Settoo Privacy Policy

Effective date: 4 November 2026 · Version 1.0

Settoo LLC, a Delaware limited liability company ("Settoo," "we," "us"), provides tools to plan events and organise the details with other people. This policy explains what personal information we use, why we use it, who receives it and the choices you have.

Contact: info@settoo.app

At a glance

• We use information to provide your account, shared events, conversations and related features.
• Event content is shared with people who have access to that event. Invite links can be forwarded, so share them carefully.
• Your phone's address book is not uploaded for automatic account matching. Selected contacts are used on your device to help you send invitations.
• Payment amounts and statuses are records supplied by users. Settoo does not process card payments or verify that someone paid.
• We do not sell personal information, share it for cross-context behavioural advertising or use third-party targeted advertising in the current service.
• Optional product analytics use Google Analytics with advertising features disabled and a separate choice.
• You can contact info@settoo.app about your information, account deletion or privacy concerns.

1. What this policy covers

This policy covers the Settoo app and the Settoo-operated event-planning, invitation, account and support pages that link to it. Other people and services may have their own privacy practices—for example, when you open an external payment link or share an invitation through a messaging app.

Settoo is responsible for the processing described here. Event organisers and participants remain responsible for their own use of information they receive, including copies they download or share outside Settoo.

2. Information we collect

Information you and other people provide

An organiser or another participant may provide information involving you, even if you did not enter it yourself. For example, they may invite you or mention you in an event message or photo. Please do not put passwords, identity documents, payment-card details or other unnecessary sensitive information in shared content.

Information involved in using the service

We and our infrastructure providers process technical information needed to deliver, secure and troubleshoot the service. This can include network identifiers such as IP addresses, request and error records, timestamps, device/app information made available to those providers, push notification tokens and your device timezone. We do not use this information to build third-party advertising profiles.

Some preferences and selected-contact records are stored on your device. Others are stored with your account so they work across devices. Authentication uses secure session credentials; we do not receive the password to your email account.

Contacts, camera and photo permissions

If you choose to use phone contacts, we access the contacts you make available through your device's permission or selection controls. Selected names and phone numbers may be retained locally for that account/event so you can return to the invitation screen. The current feature does not upload your address book to our server or verify which phone numbers belong to Settoo accounts.

When you select or take a photo to upload, we receive the resulting image. We do not continuously access your camera or photo library. A location you enter for an event is event content; the current app does not continuously track your precise device location. Where address suggestions are available, typed search text and the selected place identifier are sent through our server to Google Places to provide that feature. Opening an external map is subject to the map provider’s own privacy practices.

You can change device permissions in phone settings. Revoking permission does not itself delete uploaded content, locally saved selections or copies already received by someone else. We cannot tell that an invitation was received or accepted merely because you used the native share screen.

3. Optional product analytics

If you choose to enable optional analytics, we use Google Analytics, including its Firebase implementation for mobile apps, to understand general feature use and reliability—for example, which screens open, whether a feature succeeds and technical information such as app version, device/platform and approximate region. Depending on the platform and configuration, Google uses app-instance identifiers, cookies or similar technologies to distinguish activity. Optional analytics remains off until you opt in. You can change your choice in Settings → Privacy; this stops future optional collection and does not by itself erase earlier records. You can contact us about deletion.

We do not enable Google Signals, advertising personalisation, advertising-audience exports or links to advertising accounts for this feature. We do not deliberately send names, emails, phone numbers, contact lists, chat text, event titles, payment links, photos or other user-entered content to analytics, and do not set an account-linked analytics User-ID. We use general event names rather than content-bearing screen URLs or parameters. Google still receives the permitted technical information and identifiers needed for analytics; calling them pseudonymous does not make them anonymous.

Our retention standard for optional analytics is two months for user/event-level data, with activity-based retention resets disabled. This setting does not automatically remove every aggregated report or data independently retained by Google under its applicable obligations. We do not enable raw-data warehouse exports for this launch. Our use of Google Analytics remains subject to appropriate consent, configuration, contractual and transfer arrangements. See Google’s explanation of how it uses information from apps and sites.

