Privacy Policy
| App | Knot So Complicated (iPhone and Android) |
| Last updated | 31 October 2026 |
Knot So Complicated helps families plan Indian weddings: ceremonies, guest lists and cost estimates. This policy explains what personal data the app collects, why, where it's kept, who else handles it, and how you can see, correct or delete it.
In this policy, "we", "us" and "our" mean Vaastav Parikh, Surat, Gujarat, India, who runs Knot So Complicated. "You" means the person using the app.
What's changed on 31 October 2026: you can now delete your account in the app, under Account. §1, §7 and §8 explain how, and that deleting in the app removes your data from our database straight away. §2 now says what a message to support includes, and §4 what happens to what you added to weddings shared with you.
What's changed on 27 October 2026: you can now add guests from your phone's contacts. §2 now explains what the app reads on your phone and what it saves.
What's changed on 24 October 2026: you can now share a wedding with family. The people you share a wedding with can see everything in it, including guests' phone numbers and email addresses. See §2 (people you invite), §3 (guests' details), the new §4 (sharing a wedding) and §7 (how long we keep invites).
1. The short version
- We collect your email address to sign you in, and the wedding details and guest details you choose to add.
- We use that data only to run the app for you. We don't sell it, we don't show ads, and we don't use it to profile you.
- If you share a wedding, the people you share it with can see everything in it, including guests' details.
- Your data is stored in Mumbai, India.
- You can delete a wedding, or your whole account, at any time in the app (Account › Delete account). If you can't use the app, email hello@knotsocomplicated.com from your account's email address (how to ask). Deletion is permanent.
- Questions or requests: hello@knotsocomplicated.com.
2. What we collect
About you
| Data | Why |
|---|---|
| Email address | To send you a sign-in code and identify your account. |
| Name (optional) | To greet you in the app. |
| When you accepted these terms, and which version | To record your consent. |
About your weddings, which you enter yourself:
- wedding name, the couple's names, dates and city;
- ceremonies, with their dates, times and venues;
- budgets and cost estimates, and any notes you add.
When you share a wedding, or one is shared with you:
| Data | Why |
|---|---|
| People you invite: the email address you enter, and the role you give them (editor or viewer) | So the person sees your wedding when they sign in with that email. We don't email them. |
| Your name and email address | Shown to the other people in a wedding you share or that's shared with you, so everyone can see who has access. |
About your guests, which you enter yourself:
- names, phone numbers and email addresses;
- how many people from each family are attending, whether they are confirmed or tentative, tags (such as "Bride's family") and notes.
Contacts on your phone: if you choose to add guests from your contacts, the app reads the contacts on your phone so you can pick from them. Only the contacts you pick leave your phone. For each, we keep their name, one phone number and one email address, plus a reference to the contact on your phone, used only to spot duplicates. We never upload your whole address book. The app only reads contacts while you're picking guests, never changes them, and stops reading them if you turn off contacts access in your phone's settings.
Sign-in records: each time a sign-in code is requested or entered, we record the email address, the IP address, the device type and app version, the time and the result (for example "code sent" or "wrong code"). We use these records only to protect accounts from abuse, such as someone repeatedly guessing codes.
When you contact support: Contact support in the app opens your own email app with a message to us, with the app's version and your phone's operating system filled in, which you can remove before sending. We use what you send only to answer you.
What we don't collect: we don't collect your location, payment details, photos or messages. During the beta, the app has no analytics, advertising or tracking tools. If we add analytics later, we'll update this policy and tell you first.
3. Guests' details
When you add guests, you are giving us details about other people. We handle them only to run your guest list for you. You, and anyone you share the wedding with, can see them. Only share a wedding with people you'd trust with your guest list. Please add only details you have a fair reason to hold, such as people you are inviting to the wedding.
If you are a guest and want your details removed, email us. We'll ask the wedding's owner to remove them, or remove them ourselves where the law requires it.
4. Sharing a wedding
- The person who creates a wedding is its owner. Only the owner decides who can see and change it.
- The owner can invite people by email as editors, who can change everything in the wedding, or viewers, who can see everything but change nothing. Everyone in the wedding can see its guests' details.
- We don't email the people you invite. You tell them yourself. They see the wedding when they sign in with the email address you entered.
- An invite holds the person's email address until they accept or decline it, or the owner cancels it.
- If the owner deletes the wedding or their account, the wedding is deleted for everyone in it.
- If you leave a wedding or are removed from it, you stop seeing it. What you added stays in the wedding.
- If you delete your account, the same happens with every wedding shared with you: you're removed, and what you added stays with the wedding and its owner.
5. How we use your data
We use your data only to:
- sign you in and keep your account secure;
- show and calculate your ceremonies, guest lists and estimates;
- reply when you contact us;
- meet our legal obligations.
We don't sell, rent or trade personal data. We don't use it for advertising, and we don't make automated decisions about you.
6. Where your data is kept and who handles it
Your account and wedding data are stored with Supabase, our database and sign-in provider, on servers in Mumbai, India (AWS region ap-south-1). The data is encrypted while it travels and while it's stored. Each account can see only its own weddings and the weddings shared with it.
A few service providers handle data for us, only to run the app:
| Provider | What it does | What it handles | Where |
|---|---|---|---|
| Supabase | Database, sign-in and hosting | All the data described above | Mumbai, India |
| Resend | Sends the sign-in code emails | Your email address and the code | United States |
| Apple and Google | Deliver the app to your phone | Covered by their own privacy policies | — |
We may also share data if the law requires it, for example in response to a valid order from a court or a government authority.
7. How long we keep data
| Data | How long |
|---|---|
| Your account and weddings | Until you delete them, or your account. Deleting your account deletes the weddings you own, for everyone in them, and removes you from weddings shared with you. |
| Pending invites | Until accepted, declined or cancelled, or the wedding is deleted. |
| A deleted wedding or account | Removed from our database straight away when you delete it in the app, or within 30 days of a request by email. Copies in backups are cleared within 30 days. |
| A deleted ceremony | Kept for a few seconds so you can tap Undo, then removed. |
| Sign-in codes | Each code expires after 10 minutes. Records of code requests are removed after 1 day. |
| Sign-in records | 90 days. If you delete your account, your email address in these records, and in the records of recent code requests, is replaced by a scrambled version that can't be read back. |
8. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
- see the personal data we hold about you;
- correct or update it, which you can do for most of it in the app;
- delete it: in the app, under Account › Delete account, after confirming with a code sent to your email. This removes your account and the weddings you own (for everyone in them), removes you from weddings shared with you, and signs you out on every device. If you can't use the app, email us from your account's email address (how to ask) and we do the same;
- withdraw your consent: deleting your account does this, because the app can't work without your email address;
- nominate someone to exercise these rights for you if you die or can't act yourself;
- complain to us, and then to the Data Protection Board of India if you aren't satisfied with our answer.
To use any of these rights, email hello@knotsocomplicated.com from the email address on your account. We'll reply within 30 days.
9. Age
Knot So Complicated is for people aged 18 or over. We don't knowingly collect data from anyone under 18. If you think someone under 18 has an account, email us and we'll delete it.
10. Security
- Sign-in uses a one-time code sent to your email, so there is no password to steal.
- The app keeps your sign-in session in your phone's secure storage (the iPhone Keychain or the Android Keystore).
- We limit how often codes can be sent and how many wrong guesses are allowed.
No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.
11. Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your data, we'll ask you to accept the new version in the app before you continue.
12. Contact
Grievance officer: Vaastav Parikh, Surat, Gujarat, India Email: hello@knotsocomplicated.com