Privacy Policy

1. Definitions

Host

A person who uses the App to create, publish or manage an invitation. Making drafts needs no account; publishing, buying a level, AI writing and sending a report from the App need one.

Guest

A person who opens a Page through its link. Guests have no account.

Invitation

Everything a host enters for one function or set of functions: names, hosts’ and parents’ lines, wording, event titles, dates, times, venues, addresses, map links, notes, photos, template, music choice and languages.

Page

The public web page generated from a published Invitation, reachable only by its link (a short address containing a random part).

Reply

A guest’s answer on a Page: name, yes / no / maybe, number of people and, where the host asked, which functions.

Level

A one-time purchase (Silver, Gold, Diamond or Platinum) made through Google Play that lets you publish one Invitation and unlocks the features of that level for it.

Personal Data

Any information relating to an identified or identifiable natural person. “Personal information” under the CCPA and “personal data” under the DPDP Act and GDPR are read the same way here.

Processing

Any operation on Personal Data: collecting, storing, using, displaying, transferring, deleting.

Data Fiduciary / Controller

The entity that decides why and how Personal Data is processed. For the Service this is AppskKuber, except as explained in Section 6 for the content of a host’s guest list.

2. Scope & Applicable Law

This Policy applies to the App, the Pages and our websites. It does not apply to Google Play, WhatsApp, Google Maps or any other service a link may take you to; those have their own policies.

We comply with the Digital Personal Data Protection Act, 2023 (India) and the rules under it; the General Data Protection Regulation (EU) 2016/679 for users in the European Economic Area; the UK GDPR and Data Protection Act 2018 for users in the United Kingdom; the California Consumer Privacy Act as amended by the CPRA for California residents; and the Children’s Online Privacy Protection Act (US) as explained in Section 20. Where these laws differ, we apply the standard that protects you more.

3. About AppskKuber and Welvite

AppskKuber is an independent software developer based in Rewa, Madhya Pradesh, India (full details in Section 23). Welvite is published on Google Play for Android. There is no iOS app and no web creator at this time.

The App is meant for adults (18 and over) who are organising a family function. It is not directed to children.

4. Information We Collect from Hosts

4.1 Account information

4.2 Invitation content

Everything you type into an Invitation and every photo you choose. Names and parents’ lines are Personal Data about you and the people on your card; venue addresses may be your home. You decide what to put on a card, and you are responsible for having the right to put other people’s names and photos on it.

Photos are picked through the Android photo picker, so the App never sees your gallery, only the images you select. They are resized and compressed on your phone (at most 1,600 pixels on the long side and about 400 KB) before upload. The App never reads your contacts, your location or your microphone.

Drafts are saved on your phone. Once you have signed in, they are also saved to your space in our database under your account identifier, so that they survive a reinstall and open on another phone. Nothing in a draft is visible to anyone but you until you publish.

4.3 Guest list

If you use personalised links, you type guest names (and optionally a group label) into a list. These names appear in the links you send and in the envelope on the Page. They are Personal Data about your guests, which you have chosen to share with them.

4.4 Replies received

Replies from your guests (Section 6) are stored under your Invitation and shown to you in the App, with per-event counts. From the Gold level up you can export them as a file; that file is created on your phone and is yours to handle lawfully.

4.5 Purchases

When you buy a level, Google Play processes the payment; we never see your card or UPI details. We receive and keep: the product bought, the Google purchase token and order number, the verification result and date, your account identifier and the Invitation the level was applied to. The App also sends Google Play a one-way hash of your account identifier (an “obfuscated account id”) so that a purchase can be matched to the buyer and not replayed on another account.

4.6 Technical information

• Device integrity. Every call from the App to our servers carries a Firebase App Check token produced by Google’s Play Integrity API. Google receives device and app integrity signals to produce it; we receive only the resulting token, which tells us the call came from an unmodified copy of the App.
• Notification token. If you allow notifications, a Firebase Cloud Messaging token for your device (Section 16).
• Server logs. Our Cloud Functions log the actions they perform (for example “invite published”, “AI rewrite failed”) with identifiers but without invitation text; these logs are kept for 30 days.
• Crash and usage data. Section 17.
• Local data on your phone. Drafts, your settings (language, theme) and compressed copies of your photos. They go with the App when you uninstall it.

