Plain-language policy

Privacy

Small private planning tools should collect little, reveal less, and forget on schedule.

What is stored

Phone numbers are used to verify one person, keep answers editable, and show that person their active plans. The site can also store a display name, availability answers, RSVP, party size, optional notes, potluck promises, and private recipes. Phone numbers are never shown to guests.

Imported contacts are a separate private admin address book. Only names, phone numbers, private group tags, and optional partner links are stored—never photos, addresses, birthdays, or contact notes from a device export.

Who can see it

Availability results are private by default. For an invite explicitly set to shared, verified guests see totals plus display names for yes/maybe/no; phone numbers and private notes remain admin-only. Verified event guests can see RSVP display names and potluck promises, never phone numbers or the private invite list.

Personal recipes are private to the verified phone that created them. Admin recipes are public only when the admin chooses Public.

How long it stays

  • Verification challenges expire in minutes and are pruned after expiry.
  • Guest sessions last up to 60 days; admin sessions last 12 hours.
  • Availability responses, RSVPs, and potluck promises are deleted 180 days after the poll or event ends.
  • Event audit entries are deleted after 90 days.
  • Imported contacts remain until the admin deletes them. Private recipes remain until their owner deletes them.

Infrastructure backups may retain encrypted copies for the database provider's backup window before aging out.

Your controls

You can edit or remove your own availability response from its link. From Your plans, you can permanently delete every response, RSVP, potluck promise, and private recipe tied to the verified number. This does not delete Nick's separate private address-book entry.

Deleting is immediate in the live application and cannot be undone.

Text messages

Verification sends a one-time security code. The site does not use that consent for marketing or automated event reminders. Standard carrier message rates may apply.