Privacy Policy

Service: Mommy's Little Party Planner Business: Protocol Media LLC Effective: September 14, 2026 Last updated: October 7, 2026 Contact: support@mommyslittlepartyplanner.com

This Privacy Policy explains how Protocol Media LLC ("Protocol Media," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you use the Mommy's Little Party Planner mobile app, websites, public guest pages, support channels, and related services (the "Service").

Host accounts, party-management tools, and purchases are offered to residents in the United States, the District of Columbia, or Puerto Rico. Invited guests may use shared guest links from other locations where lawful.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Our optional first-party product analytics are off unless the account holder turns them on. The public website may use the cookie-free, anonymized website analytics described below.

1. Information we collect

Depending on how you use the Service, we collect:

• Account and legal acceptance information: email address, optional display name, password hash or social sign-in identifier, session records, language, service-territory confirmation, and records showing when you accepted the Terms and Privacy Policy. New account setup does not ask for your age or date of birth. Historical records and older app versions may retain an adult self-attestation or a previously selected U.S. or Puerto Rico market; a missing age attestation does not identify someone as a child.
• Google sign-in: Google handles account and technical information when you use its sign-in service in the native iOS app, including your IP address, which Google may use to estimate a general area for fraud prevention. Google's sign-in component also declares collection of device identifiers and usage information for analytics. Our optional in-app analytics setting controls our own product analytics; it does not turn off Google's sign-in data processing. The app does not request GPS or device-location permission. Google's Privacy Policy is available at https://policies.google.com/privacy.
• Party planning information: child first name or nickname, age, party date and time, theme, venue name and physical street address, budgets, checklists, itineraries, shopping lists, wishlists, invitation text, notes, and thank-you content. A venue address may be a home, business, or other event location entered or selected by the host; the app does not require the device's location.
• Guest and contact information: guest and parent names, child and sibling first names, email addresses, phone numbers, RSVP status, headcounts, ages, gift information, notes, and other information a host, co-host, or guest chooses to provide.
• Consumer health data: allergy and dietary information voluntarily entered for party planning. Our separate Consumer Health Data Privacy Notice describes this data and the related rights and choices.
• Contacts you choose to import: before a device-contact flow begins, the app explains what will be uploaded and asks for affirmative consent. On iOS, Apple's system picker lets you choose one contact at a time without giving the app general access to the address book. On Android, the device may ask for contacts permission so you can browse locally. When you add a chosen contact to a guest list, the contact's name, one phone number, and one email address, when available, are uploaded to our servers and saved with the party. We use those fields to manage the guest list, sync it across the host's devices, reuse guest details in Family Circle, support invitations and RSVPs, and make the party available to authorized co-hosts. We do not upload unselected contacts or the full address book, and we do not write changes back to device contacts. In the date-poll contact flow, only the chosen name is uploaded if the host creates the poll; the phone number remains on the device for an individual Messages handoff and the email address is not sent. If the host later converts poll participants into party guests, the app separately discloses that their saved names and phone numbers will be uploaded for the guest-list purposes above and asks for affirmative consent before doing so.
• Photos and uploaded files: party-album photos, guest-contributed photos, Highlight Reel media, invitation photos or rendered invitation images, private thank-you memory photos, and related media that a host or guest chooses to upload. Media selected for a cloud party, invitation, album, reel, or thank-you memory is uploaded through a signed upload flow to our configured cloud object storage, such as Supabase Storage, and associated metadata is stored on our servers. A guest-contributed album photo remains in a private host-review queue and is not added to the shared party album unless the host approves it. Depending on the feature, approved or host-provided media can then be shown to the host, authorized co-hosts, and intended guests who use the applicable private shared link. An invitation card or thank-you image that you choose only to save or export is written to the device destination you select; saving it locally does not by itself upload that exported copy.
• Purchases and entitlements: product, subscription, Party Pass, transaction status, and entitlement information from the purchase store and RevenueCat. Purchases offered in the iOS app use Apple's App Store; purchases offered in the Android app use Google Play. RevenueCat helps verify those purchases and entitlements. We do not currently offer web checkout or accept new purchases through Stripe, and we do not receive full payment-card numbers.
• Optional address searches: venue or physical-address text typed into address autocomplete is sent to Geoapify or the configured map provider to return suggestions. A selected or manually entered venue address is saved with the party on our servers and may be displayed to authorized co-hosts and intended guests through the party's invitation or other shared feature. Precise device location is not required or collected for this feature.
• Support and communications: email address, message contents, attachments provided to support, and an optional account-bound record when you join the vendor-directory launch email list.
• Notifications: if you enable app notifications, we register an installation identifier and push token with your account to deliver your chosen reminders and updates through Expo's push service. On Android, Firebase Cloud Messaging also processes Firebase installation identifiers and technical information, such as app version and device information, for notification delivery. Its installation data processing is separate from our optional first-party analytics setting. You can turn app notifications off in the app or device settings.
• Security and technical data: IP address, request time, route, user agent, app version, device type, locale, time zone, authentication status, logs, errors, and security events. For guest-photo abuse prevention, the installed app also creates a random identifier kept in protected app storage. It is not derived from hardware, an Apple or Google account, contacts, or photo metadata. We associate it only with guest-photo submissions and party-specific uploader blocks.
• Public website analytics: when enabled, Vercel Web Analytics records anonymized page views, referring pages, approximate geography, browser, operating system, and device category without using cookies. We do not send party content, guest details, contact information, allergies, photos, or message text to website analytics.
• Optional first-party analytics: if the account holder opts in, a first-party random identifier and product-interaction events such as screens or features used. We instruct the app not to include party content, names, contacts, addresses, allergies, photos, or message text in analytics.

