Privacy Policy for Quickvites

Effective Date: May 22, 2026

Quickvites ("we", "our", or "us") is operated from Honduras. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have when you use the Quickvites mobile application and any related services (the "Service").

By using Quickvites, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect information in three ways: information you provide directly, information generated by your use of the Service, and information collected automatically.

1.1 Information You Provide

• Account information: first name, last name, username, email address, and password (stored in hashed form, never in plaintext).
• Optional profile information you choose to add to your account.

1.2 User-Generated Content

• Event details you create, including event title, description, location, date and time, and any guest list or invitation information you provide.
• Friend connections (your list of friends, pending requests, and sent requests).
• A personal QR code (a unique identifier that other users can scan to send you a friend request).

1.3 Information Collected Automatically

• Device information: device model, operating system, language, time zone, and app version.
• IP address (collected by our backend and by our advertising provider for fraud prevention, basic analytics, and geographic ad targeting).
• Push notification tokens, issued by Firebase Cloud Messaging on Android and Expo Push Service on iOS, so we can send you notifications about friend requests, invitations, and events.
• Advertising identifiers (IDFA on iOS, GAID on Android), used by Google AdMob to serve and measure ads. On iOS, we collect IDFA only if you grant permission through Apple's App Tracking Transparency prompt.

1.4 Camera Access

We request access to your device's camera solely so you can scan QR codes — to send a friend request to another user, to validate event entry as a host, or to join an event. We do not capture, store, or transmit camera images or video. Your camera feed is processed in real time on your device and discarded.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Allow you to create, send, receive, and manage event invitations
• Allow you to send and accept friend requests via QR codes
• Allow event hosts to validate guest entry via QR codes
• Deliver push notifications about friend requests, invitations, and events
• Authenticate you and keep your session secure
• Serve advertisements through Google AdMob (see Section 5)
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with applicable law
• Maintain and improve the Service

3. Information Visible to Other Users

Quickvites is a social service. Some information is necessarily visible to other users so the Service can function:

• Your name and username are visible to your friends, to users you invite to events, and to event hosts who invite you.
• Your profile picture (if you provide one) is visible in the same contexts.
• Event details you create are visible to invitees of that event.
• Your personal QR code can be scanned by anyone you choose to show it to, which allows them to send you a friend request.

Other users cannot see your email address, password, push notification token, or advertising identifiers.

4. Third-Party Service Providers

We do not sell your personal information. We share information only with the service providers listed below, and only to the extent necessary for them to provide their services to us.

Each provider is bound by its own privacy policy and security obligations. We do not permit any provider to use your data for purposes other than providing services to us, except for AdMob as described in Section 5.

5. Advertising and Tracking

We use Google AdMob to serve banner ads, interstitial ads, and app open ads within Quickvites. AdMob is a third-party advertising network operated by Google LLC.

5.1 What AdMob Collects

When you see an ad, AdMob may collect:

• Your advertising identifier (IDFA on iOS, GAID on Android)
• IP address (used to infer approximate location for ad targeting)
• Device type and operating system
• App interaction data (which ads you saw, clicked, or interacted with)

5.2 Personalized vs. Non-Personalized Ads

Where permitted, AdMob may use this data to deliver personalized advertising, which Apple defines as "tracking."

On iOS, we will only request to track you if you grant permission through Apple's App Tracking Transparency prompt. If you decline, we instruct AdMob to serve non-personalized ads only.

5.3 How to Opt Out

• On iOS: Settings → Privacy & Security → Tracking. Disable "Allow Apps to Request to Track" or revoke permission for Quickvites individually.
• On Android: Settings → Google → Ads. Tap "Delete advertising ID" or "Opt out of Ads Personalization."

5.4 Google's Privacy Policies

Google's handling of advertising data is described in:

• Google Privacy Policy: https://policies.google.com/privacy
• How Google uses information from sites or apps that use our services: https://policies.google.com/technologies/partner-sites

6. Data Storage and Security

We implement reasonable security measures to protect your information, including:

• All client–server communication encrypted via HTTPS / TLS
• Passwords stored hashed (not in plaintext)
• Authentication tokens stored on your device using platform-native secure storage (Expo SecureStore, iOS Keychain, Android Keystore)
• Database access controls and backend authentication

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

• Account data (name, email, hashed password) is retained for the life of your account.
• Event and invitation data is retained for the life of your account or until you delete the event.
• Server logs and security records are retained for up to 90 days.
• Backups containing deleted data are purged within 90 days of deletion.
• When you delete your account (see Section 10), we permanently delete or anonymize your personal information within 30 days, except where we are legally required to retain it longer.

8. Children's Privacy

Quickvites is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or create an account.

For users in the European Economic Area, the United Kingdom, and Switzerland, the minimum age is 16 unless local law in your country provides otherwise.

If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us at support@quickvites.com. We will delete such information promptly.

9. Your Rights

You have the following rights regarding your personal information.

9.1 Universal Rights

You can access, correct, or delete your account information at any time from within the app (Settings → Account) or by emailing support@quickvites.com.

9.2 European Economic Area, UK, Switzerland (GDPR / UK GDPR)

If you are located in these regions, you also have the right to:

• Receive your data in a portable, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time (for processing based on consent)
• Lodge a complaint with your local data protection authority

The legal bases for our processing are:

• Performance of a contract (account features, sending and receiving invitations, friend connections)
• Consent (advertising tracking on iOS, push notifications)
• Legitimate interest (security, fraud prevention, improving the Service)
• Legal obligation (where required by law)

9.3 California Residents (CCPA / CPRA)

You have the right to:

• Know what personal information we have collected about you
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense. However, our use of Google AdMob to serve personalized ads may qualify as "sharing" under California law. Declining the iOS App Tracking Transparency prompt effectively opts you out of this sharing.
• Non-discrimination for exercising your rights

To exercise any right, email support@quickvites.com.

10. How to Delete Your Account and Data

You can delete your Quickvites account at any time:

• Open the Quickvites app
• Go to Settings → Account → Delete Account
• Confirm the deletion

Alternatively, email support@quickvites.com from the address associated with your account and request deletion.

When you delete your account, we permanently delete:

• Your name, email, username, and password
• All events you have created
• Your friends list, friend requests, and invitations
• Your profile picture (if any)
• Your authentication tokens

Deletion is completed within 30 days. Anonymous, non-identifying data (for example, aggregate ad performance) may be retained.

11. International Data Transfers

Quickvites is operated from Honduras, but our service providers (Render, Google, Expo) are located primarily in the United States. By using Quickvites, you understand and consent to your information being transferred to and processed in the United States and other countries that may not provide the same level of data protection as your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. If the changes are material, we will provide additional notice through the app or by email.

13. Governing Law

This Privacy Policy is governed by the laws of the Republic of Honduras, without regard to its conflict of laws principles.

14. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

support@quickvites.com