Privacy Policy

1. Data Controller

The data controller for your personal information is DAGNOGO JEFF & ΣΙΑ Ε.Ε., a Greek limited partnership (Ε.Ε.) with registered office at Davaki Pindou 23, 190 09 Rafina, Greece, AFM 801819967, GEMI 163955703000. Privacy contact: Jean-François Dagnogo, reachable at hello@nupta.app.

2. Information We Collect

When you join our waitlist, we collect your email address and preferred language. When you use the Nupta app, we collect your name, email, wedding details, guest lists, photos, and usage data necessary to provide our services. We do not collect sensitive personal information beyond what is required for the app to function.

3. How We Use Your Information

We use your information to provide and improve the Nupta platform, send you updates about your wedding and app features, and communicate launch announcements and product news. We will never sell or share your personal data with third parties for marketing purposes.

4. Data Storage & Third-Party Services

Your data is stored securely using Google Firebase (Firestore, Cloud Functions, Cloud Messaging) and Amazon Web Services (S3 for media, Rekognition for optional face matching — EU regions), which comply with industry-standard security practices and GDPR requirements. All data is encrypted in transit and at rest. Payments are processed by Stripe, which handles your payment information directly — we do not store your card details. In-app subscriptions are processed by RevenueCat on top of Apple App Store / Google Play billing. We use PostHog (EU-hosted) for product analytics and Google Gemini for AI-powered suggestions; Gemini inputs are processed in real time and not stored beyond the request. Each of these sub-processors is listed individually in the sections below.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. When you delete your account, your data will be permanently removed within 30 days, except where retention is required by applicable law (e.g., financial records, legal obligations). Anonymous, aggregated data that cannot identify you may be retained for analytics purposes.

6. Email Communications

All emails include an unsubscribe link. You can opt out of non-essential communications at any time by clicking the unsubscribe link in any email or by contacting us directly. Transactional emails related to your account and wedding will still be sent.

7. Cookies

This website uses essential cookies required for basic functionality. We do not use tracking cookies or third-party analytics cookies without your consent.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the right to: access your personal data and obtain a copy of it; rectify inaccurate or incomplete data; erase your personal data (right to be forgotten); restrict the processing of your data in certain circumstances; data portability — receive your data in a structured, commonly used format; object to the processing of your data for specific purposes. You can delete your account and all associated data directly from the app settings. For more details, see our Account Deletion page. To exercise any of these rights, please contact us at hello@nupta.app. We will respond to your request within 30 days.

9. Account Deletion

You can delete your Nupta account at any time from the app settings. When you delete your account, all your personal data — including your profile, wedding details, photos, RSVP responses, comments, and gamification progress — is permanently removed. Data deletion is processed immediately and completed within 30 days. If you cannot access the app, you may request deletion by emailing hello@nupta.app. For step-by-step instructions, visit our Account Deletion page at nupta.app/delete-account.

10. Product Analytics

We use PostHog (hosted in the EU) to understand how people use the app so we can improve it. This includes anonymous product events (screens viewed, features used), a random device identifier, and basic device information (OS, app version, language). We do not use these events to track you across other apps or websites, and we do not sell them. Analytics data is retained on a rolling 12-month basis and is deleted when you delete your account.

11. Biometric Data (Face Recognition)

If — and only if — you enable the optional "Find Me" feature and give explicit in-app consent, we process a face template from a selfie you provide using Amazon Rekognition (AWS, eu-central-1). This template is used to match your face against photos uploaded to your wedding so that photos of you can be grouped automatically. The template is stored in AWS with your user ID and is deleted as soon as you disable the feature, re-enroll, or delete your account. You can revoke consent at any time in Settings → Face Recognition.

12. Audio Recordings

Some features (voice notes on wishes, audio milestones) let you record audio. Recordings are uploaded to our Amazon S3 bucket (encrypted at rest) and are only played back inside your wedding's private space. Recordings are retained until you or the couple delete them, or until the account is deleted.

13. Subscriptions and Purchases

In-app subscriptions (Nupta FUN and Nupta PREMIUM) are processed by RevenueCat on top of Apple App Store / Google Play billing. We share your Nupta user ID with RevenueCat so it can match purchases and restore them across devices. RevenueCat receives subscription state (active / expired), product ID, and anonymized device information. We never receive your card details from Apple or Google. Purchase history is retained per RevenueCat's policy as long as your subscription is active, and then anonymized.

14. Push Notifications

To deliver wedding reminders, RSVP updates, comment notifications and other in-app alerts, we use Firebase Cloud Messaging (Google FCM). We store a device token associated with your account. You can turn notifications off at any time in your device settings or in-app. Tokens are removed when you uninstall the app, sign out, or delete your account.

15. Photos and Media Storage

Photos and videos you upload to your wedding gallery are stored in Amazon S3 (eu-central-1), encrypted at rest and in transit, and served only to guests who have access to that wedding. Media is retained until you or the couple delete the memory, or until the account is deleted.

16. Contact

For any privacy-related questions, please reach out to us at hello@nupta.app.

Last updated: April 15, 2026