5. What a Published Page Contains, and Who Can See It

Publishing turns your Invitation into a Page: an HTML document, a calendar file and a preview image (your cover photo with the names and date, shown by WhatsApp and other messengers when the link is shared). The Page shows every text field you filled in, your photos and the music you chose. At the Silver and Gold levels it also carries a small “Make your own invitation” link to our website.

Pages are served from Cloudflare’s network so they open quickly on slow connections. When you edit a published Invitation the same link shows the new content within a minute. You can take a Page down at any time from the App (the link then answers “this page has been removed”), and every Page expires on its own (Section 13).

6. Guests: What a Page Collects When You Open or Reply

If someone sent you a link to a Page, this section is for you. You do not need an account and the Page asks you for nothing unless you choose to reply.

6.1 Opening a Page

• Cloudflare, Inc., which serves the Page, receives the technical data any website receives when a browser connects: your network (IP) address, browser type and the address requested. Cloudflare processes it under its own privacy policy as our service provider; we do not receive or store it.
• We count how many times a Page was opened. The count is a number only, with no record of who opened it.
• If the host sent you a personalised link, your name as the host typed it is part of the link (after ?to=) so the envelope can greet you. It is shown on your screen and is not stored by us from the link.
• The Page sets no cookies and runs no analytics or advertising scripts. Fonts and music load from our own domain.

6.2 Replying

When you tap reply, the Page sends us:

Before a reply is accepted, Cloudflare Turnstile checks that it comes from a real browser and not a script. Turnstile is loaded only when you start to reply, and it processes browser signals under Cloudflare’s privacy policy; it does not show you puzzles or set tracking cookies.

6.3 Reporting a Page

The Report link at the bottom of every Page sends us the Page address, the reason you choose, any text you add and the same truncated hash of your network address (to limit repeat reports). We look at every report within 24 hours.

6.4 Who is responsible for your reply

The host decided to invite you and is the one who reads your reply; in the language of the DPDP Act and GDPR, the host is responsible for their guest list, and we process your reply on their behalf to deliver it and keep the Service safe. Your reply is deleted when the host deletes the Page and, at the latest, when the Page expires (Section 13). To have it removed earlier, ask the host or write to us (Contact, subject “Guest reply removal”).

6.5 If a Page asks you for money

A genuine Page never contains a payment button, a QR code, a form asking for an OTP or a password, or anything to download. The only outside links a Page can carry are a Google Maps link and a calendar file. If you see anything else, it is not a real invitation made with Welvite: close it and report it.

7. How We Use Information & Legal Bases

We do not use your data for advertising, profiling, automated decisions with legal effect, or any purpose not listed here.

8. AI Writing Feature

The App ships with a library of pre-written invitation texts in Hindi, Marathi and English in three tones. That library is not AI: it was written and checked by people. Optionally, under “Write it in my words”, you can type one line about what you want to say and receive two versions written by a large language model.

What is sent to the model: your line, the names on the card, the occasion and its title, the hosts’ line, the chosen tone and the language. What is never sent: dates, venues, addresses, phone numbers, map links, photos, guest lists or replies.

The model is Google’s Gemini, accessed through Google Cloud Vertex AI under Google Cloud’s data processing terms, which do not permit customer prompts to be used to train Google’s models. We do not store your prompts or the generated texts beyond counting how many tries you have used (before a level is bought: 1; Silver: 3; Gold: 5; Diamond and Platinum: 10 per invitation). A text you choose to use becomes part of your Invitation like anything else you type.

Generated text can be wrong or awkward; you see it before it goes on your card and can edit every word. Every result has a Report button, and we filter output for money, OTP, link and download words before showing it.

