Privacy policy

Last updated 6 November 2026

Mangal Invites (“we”, “us”) is a wedding invitation app from Surat, Gujarat, India. Couples (“hosts”) use our Android app to make a digital invitation and share its link, and guests open that link on mangalinvites.in to view the card and reply (RSVP). This policy explains what we collect, why, and the choices you have. We’ve written it with India’s Digital Personal Data Protection Act, 2023 in mind.

What we collect

If you are a host (you use the app):

• Your login: the mobile number or email address you log in with (we send a one-time code to it), or, if you choose Google, the name and email address of your Google account. We never see your Google password.
• Your name, if you add it to your profile.
• Invitation details you type in: names of the couple and family, event dates and times, venue, messages and blessings.
• A photo, only if you choose to add one to your card. The app removes location and camera details (EXIF) before upload.
• Your own card, if you upload it (“Upload your own card”): the photos you pick, or the pages of the PDF you pick. A PDF is turned into pictures on your phone, and only those pictures are uploaded, never the PDF file itself. Photos are resized and their location and camera details removed before upload. We also record that you confirmed you have the right to share the card.
• Unsaved changes stay only on your phone until you tap Save or Publish. Logging out removes them from the phone.
• A notification token for your device, so we can tell you when a guest replies.
• Purchase records: what you bought, when, its Google Play order number and purchase token (to confirm the payment and to handle refunds), and which invitation you used each card on. Payments are handled by Google Play; we never see your card or UPI details.

If you are a guest (you open an invitation link):

• When you RSVP: your name and whether you are coming, plus only what the host chooses to ask: how many people, your mobile number, your food preference (veg, Jain or non-veg), which functions you will attend, and a short message. The host can download this list (for example for the caterer).
• Your browser keeps a copy of your reply, and a random reply number, on your own device, so you can change your answer later. This is not a cookie and is never used to track you.
• To stop spam, we briefly keep a scrambled (hashed) form of your connection’s IP address. It cannot be turned back into the address and is deleted within a day.
• If you report a card: the reason you pick, the note you write (if any), and a scrambled (hashed) form of your IP address, so we can spot one person sending many reports. We never store the address itself, and we never show your report to the host.

We do not use advertising, analytics trackers or cookies on the website, and we do not read your contacts, location or messages.

How we use it

• To log you in and keep your invitations in your account.
• To show your invitation to the guests you send the link to.
• To show hosts the replies to their own invitations, and to notify them of new replies.
• To send you service messages (login codes, reply alerts), and occasional app news or offers as notifications you can turn off.
• To prevent abuse and keep the service secure.
• To review uploaded cards: our team looks at every uploaded card within 24 hours of it going live (and again when its pages change), and at every card a guest reports, and takes offline cards that break our Terms of use.
• To confirm payments with Google Play, give you the cards you bought, and take them back if a payment is refunded.
• To meet our legal duties, such as keeping records that Indian law requires (see “How long we keep it”).

We never sell your data, and we do not use it for advertising.

Who can see it

• A published invitation is visible to anyone who has its link, including the photo on it. Links are long and random so they cannot be guessed, but anyone you forward it to can open it. Drafts are visible only to you.
• Guest replies are visible only to the host of that invitation (and to us, to run the service).
• Our team can see published invitations (to review uploaded and reported cards), and account and purchase details when you ask for help or when we investigate abuse. Access is limited to the people who need it, and every action in our admin panel is logged.
• Service providers that run parts of Mangal Invites for us, only as needed to provide it:
  • Supabase: database, login and photo storage (servers in Singapore)
  • Google Firebase: website hosting (Singapore) and push notifications
  • Meta (WhatsApp): delivering your login code to your number
  • Spacemail (Spaceship): sending login codes by email
  • Google: “Continue with Google” login, only if you use it
  • Google Play: payments for paid features
• Authorities, if Indian law requires it.

Because these providers are outside India, your data may be stored and processed in Singapore and other countries, as Indian law allows.

How long we keep it

• Your account and invitations: until you archive or delete them, or delete your account.
• Uploaded photos and card pages: until you delete your account, or sooner if you ask us (see archived cards below).
• 60 days after the event date, an invitation link stops showing the venue, time and photo and becomes a thank-you note. Unpublish or archive the invitation to take its link down.
• Archived invitations: a card that has been published can’t be deleted, only archived. Archiving takes its link down for good and removes its details and guest replies from your account straight away. Its uploaded pages and photo are moved out of public view (their old links stop working). We keep a private copy of the card (not the replies) for 180 days, as India’s IT Rules 2021 require for investigations, and then delete it with its files. Only our team can see that copy, and only to deal with a complaint or a lawful request. A card that was never published can be deleted straight away.
• When you delete your account: everything is deleted at once, except, for 180 days (IT Rules 2021), the details you signed up with (mobile number or email, name, sign-up date) and a private copy of each card you had published, with its files and any reports about it, held the same way as archived cards. Guest replies are not kept.
• Guest replies: until the host removes the reply, archives or deletes the invitation, or deletes their account.
• Reports about a card: as long as the card exists, so a pattern of complaints can be seen.
• Purchase records: 8 years, for Indian tax and accounting records, even if you delete your account (then they are no longer linked to you). Google Play also keeps its own record of your payment under Google’s privacy policy.
• Spam-protection records: deleted within a day.
• Database backups: kept for up to 90 days, then deleted. Data you delete leaves our backups within that time.

Your rights and choices

• See or correct your data: everything you entered is in the app. You can edit it there or email us.
• Delete your account in the app under Settings → Delete account, or see how to delete your account. This deletes your invitations, photos and all their guest replies, except what the law makes us keep for a time (see “How long we keep it”).
• Guests can ask the host to remove their reply, or email us with the invitation link and the name used.
• Notifications: turn them off any time in your phone’s settings.
• Withdraw consent at any time by deleting your account. You can also nominate someone to exercise these rights for you, as the DPDP Act allows.

Security

Data travels over encrypted connections (HTTPS). Your login session is stored in your phone’s secure storage. Each host can access only their own invitations and replies, which the database enforces. No system is perfectly secure, but if a breach ever affects your data, we will tell you and the authorities as the law requires.

Children

Mangal Invites is meant for adults (18+). We do not knowingly collect data from children.

Changes

If we change this policy, we will update the date at the top. Important changes will also be announced in the app.

Contact and grievances

For any privacy question, request or complaint, write to our Grievance Officer: Nagotha Pratapbhai Anandbhai, Mangal Invites, Surat, Gujarat, India, at hello@mangalinvites.in. We acknowledge every complaint within 24 hours and resolve it within 15 days. If you are not satisfied, you can complain to the Data Protection Board of India. To report a card that breaks the rules, use “Report this card” under it, or see our Terms of use.