We collect information from account holders, guests, co-hosts, the devices they use, service providers involved in transactions or sign-in, and automatically from requests made to the Service.

2. How we use information

We use information to:

• create and secure accounts;
• provide party planning, syncing, invitations, RSVP, reminders, wishlists, photo, co-hosting, and related features;
• save the name, one phone number, and one email address from contacts a host affirmatively chooses for a guest list, so those guest details can sync across the host's devices, support invitations and RSVPs, be reused in Family Circle, and be available to authorized co-hosts managing the same party;
• store and deliver photos and invitation media that a host or guest affirmatively chooses to upload;
• display information to the host, authorized co-hosts, or guests as required by the feature they use;
• process and restore purchases and entitlements;
• provide optional address suggestions and deterministic planning suggestions;
• send transactional emails or reminders requested or scheduled by a host;
• send the one-time vendor-directory launch email when an account holder explicitly joins that list;
• answer support and privacy requests;
• place guest photos into host review before album sharing; support host approval, rejection, party-specific uploader blocking, and exact-photo safety reports;
• detect fraud, spam, abuse, security incidents, and service failures;
• maintain, debug, and improve the Service; and
• comply with law and enforce our Terms.

We do not use consumer health data for advertising, profiling, data brokerage, or unrelated product development.

3. Public and shared links

Hosts can create RSVP, wishlist, photo-upload, poll, private Highlight Reel, and shared-plan links. These links are designed to be difficult to guess, but anyone who receives or is forwarded a link may be able to access the information displayed through it. Hosts are responsible for sharing links only with intended recipients.

Invitation link previews use a generic title and may show the party date. When a shared invitation has eligible invitation artwork, the preview can show that artwork, including any names, ages, addresses, photos, or other details placed on the card. If no invitation artwork is available, the preview uses our cupcake app icon. Messaging and other services that generate link previews may fetch and cache the image. Share an invitation only with people you intend to receive those details; changing or deleting it does not recall copies or previews that recipients or other services have already saved.

Invitation wording you save is stored with the party and reused for its invitations, with each guest's own name and RSVP link. You review and choose when to send messages through your device's messaging composer. Changing shared wording does not rewrite messages you have already sent.

When you change a party's date, time, or place, the app updates existing shared invitation details and refreshes eligible editable invitation artwork that is already backed up. This uses the party information and invitation storage described above. It does not automatically send a new text message. Published invite links expire after the party date plus approximately 30 days. Deleting the associated party invalidates its shared links sooner.

4. How we disclose information

We disclose information only as needed to provide the Service, complete a transaction, follow a user's instruction, comply with law, or protect rights and safety.

Recipients may include:

• hosts and authorized co-hosts managing the same party;
• guests using a shared party feature;
• Vercel and other hosting or security providers;
• Supabase and cloud database or object-storage providers;
• Resend and other transactional email providers;
• Apple or Google Play, as applicable, and RevenueCat for app-store purchases and entitlements;
• Expo and Google's Firebase Cloud Messaging for push-notification delivery;
• Google or Apple for social sign-in;
• Geoapify or the configured address-search provider;
• professional advisers, regulators, courts, law enforcement, or other parties when legally required or reasonably necessary to protect the Service, users, or others; and
• a successor involved in a merger, financing, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law.

We do not sell personal information or consumer health data. We do not share personal information for cross-context behavioral advertising.