This feature is disclosed in the Google Play Data safety form as text sent to an AI provider.

9. Safety Screening of Text and Photos

When you publish, the text of your Invitation is checked by rules on our servers for the patterns of the “wedding invitation APK” scams: requests for money, UPI or OTP, links that are not Google Maps, download files and phone-number bait, plus a short list of explicit words. New photos are sent to Google Cloud Vision SafeSearch, which returns a rating for adult, violent and suggestive content and does not keep the image. If anything is flagged, the Invitation is not published, you are told in the App that it needs a human check within 24 hours, and we look at it. Photos that were already published are not screened again.

Reports from guests and hosts are read by a person. A Page that is a scam or breaks the content rules is taken down and the account blocked from publishing; the rules and your options are in the Terms.

10. No Advertising, No Advertising Identifier

The App shows no advertisements and contains no advertising SDK. It does not request or collect the Android Advertising ID; advertising-identifier collection and ad-personalisation signals are switched off in the App’s configuration. Pages carry no advertising and no third-party scripts. The small “Make your own invitation” link on Silver and Gold Pages leads to our website and sends nothing about the guest.

11. Levels & Payments

Levels are one-time purchases sold through Google Play Billing. Google LLC is the seller of record and processes your payment under the Google Privacy Policy and Google Play Terms of Service. We never receive your card number, UPI id or bank details. What we receive and keep is listed in Section 4.5. When Google refunds or voids a purchase, Google notifies us; the Invitation keeps any level it still holds, or its Page is taken offline and it returns to your drafts. There are no subscriptions and no auto-renewal.

12. Third-Party Services & SDKs

We have no advertising networks, data brokers, social-media SDKs or analytics vendors other than those listed. We add a provider to this table before it starts receiving data.

13. Data Retention, Page Expiry & Account Deletion

14. Data Sharing & Disclosure

We share Personal Data only:

• With the people you intend. A host’s Page is shown to whoever has the link; a guest’s Reply is shown to the host.
• With service providers listed in Section 12, who process data on our instructions to run the Service.
• When the law requires it: a valid order from a court or authority with jurisdiction, or to establish or defend legal claims. We tell the user concerned where the law allows.
• To protect people: to prevent fraud, scams or harm, for example by taking a Page down and preserving its record for a complaint.
• In a business transfer: if AppskKuber is acquired or merges, Personal Data moves with the Service under this Policy, and you will be told.

We do not sell Personal Data, and we do not “share” it for cross-context behavioural advertising in the meaning of the CCPA. We have not sold or shared Personal Data in the preceding 12 months.

15. International Data Transfers

Our database runs in Google Cloud’s Mumbai region (asia-south1). Photos and Page files are stored with Google Cloud and Cloudflare and served from Cloudflare’s worldwide network, so a copy of a Page may be cached in the country where a guest opens it. The AI writing and photo screening requests are processed by Google Cloud, which may use data centres outside India for them. For users in the EEA and UK, transfers to India and the US rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) that Google and Cloudflare incorporate in their data processing terms, with supplementary measures such as encryption in transit and at rest.

16. Push Notifications

After your first publish, the App asks whether you want to be told when a reply arrives. If you say yes, Android asks for the notification permission and we store a Firebase Cloud Messaging token for your device. Each notification contains the guest’s name and answer in your app language. You can turn notifications off in Android settings at any time; the token is deleted with your account. We send no marketing notifications.

17. Analytics & Crash Reports

In release builds of the App we collect, through Firebase Crashlytics, crash reports with the stack trace, device model, Android version, app version and a Crashlytics installation identifier that is not linked to your account. Through Firebase Analytics we count a handful of events to see whether the App works as a whole: invitation created (with occasion and language), invitation published (with tier and template), invitation shared (with the channel: WhatsApp, other app or copied link) and level purchased (with the product). Event parameters are categories only; no names, text, links or photos are ever sent. The Advertising ID is not collected (Section 10). Development builds send nothing.

