Privacy Policy

Last Updated: October 2026

Introduction

Welcome to MyPink Party ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Information You Provide

When you create an account, we collect your name, email address, and password. If you choose to sign in using social login providers (Google, Facebook, or Apple), we receive basic profile information from these services, including your name and email address. If you connect your Google Calendar, we access your calendar event data (event titles, dates, times, and calendar list) to display your availability and help you avoid scheduling conflicts. If you connect your WhatsApp Business Account, we store your Business Account phone number, business name, and connection credentials. We also store message history (sent and received) and customer consent records.

Information Collected Automatically

We may collect information about your device and usage patterns, including IP address, browser type, pages visited, and interaction data. With your consent, we use PostHog to collect anonymous product analytics (page views, feature usage, session recordings with all text and inputs masked) and Sentry to collect error reports and performance metrics.

How We Use Your Information

We use your information to:

Provide, maintain, and improve our services
Process transactions and send related information
Send you technical notices and support messages
Respond to your comments and questions
Protect against fraudulent or illegal activity
Analyze anonymous usage patterns to improve app features and user experience
Detect and fix application errors and performance issues
Display external calendar events to help you avoid scheduling conflicts
Send WhatsApp messages to your customers on your behalf via Meta's WhatsApp Cloud API

Third-Party Services

Our service integrates with the following third-party services for authentication, data storage, AI-assisted features, analytics, and error tracking. Analytics and error tracking help us continuously improve the app for you:

Amazon Web Services

Amazon Web Services (AWS): We host your data on AWS servers in the European Union (Frankfurt). Some features send your content to AWS for processing: scanned questionnaires, invoices, and product catalogs are analyzed by AWS AI services (Amazon Bedrock, Amazon Textract) to extract data. This content may contain personal data about your customers (such as names, contact details, and amounts). It is encrypted in transit and at rest, processed within the EU, not used to train AI models, and not kept longer than needed to return the result. These features run only when you actively trigger them (for example, tapping scan).

Google

Google Sign-In: When you sign in with Google, we receive your basic profile information (name and email address) as authorized by your Google account settings. Google Calendar Integration: If you connect your Google Calendar, we request access to your calendar events and calendar list (using the calendar.events and calendar.readonly scopes). We access event titles, dates, times, and calendar names to display your busy times and help you avoid scheduling conflicts. All calendar data is stored locally on your device and is not transmitted to our servers or shared with any third parties. You can disconnect your Google Calendar and revoke access at any time through your app settings or your Google Account permissions page. Google Calendar data is retained on your device only for as long as your Google Calendar remains connected. When you disconnect your Google Calendar or delete your account, all associated calendar data is immediately removed from your device. We do not sell Google user data. Google user data is not used for serving advertisements, training AI or machine learning models, credit determinations, lending decisions, or building user profiles for any purpose unrelated to the app's core scheduling functionality. To delete your Google Calendar data, disconnect your Google Calendar in the app settings — all calendar data will be removed immediately.

Facebook

Facebook Login: When you sign in with Facebook, we receive your basic profile information as authorized by your Facebook account settings.

Apple

Sign in with Apple: When you sign in with Apple, we receive your name and email address (which may be a relay address if you choose to hide your email).

PostHog

PostHog (Analytics): With your consent, we use PostHog to collect anonymous product analytics including page views, feature usage, and masked session recordings. PostHog helps us understand how the app is used so we can improve it. No personal customer data is sent to PostHog.

Sentry

Sentry (Error Tracking): With your consent, we use Sentry to collect error reports, crash data, and performance metrics. All text is masked and authorization headers are stripped before data is sent. This helps us identify and fix bugs faster.

WhatsApp Cloud API (Meta): If you connect your WhatsApp Business Account, we use Meta's WhatsApp Cloud API to send and receive messages on your behalf. Phone numbers and message content are transmitted to Meta's servers for delivery. We receive incoming messages from your customers via webhook notifications. We cannot read or access your personal WhatsApp — only messages customers send to your connected Business Account are received. Customer consent (opt-in) is required before any marketing message is sent, and all consent records are logged for compliance.

MyPink Party's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage and Security

Your data is stored exclusively on your device using local SQLite storage. Backups to cloud storage (S3) or local file system are only created when you actively opt in. Synchronization with our servers only takes place when you explicitly enable it, for example when inviting a customer to the customer portal. We use industry-standard encryption to protect your data during backup and synchronization. WhatsApp message data and customer consent records are stored on our servers and encrypted at rest. This data is required for message delivery and compliance auditing.

Party guest profile links

Consultants who use MyPink Party can give the guests of a party a link or QR code. Guests use it to send their contact details to the consultant and, depending on the consultant's line of business, a skin profile.

Who is responsible

The consultant who shared the link is responsible for the details a guest sends (controller). We only transmit them on the consultant's behalf (processor).

End-to-end encryption

The guest's browser encrypts the details before sending them, with a key that only the consultant's app can derive. We only store the encrypted data and cannot read it. The page uses no analytics, no third-party scripts and no cookies.

What we store and for how long

Encrypted submissions: until the consultant's app has collected them, at most 30 days after receipt.
Link details (the consultant's name, language and form type): until 30 days after the link expires. The name is removed as soon as the link is revoked or replaced.
To prevent misuse, we count submissions per network address and link. For this we store only a keyed hash of the address, never the address itself, and delete these counters after one to two hours.
For technical reasons, deletion after these periods can take a few more days.

Skin sensitivity

Information on how sensitive a guest's skin is can count as health data. The page asks for it only after the guest has explicitly consented, and sends it only with this consent.

Your rights as a guest

Guests exercise their rights, such as access, correction, deletion and the withdrawal of their consent, with the consultant who shared the link. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. Because we cannot read the encrypted details, we cannot answer questions about their content ourselves.

Your Rights

Depending on your location, you may have the right to:

1 Access the personal data we hold about you
2 Request correction of your personal data
3 Request deletion of your personal data
4 Object to processing of your personal data
5 Request restriction of processing your personal data
6 Request transfer of your personal data
7 Withdraw consent
8 Opt out of analytics and error tracking at any time via Settings → Preferences

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR).

Cookies and Tracking

Essential Cookies

We use essential cookies to maintain your session and preferences. These cookies are strictly necessary for the app to function and cannot be disabled.

Analytics and Error Tracking

With your explicit consent, we use PostHog for anonymous product analytics (page views, feature usage, masked session recordings) and Sentry for error tracking and performance monitoring. These services may set cookies on your device. We do not use any services that track you across other websites.

Analytics and error tracking are only activated after you give explicit consent. This data helps us improve the app — delivering better features, faster bug fixes, and a smoother experience for you. You are asked on your first visit and can change your preference anytime in Settings → Preferences. Declining has no effect on app functionality.

Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.

Contact Us

If you have any questions about this privacy policy, please contact us at:

privacy@mypink.group →