If the app offers a store-rating prompt, we keep limited records to avoid prompting too often and respect available opt-out controls. Apple and Google handle any rating you submit. Their in-app review APIs do not tell us whether you actually left a rating.

4. How and why we use information

We use personal information for the following purposes. Where a law requires a legal basis, we rely on the basis appropriate to that purpose and circumstances:

If consent is required, you can withdraw it for future processing through the relevant control or by contacting us. Withdrawing consent does not invalidate earlier lawful processing. Device permissions are not blanket consent to unrelated uses.

We may use genuinely anonymised, aggregated information to understand and improve reliability and usage. Analytics identifiers and event-level data are not treated as anonymous merely because they omit a name. We do not make decisions producing legal or similarly significant effects about you solely through automated processing in the current service.

5. What other users can see

Events and invitations

People with access to an event can see the shared details and content available to their role. Admins can manage membership and shared arrangements. Payment summaries and other participants' payment statuses are admin information; participants see their own payment information. Labels, reminder intervals and To-Do tasks are personal. Your personal tasks are not shared with event admins or other participants.

An event invitation page may show the event name before the recipient signs in. Anyone holding a working invitation link may be able to join using the available invitation flow. Do not assume a link identifies only the intended recipient or that sending it verifies their identity.

Profiles and discovery

If discovery is enabled, your profile may appear in searches by signed-in users. Profile details can also be visible through shared events. Turning off discovery does not remove information already shared with an event or prevent someone contacting you outside Settoo.

Shared copies

Private media access uses authorisation checks and temporary links. People who can view content can still download, screenshot or forward it. Expiring a link or deleting an account does not erase copies outside our control. Archiving an event does not remove membership or automatically stop its notifications.

6. When we disclose information

We disclose information only for the purposes described in this policy, including:

• To people you collaborate with, as explained above and when you choose to send an invitation.
• To operational providers, including Supabase for authentication, database and media storage; Render for server hosting; Expo and Apple/Google services for app and push-notification delivery; Resend for account emails; and Google Analytics/Firebase for optional product analytics when enabled. They receive information relevant to their functions. Providers may use subprocessors. App stores and independent external services may also process information under their own policies.
• For legal and safety reasons, when reasonably necessary to comply with applicable law or lawful process, investigate misuse, protect people or protect and enforce rights. We assess requests and limit disclosures as appropriate.
• In a business transaction, such as a merger, financing, reorganisation or sale, subject to appropriate confidentiality and applicable notice, protection and other legal requirements.
• At your direction or with appropriate consent, for another clearly explained purpose.

The current service does not sell personal information or share it for cross-context behavioural advertising. We do not provide an advertising-network opt-out tool for activity we do not perform. If we introduce materially different practices, we will update this policy and provide any required notice, consent or choice before doing so.

7. External payment and sharing services

Settoo stores an organiser's payment request and the status reported by a participant. We do not receive card credentials or transfer money through that feature. An external payment provider receives the information you give it and handles the transaction under its own terms and privacy policy.

Similarly, when you send an invitation through email, WhatsApp or another service, that service handles the information you choose to share. Review the destination and recipient before sending content or making a payment.

8. International processing

Settoo is a Delaware company and uses providers that may process information in the United States and other countries. Your information may be processed outside your country of residence, where privacy laws can differ.

Where applicable law restricts a transfer, we use a permitted mechanism, such as an applicable adequacy decision or approved contractual safeguards, together with supplementary measures when required. You can ask info@settoo.app for information about relevant safeguards or a copy where available, with necessary redactions. We do not rely on Delaware incorporation alone to determine which privacy protections apply.

9. How long we keep information

We retain information only as long as reasonably needed for the purposes described in this policy, taking into account its sensitivity, the service you request, security risks, shared-event needs and applicable legal requirements.