5. Retention

We retain information only for as long as reasonably necessary for the purposes described above:

• Account information is retained while the account is active and removed when the account is deleted, subject to limited legal and transaction-integrity records.
• Selected contact fields are retained as part of the party and related Family Circle information while the relevant records remain active. Removing a guest from one party removes that guest from that party after synchronization, but does not remove the same person's information from another party where it was separately saved. Hiding someone from Family Circle does not erase that person's details from past parties. A host can edit or delete the relevant party records, delete the account, or contact us to request deletion of eligible contact information.
• Active party records are retained while needed by the account holder. When a party is deleted, its substantive planning content is scrubbed from the active server record immediately; a minimal deletion tombstone may remain for up to 30 days so other devices and co-hosts can process the deletion.
• Published invite data, guest RSVPs, allergy information, wishlist claims, and related public-link records expire and are deleted after the party date plus approximately 30 days, unless the associated party is deleted sooner.
• Optional first-party analytics events are retained for up to 90 days.
• Sessions expire after approximately 60 days. Password-reset codes expire after 30 minutes.
• Completed, cancelled, failed, or skipped reminder job records are generally removed after 30 days.
• Managed uploaded files are deleted when the associated party, invite, or account is deleted. If immediate storage cleanup fails, access is revoked and deletion is retried.
• Pending guest-photo submission records and party-specific blocked-uploader identifiers are retained with the published party link and are deleted when that link expires or the associated party is deleted. The random identifier in protected app storage is a non-account abuse-prevention control: logout, account switching, and account deletion do not clear it, because clearing it would let a blocked uploader resume by changing accounts. It is not used to reconstruct a deleted account.
• Limited purchase, tax, accounting, fraud-prevention, security, dispute, and transaction-integrity records may be retained for the period reasonably required by law or legitimate business need.

Backups may take additional time to cycle out, but deleted information is not restored to active use except when necessary for disaster recovery, security, or legal compliance.

6. Your choices and privacy rights

All users may request access, correction, deletion, or a portable copy of eligible personal information by emailing support@mommyslittlepartyplanner.com. You may also:

• edit or delete party and guest information in the app;
• delete an account from the Account screen;
• decline the in-app contact-upload consent and add guests manually instead;
• join or leave the vendor-directory launch email list from the Vendors screen;
• change contacts, camera, and photo permissions in device settings;
• turn our optional first-party analytics on or off from the Account screen;
• delete a party to invalidate its guest links;
• as a host, approve or reject each pending guest photo, block further submissions from that app installation for that party, remove an approved photo, or report an exact photo to support;
• withdraw consent for future collection or sharing of consumer health data and request deletion of that data; and
• manage a subscription through the store where you purchased it, Apple or Google Play.

State law may provide additional rights. See our Privacy Choices page and Consumer Health Data Privacy Notice. We will not discriminate against you for exercising a privacy right. We may need to verify your identity and authority before completing a request. If we deny a request, you may appeal by replying to our decision with the subject "Privacy Appeal."

7. Children and child-related information

The Service is a planning tool for parents, guardians, caregivers, and party hosts. It is not directed to children under 13 or designed for children to use independently. Host accounts do not have a blanket minimum age. A parent or guardian should enter and submit information about a child on private guest pages. A child's name, birthday, or age describes the celebration and does not create a child account.

Parents, guardians, and hosts may provide child-related party information. The person providing that information represents that they have authority to do so and is responsible for choosing what to share. We do not knowingly collect personal information directly from children under 13 without legally required parental consent. If we learn that this has happened, we will delete that information. Contact support@mommyslittlepartyplanner.com if you believe a child submitted personal information in this way. Ordinary agreement to the Terms is not a claim of verified parental consent.

8. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information we process, including encrypted network transport, salted password hashes, access controls, rate limits, expiring sessions and links, and restricted server-side database access. No system is perfectly secure, and we cannot guarantee absolute security.

9. U.S. processing and service territory

Protocol Media LLC is based in South Carolina. Information is processed in the United States and in other locations where our service providers operate. Host accounts, party-management tools, and purchases are currently offered only to residents of the United States, the District of Columbia, and Puerto Rico. Invited guests may use shared guest links from other locations where lawful.

10. Changes

We may update this Policy to reflect changes to the Service, our practices, or legal requirements. We will update the date above and provide additional notice when appropriate. If a change requires renewed consent, the app will ask for it before continued account use.

11. Contact

Email privacy questions, requests, or appeals to support@mommyslittlepartyplanner.com. Include the email associated with the account or enough information for us to identify the relevant guest submission. Do not send passwords or full payment-card numbers.