating an account or logging in.

Data entered by the user, including information about tasks, guests, budgets, expenses, tables, diets and allergies, is stored locally on the user’s device.

This data is not transmitted to the controller’s servers or automatically shared with other users. The app does not automatically synchronize this data between devices.

Users decide what information they save in the app. They should respect the privacy of the people whose data they enter, particularly when recording information about health, allergies or diets.

3. Backups

The app allows users to create a local data backup on their phone and restore data from an available backup.

A backup file may contain information entered into the app, including guest details. Users should keep it in a safe location and protect it against unauthorized access.

A backup stored only on the same device does not protect data against loss, theft or damage to the phone.

Separately from the backup feature available in the app, Android or iOS may include app data in a system backup, depending on the app’s configuration, device settings and Google or Apple services. Such backups may be stored in cloud services in accordance with the user’s settings and the relevant provider’s policies.

The controller does not have access to backups stored by the user or to the user’s Google Account or Apple Account.

4. Purchases and Premium Access

The app offers a one-time purchase of Premium access:
• through Google Play in the Android version;
• through the App Store in the iOS version.

Payments are processed by the relevant store operator. Neither the app nor its controller receives the user’s full payment card details.

RevenueCat is used to manage, confirm, verify and restore purchases.

Depending on the platform and purchase process, the following data may be processed:
• a pseudonymous user or installation identifier generated by RevenueCat;
• the identifier of the purchased product;
• a purchase token, purchase receipt data or transaction and order identifiers;
• the purchase date and information about its status, refund or revocation;
• information about Premium entitlements;
• the purchase price and currency;
• store and country or region information;
• technical information, such as the app version, operating system version and device type;
• the IP address processed when connecting to the service.

The pseudonymous identifier does not require the user to provide a name or email address. However, this does not mean that all data associated with it is anonymous.

RevenueCat integration may involve communication with the service when the app is launched or available offers are checked, including before a purchase is made.

This data is used to manage Premium access, display purchase offers, verify transactions, restore purchases and ensure that these features operate correctly and securely.

Data about tasks, guests, budgets and other wedding preparations is not sent to RevenueCat for purchase management.

5. Purposes and Legal Bases for Processing

Where the controller processes personal data, it does so for the following purposes:

• Processing purchases, verifying and restoring Premium access, and handling requests relating to the contract: Article 6(1)(b) of the GDPR.
• Complying with legal obligations, particularly those relating to accounting and consumer rights: Article 6(1)(c) of the GDPR.
• Responding to questions, ensuring security, preventing abuse, and establishing, exercising or defending legal claims: Article 6(1)(f) of the GDPR.

Providing data in correspondence is voluntary but may be necessary to respond to a question or resolve a reported issue. Processing certain technical and transaction data is necessary to manage purchases and Premium access.

6. Data Recipients

Data is not sold or used by the controller for advertising purposes.

To the extent necessary to provide the relevant services, data may be processed by:
• Google, in connection with app distribution, payments and purchases through Google Play;
• Apple, in connection with app distribution, payments and purchases through the App Store;
• RevenueCat, in connection with managing and verifying Premium access;
• the email service provider, if the user contacts the controller;
• legal or accounting service providers, where necessary;
• authorized public authorities, where disclosure is required by law.

Google and Apple also process data as independent controllers under their own privacy policies. The role of other providers depends on the type of service and the applicable agreements.

Further information:
Google: https://policies.google.com/privacy
Apple: https://www.apple.com/legal/privacy/
RevenueCat: https://www.revenuecat.com/privacy

7. Transfers Outside the European Economic Area

Using services provided by companies such as RevenueCat, Google and Apple may involve processing data outside the European Economic Area, including in the United States.

For transfers for which the controller is responsible, data is transferred using mechanisms required by the GDPR, such as a European Commission adequacy decision or Standard Contractual Clauses, together with supplementary safeguards where required.

Information about the safeguards used for data transfers can be obtained by contacting the controller.

8. Analytics and Advertising

The app does not display advertisements, use an advertising identifier or use tools to track user activity for advertising purposes.