Our websites and the Pages run no analytics at all.

18. Data Security

• All connections use HTTPS (TLS 1.2 or higher). Data at rest is encrypted by Google Cloud and Cloudflare.
• Database and storage rules allow a host to read and write only their own documents and files; guests’ browsers never talk to the database. Replies and reports travel through Cloudflare to our servers over requests signed with a shared secret.
• Every call from the App is attested by Firebase App Check (Play Integrity); server-side fields such as a Page’s status, tier and address can be changed only by our server code.
• Pages are served with a strict Content Security Policy that blocks any script not written by us, and they can contain no payment forms by design.
• Network addresses are stored only as truncated one-way hashes.
• Access to production systems is limited to the developer, protected by two-factor authentication.

No system is perfectly secure. If a breach affects your Personal Data we will notify you and the relevant authority as the applicable law requires (for Indian users, as the DPDP Act and its rules prescribe; for EEA/UK users, within 72 hours of becoming aware where required).

19. Your Rights & Choices

19.1 Everyone

• See and change your data: every field of an Invitation is editable in the App; your Replies are listed there.
• Delete: a draft (My invitations → menu → Delete draft), a Page (→ Take the page down; the invitation’s text stays in your account until you delete it) or everything (Settings → Delete account), without asking us.
• Notifications: allow or revoke in Android settings.
• AI feature: optional; it sends nothing unless you tap Write.
• Guests: ask the host or us to remove your reply (Section 6.4).

19.2 India (DPDP Act, 2023)

You have the right to access a summary of your Personal Data and of the processing, to correction and erasure, to grievance redressal through our Grievance Officer (Section 23), and to nominate a person to exercise your rights if you die or are incapacitated. Consent you have given may be withdrawn as easily as it was given: delete the data or the account in the App, or write to us.

19.3 EEA and UK (GDPR / UK GDPR)

You have the rights of access, rectification, erasure, restriction of processing, data portability (we provide your Invitations and Replies in a machine-readable format on request), objection to processing based on legitimate interests, withdrawal of consent, and the right to lodge a complaint with your supervisory authority (Section 23). We answer within one month, extendable by two months for complex requests, and we tell you if we extend.

19.4 California (CCPA / CPRA)

You have the right to know what personal information we collect, use and disclose (this Policy), to delete it, to correct it, to opt out of sale or sharing (we do none), to limit use of sensitive personal information (we collect none in the CPRA sense), and not to be discriminated against for exercising your rights. We do not use or disclose sensitive personal information for inferring characteristics. You may designate an authorised agent. We verify requests by matching the email address of your account; an account that signs in with a phone number only is verified by signing in with that number in the App (we never act on a number alone).

19.5 How to exercise rights

Email support@welvite.com with the subject Privacy Rights Request from the email address on your account. If your account signs in with a phone number only, include that number: we will ask you to confirm while signed in with it in the App, and most rights (seeing, correcting and deleting your data) you can exercise there directly. Requests are free; we may decline manifestly unfounded or repetitive ones, and tell you why.

20. Children’s Privacy

The App is for adults aged 18 and over and is not directed to children. We do not knowingly collect Personal Data from anyone under 18 (under 13 for the purposes of COPPA). Birthdays of children are frequently the subject of an invitation; the host, an adult, decides what to put on the card and is responsible for it. If we learn that a child has created an account, we delete it. A parent or guardian who believes a child has given us Personal Data can write to the Grievance Officer (Section 23).

21. Do Not Track Signals

Pages and our websites do not track visitors across sites, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We treat such signals as a confirmation of what we already do.

22. Changes to This Policy

We update this Policy when the Service changes, for example when a new provider is added (Section 12). The Effective Date and Version at the top change with every revision, and material changes are announced inside the App before they take effect. Earlier versions are available on request.

23. Contact & Grievance Officer

This Privacy Policy is the entire statement between you and AppskKuber regarding the privacy of your Personal Data in the Welvite Service and supersedes any earlier privacy notice issued for it.