Privacy
Last updated: 9 October 2026
In short.
- Your wedding (guests, budget, to-dos, photos, ideas, schedule) stays in your iCloud, shared only with your partner. We have no access to it.
- Ouii has no account, no ads, no analytics, and sells nothing.
- Only online RSVP, if you turn it on, goes through our server, located in the European Union. You can erase it all from the app, and the server erases on its own whatever has been unused for 12 months.
- The Ouii Pro purchase goes through Apple and is verified by RevenueCat with an anonymous identifier.
Who is responsible
Ouii is published by Safa Shams, an independent developer in Switzerland. For any question about your data: safa.shams@hotmail.ch.
This policy follows the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union, the General Data Protection Regulation (GDPR).
What stays with you
Everything you write in Ouii is stored on your iPhone and in your iCloud (your Apple Account’s private database), and shared with your partner if you invite them. That includes guests and households (names, addresses, sides, meals, diets you noted), budget and vendors, to-dos, the photos and documents you add, ideas, and the schedule for the day.
This data is hosted by Apple under its own terms and privacy policy. We, the publisher of Ouii, have no access to it: it is not collected by us.
- Contacts: when you fill in a guest from Contacts, Ouii reads only the card you pick and keeps only what you confirm, in your wedding.
- Photos and files: only the ones you choose are copied into your wedding.
- Reminders: notifications are scheduled on the iPhone itself. Nothing goes through a server.
- Exports (addresses as CSV; diets, seating plan and schedule as PDF) are created on the iPhone and shared only where you send them.
Online RSVP (optional)
If you turn on online RSVP, each household gets a link such as ouii.shams-app.ch/r/… to reply themselves. For this to work, some data is copied to our server.
What the app sends to the server
- the first names of the couple (the page title, e.g. “Léa & Tom”) and the page language;
- the name of each household as you wrote it (e.g. “The Rossi family”: it may contain a surname);
- the first name of each person in the household, and whether they are a child;
- the moments each person is invited to (name, time, place) and the meals offered.
Never addresses, budget, to-dos, photos, or the diets you noted yourselves in the app.
What guests add when they reply
- for each person and each moment: attending or not; the chosen meal;
- a free “Allergies or diet” field (200 characters at most) — it may reveal health information, which the guest chooses to give;
- a message for the couple (500 characters at most);
- the date of the reply.
Who can see it
Each link opens only its own household: a guest never sees other guests or their replies. The couple fetches replies in the app with a key kept in their iCloud; the server keeps only a hash of it. Data is protected by strict access rules and only travels over HTTPS.
Where and for how long
The server is hosted by Supabase (Supabase Inc.), in a data centre in the European Union, acting as our processor. Data stays there:
- until you tap Guests → Online replies → Stop and erase everything from the server (replies already received stay in the app);
- deleting a household in the app also deletes its link and reply from the server;
- otherwise, the whole page, its households and replies are erased automatically after 12 months without activity (no sync from the couple, no reply from a guest).
Like any web server, the host may briefly keep the IP address and time of requests in technical logs, for security. The reply page uses no cookies and no third-party fonts or scripts.
Legal basis
For the couple: providing the service they asked for. For guests: the couple’s legitimate interest in receiving replies to their invitation and, for the “diet” field, the consent of the guest who chooses to fill it in. Couples who turn on online RSVP are asked to let their guests know that replies go through this service.
Buying Ouii Pro
Payment is handled by Apple (App Store): we never see your card details or your Apple Account. To verify the purchase and restore it on your devices, the app uses RevenueCat (RevenueCat Inc., United States), which receives:
- an anonymous identifier created by RevenueCat for the app (no name, no email);
- the purchase history (product, date, storefront country, App Store receipt);
- technical information (app and iOS version, language).
This data is used only to make the purchase work, never for advertising or tracking. RevenueCat processes it on our behalf; the transfer to the United States relies on legal safeguards (the Data Privacy Framework or standard contractual clauses). See its privacy policy.
This website
This website is hosted in Switzerland by Infomaniak. It uses no cookies and no analytics, and its fonts are served from the site itself. The host keeps technical logs (IP address, date, page requested) for a short period, for security.
What we don’t do
- No advertising, no ad SDKs.
- No tracking across apps or websites (in Apple’s sense).
- No analytics, no profiling.
- No selling or renting of data.
Your rights
You can ask to access your data, have it corrected or erased, object to processing, restrict it, or receive a copy. Write to us: safa.shams@hotmail.ch. We reply within 30 days.
Are you a guest? The simplest way is to ask the couple to change or delete your reply. You can also write to us with your link: it lets us find your household, and only yours.
You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or the data protection authority of your EU country.
Children
Ouii is meant for couples planning their wedding. First names of invited children may appear, entered by the couple, and follow the same rules as adults’.
Changes
If this policy changes, the new version is published here with its date. If the change affects what we receive, the app will tell you.
← Back to home