BringThis privacy policy

The short version

BringThis helps a small group agree who brings what to an event. We store the least we can to make that work, we never sell it or use it for advertising, and you can download or delete everything yourself at any time, for free.

What we store

• On your phone: events you have not shared stay only on your device until you tap Share invite. Nothing is uploaded before that, and only the one event you share is uploaded. The app also keeps a copy of the last version of each board you opened so you can read it offline; it is cleared when you sign out. None of this is included in phone backups, and all of it is gone when you uninstall the app.
• Your account: when you share or join an event you sign in with Apple or Google. We keep the account identifier those providers give us, the email address they supply (Apple's private relay address if you chose to hide yours), the display name you confirm, and when your account was last active. There is no password.
• Events and boards: the event title, optional description, place, date and time zone, the host's settings for joining and name visibility, the list of needs, who joined (by display name) and who promised what.
• Reports you file: the reason, your text, which event and, if you reported a person, which member. If you were signed in, the report is linked to your account so we can follow up; that link is removed if you delete your account. Reports are kept after the event is gone, without the event's contents, so we can spot repeat abuse.
• BringThis Pro: if you subscribe, our payment processor RevenueCat receives your account identifier (the same ID your sign-in provider gave us), the product you bought and the store receipt, and tells us whether Pro is active, which plan and store it came from, and when it expires. We keep that entitlement record on our server. We never see or store your card details; the App Store or Google Play handles payment.
• Reminders and notifications: hosts on Pro can schedule reminder emails before an event. Reminders go only to members who turned them on for that event; to send them we pass the member's email address and the event details to our email provider, Resend. Essential notices (an event changed or was canceled) work the same way and are free.
• Technical records: when you sign in on the web, a session record holding a hash of your sign-in cookie and of your browser type, with when it was last used, so we can sign you out everywhere; an activity log on each event recording which account added, promised, canceled or changed what (no emails or links), kept for as long as the event exists, including after your account is deleted; a seven-day record of recent write requests so that a retried tap is not applied twice; and application logs that record request ids, request paths without invite tokens, status codes and timings, never event contents, names or email addresses. The server in front of the app sees your IP address; we use it in memory to slow down abuse and do not store it in our database.

Why we store it

We use this data to run the event you shared or joined, to sign you in, to keep boards consistent when a tap is retried, to deliver the reminders and notices you or your host asked for, to know whether your account has BringThis Pro, and to act on reports. We use it for nothing else. We process it because it is needed to provide the service you asked for and, for the email address and name your sign-in provider passes to us, on the basis of your consent when you sign in with Apple or Google.

Who sees what

• Anyone with an invite link sees the event title and the host's display name, or just "A gathering" with no host name if the host chose the generic preview, plus the event's join, contribution and name-visibility settings. Never the place, date, list, member names or counts before joining.
• Members see the board. The host always sees who promised what. Other members see each other's names only when the host has set "Members of this event" for name visibility; otherwise they see promised quantities and the number of members, not names.
• Your email address is never shown to a host or to other members.
• The app and the website contain no advertising, crash-reporting or usage-analytics SDKs, and no external fonts or embeds. The only third-party code is Firebase Authentication, the Google and Apple sign-in libraries, and the RevenueCat purchases SDK, which is used only for BringThis Pro. RevenueCat shows us purchase history in its dashboard (which plans were bought and when); that is the only reporting we have, and it contains no event content.

How long

An event and everything on it (its board, who joined and who promised what) stays until its host deletes the event, or deletes their account and chooses to delete the events they host. We do not yet remove old events automatically; if we add that, we will say so here first. Deleted events are purged within 30 days.

When you delete your account, your name, email and sign-in identifier are erased right away and your sessions and other account records are purged within 30 days. An empty placeholder with no name, email or sign-in identifier may stay attached to events that still exist so their boards keep working; it goes when those events go.

Your Pro entitlement record stays with your account and goes when the account is purged. Reminder delivery records (which reminder went to which member, and whether it bounced) are kept for as long as the event exists; if an address bounces or complains we keep a hashed copy of it so we stop emailing it. Push device tokens are removed at sign-out and at deletion.

Application logs are kept for a short period and then discarded. We take one backup of the whole database each day. Backup copies are kept for 7 days on our server and for 30 days on Cloudflare R2, so data that has been removed from the live database, including purged events and accounts, can remain in a backup copy for up to 30 days after that. Backups exist only to recover the service after a failure; we do not restore individual records from them.

Your choices

• Download your data as a JSON file at any time.
• Delete your account: your sign-in ends everywhere right away, your name and email are erased, your promises are canceled and you appear as "Deleted member" on events you took part in; the events you host are canceled or deleted as you choose. If you signed in with Apple, deleting your account from the app also asks Apple to disconnect BringThis from your Apple ID. If you delete from this website, that step does not happen; you can remove BringThis yourself under Apple ID settings > Sign in with Apple. Deleting your account also asks RevenueCat to delete the purchase records held under your account identifier; the store subscription itself is not canceled by us, so cancel it in the App Store or Google Play as well.
• Turn reminder emails and essential update emails on or off per event from the board (Notifications) or from the link at the bottom of every email we send.
• Leave any event from its board; you decide whether your promises are canceled or kept.
• Ask us to correct or erase something by email (address below). We answer within 30 days.

Age

BringThis is for people aged 13 and over. Do not use it if you are under 13. We do not knowingly keep data about anyone under 13; if you believe we do, email the address below and we will delete it.

Where and who

BringThis is operated by decafdevs (Suryadeep Pal), an individual developer in India. Your data is stored in a PostgreSQL database on a virtual server in Sweden rented from Hostup AB; the database is not reachable from the internet. Sign-in is provided by Firebase Authentication (Google LLC), which receives the account identifier your sign-in provider issues, your email address and the IP address and browser or device details of the sign-in request, and assigns the user ID we store. If you choose Google, Google LLC handles the sign-in; if you choose Apple, Apple Inc. handles it and may give us a private relay address instead of your real one. A daily copy of the database is uploaded to Cloudflare R2 (Cloudflare, Inc.) as a backup and kept for 30 days. If you buy BringThis Pro, Apple Inc. or Google LLC takes the payment and RevenueCat, Inc. (United States) processes the receipt and keeps the purchase record for us. Reminder and notice emails are sent by Resend, Inc. (United States), which receives the recipient address and the message. Nobody else receives your data.

Questions or complaints: email suryadeep10@gmail.com (see also Support). If you are in India and are not satisfied with our answer, you may complain to the Data Protection Board of India.

Changes to this policy

If this policy changes we update the date at the top of this page. For changes that matter we also say so on the Support page. Continuing to use BringThis after the date changes means the updated policy applies.