The app does not use separate analytics tools to track screens viewed, tasks performed or content entered by users.

RevenueCat processes technical and purchase data in connection with Premium management and may provide the controller with reports about transactions and entitlements.

Google and Apple may independently process data about the use of their stores and services, as well as diagnostic data, in accordance with the user’s settings and their own privacy policies.

9. Permissions and Access to Device Features

The app does not require access to precise location, contacts, calendars, the camera or the microphone.

Using the backup or restore feature may require reading or writing a selected file or choosing a save location through Android or iOS system features. This does not mean that the app has unrestricted access to all user files.

An internet connection is used to manage Premium offers, purchases, restoration of access and entitlement checks.

Opening external pages, such as the Terms and Conditions, Privacy Policy or support page, may establish a connection to the relevant website through a browser or an in-app web view.

10. Data Security

Connections relating to purchase processing and RevenueCat are encrypted in transit using HTTPS/TLS.

The security of locally stored data also depends on device security and how backups are stored.

Users should enable a screen lock, keep the operating system and app up to date, and avoid sharing backup files with unauthorized persons.

11. Data Retention

Wedding planning data remains on the device until the user deletes it, clears the app’s data or deletes the app, subject to how the operating system works.

Backups may remain stored separately until the user deletes them or in accordance with the settings of the service storing the backup.

Premium-related data is retained for as long as necessary to manage and verify entitlements, restore purchases and comply with legal obligations.

Support correspondence is retained for as long as necessary to handle and conclude the request.

Where necessary, data may be retained for longer if required by law or to establish, exercise or defend legal claims, until the relevant time limits expire.

Google and Apple determine the retention periods for data they process as independent controllers under their own policies.

12. Data Deletion

Locally stored data can be deleted:
• on Android: by clearing the app’s data in system settings or uninstalling the app;
• on iOS: by deleting the app together with its data.

On iOS, removing the app icon from the Home Screen or using the offload feature, which preserves app data, does not delete the saved information.

Deleting the app does not necessarily delete backups or files saved outside the app’s storage. These must be deleted separately from the relevant location or service.

To request deletion of data processed in connection with Premium management or correspondence, please email: [email protected]

Please state that your request concerns the “Ślubny Organizer” app and specify your platform: Android or iOS.

The controller may request additional information necessary to locate the relevant record and verify that the requester is entitled to make the request. Do not send passwords or full payment card details.

Deleting data from RevenueCat does not automatically delete transaction history from Google Play or the App Store. Requests concerning data independently processed by Google or Apple should also be directed to the relevant provider.

Some data may be retained where continued storage is required by law or another lawful basis for processing applies.

13. Your Rights

To the extent provided by the GDPR, users have the right to:
• access their personal data and receive a copy;
• have inaccurate data corrected;
• have data deleted;
• restrict processing;
• receive and transfer their data where the statutory conditions are met;
• object to processing based on the controller’s legitimate interests.

To exercise your rights, please contact: [email protected]

The controller responds to requests without undue delay, generally within one month of receipt. Where permitted by law, this period may be extended after the user has been informed.

The controller does not have access to data stored exclusively on the user’s device and therefore cannot independently read, correct or delete it.

Users also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland: https://uodo.gov.pl

Users residing in another country may also contact the competent supervisory authority in accordance with the GDPR.

The controller does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.

14. Contacting Support

Selecting the contact option in the app opens an external email application. The message is sent only after the user confirms it.

When a user contacts support, the controller processes the email address, message content and any voluntarily provided attachments to handle the request.

Before sending screenshots or other files, users should hide guest details and private information that is not needed to resolve the issue.

15. Children’s Privacy

The app is intended for adults organizing a wedding and is not directed at children.

Users may enter information about children invited to the event in their locally stored guest list. This information is not transmitted to the controller during normal use of the app.

16. Changes to This Privacy Policy

This Privacy Policy may be updated if the app’s operation, the services used or legal requirements change.

The current version will be published at: https://slubnyorganizer.pl/polityka-prywatnosci

The last updated date appears at the beginning of this document. Where required by applicable law, users will also be notified of significant changes.