Privacy Policy

Last updated: April 2026

This Privacy Policy explains how InZmin by PlayGround ("we", "us") collects, uses, stores, and protects your information when you use the InZmin mobile application ("App").

1. Information We Collect

1.1 Information You Provide

  • Account information: name, email, password (or OAuth provider data)
  • Organizer profile: company name, phone number
  • Event data: event name, description, date, location, venue address, category, capacity
  • Guest data: names, emails, phone numbers, company, designation (entered by organizer)
  • Photos: event covers, album uploads, gift photos, story photos
  • Comments: text comments on photos
  • Gift/wishlist items: name, description, category, cost, quantity, photos
  • RSVP responses and messages

1.2 Information Collected Automatically

  • Device push notification token (for sending notifications)
  • Device platform (iOS/Android)
  • App version (for update checking)

1.3 Information Collected With Permission

  • Camera: only when you take photos (not accessed in background)
  • Photo library: only when you select photos
  • Contacts: only when you import guests from your address book
  • Location: only when you use the map picker or take a photo (foreground only, never background)
  • Push notifications: only when you enable them
  • NFC: only when scanning NFC tags for check-in

2. How We Use Your Information

  • To create and manage your account
  • To enable event creation, guest management, and invitations
  • To display photos in event albums
  • To send push notifications about RSVPs, check-ins, and event reminders
  • To enable gift/wishlist claiming between organizers and guests
  • To generate QR codes for guest check-in
  • To reverse-geocode photo locations (converting GPS to readable addresses)
  • To check for app updates and maintenance status

3. How We Share Your Information

We do not sell your personal information. Your data is shared only in these contexts:

  • Event participants: Guests can see event details, photos, and organizer info for events they join. Organizers can see guest names, RSVP status, and check-in status.
  • Co-organizers: Have the same access as the event creator (except deletion).
  • Service providers: We use Supabase (database/auth), Cloudinary (image hosting), and Expo (push notifications) to operate the App. These providers process data on our behalf.
  • WhatsApp: When you send invitations, the message is composed on your device and sent through WhatsApp. We do not have access to your WhatsApp contacts or messages.

4. Data Storage & Security

Your data is stored in Supabase (cloud database with PostgreSQL) with Row Level Security (RLS) policies ensuring users can only access data they are authorized to see.

Photos are stored on Cloudinary CDN with secure URLs. Authentication passwords are hashed by Supabase Auth — we never store or see plain-text passwords. Device session tokens are stored locally in encrypted AsyncStorage. We use HTTPS for all network communication.

5. Data Retention

  • Account data: retained until you delete your account
  • Event data: retained as long as the event exists. Archived events retain data.
  • Photos: retained until deleted by the uploader or event organizer
  • Stories/Moments: automatically expire after 24 hours
  • Push tokens: removed on sign-out or account deletion
  • Comments: retained until deleted by the commenter or organizer
  • Gift claims: retained as long as the event exists

6. Your Rights

You have the right to:

  • Access your data (visible in your profile and events)
  • Edit your profile information at any time
  • Delete photos you uploaded
  • Change your RSVP status at any time
  • Delete your account (from Profile > Account > Delete Account)
  • Withdraw notification consent (from device settings or Profile > Preferences)

7. Children's Privacy

InZmin is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us at info@swordanvil.com.

8. Location Data

Location data is collected only when you explicitly use the map picker to set an event or gift location, or take a photo from the capture screen. Location is never collected in the background. You can deny location permission and still use all core features of the App.

9. Contact Imports

When you import contacts as guests, we read contact names, emails, and phone numbers from your device address book. This data is used solely to create guest records for your event. We do not store your full contact list — only the contacts you explicitly select.

10. Third-Party Services

  • Supabase (supabase.com): Database, authentication, storage
  • Cloudinary (cloudinary.com): Image hosting and CDN
  • Expo (expo.dev): Push notification delivery
  • Google Maps / Apple Maps: Map display for location picker

Each service has its own privacy policy governing how they handle data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App.

12. Contact Us

For privacy questions, data requests, or concerns:
Email: info@swordanvil.com