Privacy Policy
Last updated: August 20, 2026
Idylle, publisher of Idylle, is committed to protecting the privacy of its users in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and applicable privacy legislation.
Data Controller
Idylle
Email: IdylleApp1@gmail.com
For any inquiry regarding your personal data, please contact us at the address above.
Guest & Third-Party Data
When you enter details regarding your wedding guests (names, dietary restrictions, table assignments, RSVP responses, etc.),you act as the Data Controller for those individuals. Idylle acts as aData Processor hosting this information solely to deliver the Idylle service.
You agree to maintain a lawful basis for processing this information (consent, legitimate interest in organizing your event, etc.) and to inform your guests where required.
Data We Collect
- Account: email address, technical identifier, account creation timestamp.
- Wedding Profile: partner names, wedding date, estimated budget, onboarding status.
- Planning Data: tasks, guests, seating charts, vendors, day-of timeline, notes (written or dictated).
- Digital Vault: uploaded PNG and PDF documents (name, size, file type).
- AI Assistant: prompts submitted in the chat, daily usage counter (no sale to third parties, no targeted ads).
- Public Links: technical random tokens for public RSVP or timeline pages (never exposing your user ID).
- Technical: server logs for security and performance, authentication session cookies.
We do not deliberately collect sensitive personal data as defined under Article 9 of the GDPR, unless explicitly provided by you (e.g. food allergies recorded in guest profiles).
Purposes & Legal Bases
- Service Delivery (Contract Performance): account creation, data backup, PDF exports, digital vault, timeline sharing.
- Authentication (Contract Performance): login via Google OAuth or email and password.
- AI Assistant (Contract Performance): generating relevant planning guidance and schedule suggestions.
- Security & Fraud Prevention (Legitimate Interest): rate limiting, abuse detection, system integrity.
- Legal Obligations: maintaining records required by statutory law.
Subprocessors
We rely on trusted third-party infrastructure providers strictly as necessary to deliver the Service:
| Provider | Role | Location |
|---|---|---|
| Supabase | Authentication, database, file storage | European Union (Paris, France) |
| Vercel | Application hosting and technical telemetry | United States / Global Edge Network (Standard Contractual Clauses) |
| Groq | Processing AI assistant queries | United States (Data Processing Agreement with standard contractual clauses) |
| Sentry (if enabled) | Technical diagnostics and error tracking | United States / European Union depending on configuration |
Data transfers outside the European Economic Area are governed by standard contractual clauses approved by the European Commission.
Data Retention
- Account and Planning Content: retained for as long as your account remains active.
- Account Deletion: you can permanently delete your account and all associated data at any time from Settings.
- Data Export: you may download a full copy of your wedding data (GDPR PDF) prior to deletion.
- Technical Logs: stored for limited periods proportionate to security and audit needs.
Security Measures
We employ state-of-the-art security practices: encrypted transit (HTTPS/TLS), Row Level Security on the PostgreSQL database, isolated user file buckets, and strict server-side environment variables.
AI Assistant — Transparency
Messages sent to the AI assistant are processed by Groq. Relevant context (budget categories, guest counts) is assembled server-side strictly to answer your question. Vault document contents are never transmitted automatically.
AI-generated responses are automated and may contain inaccuracies. They do not constitute professional advice.
Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
- Right of access and data portability (PDF export in Settings).
- Right to rectification of inaccurate data.
- Right to erasure ("right to be forgotten") via account deletion.
- Right to restriction of processing and objection.
- Right to withdraw consent at any time.
To exercise your rights, please contact us at IdylleApp1@gmail.com.
Age Requirement
The Service is strictly intended for individuals aged 18 and older. We do not knowingly collect personal data from minors.
Policy Updates
This policy may be updated periodically to reflect service enhancements or regulatory adjustments. The effective date is stated at the top of this document.
Service URL: https://idylle.cloud