• Account and personal settings are generally kept while the account is active and needed to provide the service.
• Shared event records may be needed by remaining participants after someone leaves or closes an account. We assess deletion requests against the rights of others and applicable obligations; we do not retain identifiable information merely because it could be useful someday.
• Technical logs are kept for the limited period needed for security, diagnosis and operation, rather than as a permanent activity history.
• Support, abuse and legal records are kept for the time reasonably needed to handle the matter, prevent recurring misuse or meet applicable obligations.
• Backups expire through their retention cycle. Where immediate removal from a backup is not practical, retained information is protected, not used for ordinary service purposes and addressed appropriately if restored.

We may retain limited information where legally permitted and necessary to comply with law, resolve a dispute or establish, exercise or defend a claim. Removing a profile name does not necessarily anonymise identifying details written inside a message or image; those details need separate consideration.

10. Your controls, account deletion and privacy rights

You can edit available profile details, manage discovery and notification settings, choose personal reminders and leave events. Your phone settings also control notification, contact, camera and photo access. Some essential account messages, such as verification and password recovery, are necessary to provide the requested feature.

To delete your account, open Settings → Delete account in the app. You can also request deletion through our account-deletion page or contact info@settoo.app for deletion, information access, correction or other assistance. We may ask for proportionate information to verify your identity or authority. We will explain any lawful reason a request cannot be fully fulfilled. We will not request your account password. Leaving or archiving an event is not the same as deleting your account.

Our deletion process removes your profile, personal tasks, personal settings and uploaded photos, revokes account access and stops future account notifications. Shared events remain available to remaining members where appropriate. Retained shared messages/activity are detached from your profile and shown as “Deleted user”; we separately address identifying details in the content where necessary to fulfil the request. If you are the only admin, event administration must be transferred or the event deleted as part of the process. We will not indefinitely refuse account deletion merely because you are an admin. Lawful exceptions and backup handling are described above. Copies held independently by recipients may remain outside our control.

Depending on the law applicable to you, your rights may include access, a copy or portability, correction, deletion, restriction, objection, withdrawal of consent, appeal and complaint to a competent privacy regulator. Where permitted, you may appoint an authorised agent; we may need evidence of authority. We respond within the applicable legal deadline, explain permissible extensions and do not retaliate against you for exercising protected rights. Any lawful verification, exception or fee is assessed under the law that applies to the request—not a blanket limit on how often all users can ask.

Where relevant, residents of US states with applicable privacy rights may also request information about the categories, sources, purposes and recipients of their information. The categories and uses appear in this policy. We do not currently sell personal information, use it for targeted advertising or use sensitive personal information to infer characteristics about you. If you wish to appeal a request decision, reply to our response or contact info@settoo.app with "Privacy appeal" in the subject. This does not promise statutory rights in jurisdictions where they do not apply.

11. People under 16

Settoo accounts are for people aged 16 or older, subject to any higher applicable requirement. The service is not intended for children under 16, and creating an account below the permitted age is prohibited. If you believe someone below the permitted age has an account, contact info@settoo.app so we can investigate and take appropriate steps, including deletion where required.

People aged 16–17 must meet the eligibility requirements in our Terms, including parent or guardian agreement where required. An account-age limit does not authorise users to share children's photos or information without appropriate rights and permissions.

12. Security

We use technical and organisational measures intended to protect information, including account authentication, access controls and restricted media delivery. No system is completely secure, and we cannot guarantee that loss, misuse or unauthorised access will never occur. Keep credentials and invitation links secure. Shared event chat is not represented as end-to-end encrypted; authorised systems and personnel may process content as needed to operate the service and investigate safety reports. Contact us promptly about a suspected account or security issue. Where required, we will notify affected people or authorities about a breach.

13. Changes and contact

We will update the effective date when this policy changes and give additional notice where required, such as an in-app notice or email for material changes. Where a new purpose requires consent, publishing an update alone will not substitute for that consent.

Questions or requests: info@settoo.app.
Settoo LLC, Delaware, United States.