Your data, plainly.

Account details. Your name, email address, optional phone number, and role (customer or vendor). Your password is stored only as a one-way hash, never as plain text. If you sign in with Google, we receive your name and email address from Google.

Celebration details. The occasion, date, city, guest count, the services you want, any notes, and an optional street address for the event.

Vendor details. Business name, category, service area, description, listings and prices, and photos you add.

Gifts. The gift options you choose, the card message and signature, and the recipient's name and delivery address.

Reminders and shared calendars. Names and dates you add, such as a friend's birthday, and the people you share a calendar with.

Reviews you write about vendors.

Live location. Only for vendors, and only after they tap “I'm on my way” for a paid booking. The phone shares its position while that page is open.

Technical data. Your IP address is used briefly to rate-limit requests and protect against abuse. If you turn on notifications, we store the notification address your browser gives us.

Payments. Card and wallet details, including Apple Pay and Google Pay, go directly to Stripe. We never see or store your full card number.

• To run your account and keep you signed in.
• To match your celebration with local vendors and show you their responses.
• To take payments, pay vendors, and handle cancellations and refunds.
• To deliver gifts and show live tracking on the day.
• To send reminders, notifications you turned on, and password reset emails.
• To keep the service secure, prevent fraud and abuse, and meet legal obligations.

We do not sell your personal information, and we do not share it for advertising.

Vendors see only the event details their service needs. They never see your name or contact details through SHOWUP. They see the event address only after you have paid.

People you choose see what you share with them, such as members of a shared reminder calendar.

Service providers who process data for us:

• Stripe, for payments and vendor payouts.
• Cloudflare, which hosts the app and stores its data.
• Google, if you choose to sign in with Google.
• Resend, which sends password reset emails.
• OpenStreetMap, which turns an event address into map coordinates and supplies map images.
• Your browser's push service, such as Apple or Google, to deliver notifications you turned on.

We may also disclose information when the law requires it, or to protect the safety of our users.

We use one cookie, which keeps you signed in. It cannot be read by page scripts and expires after 30 days.

Your browser also keeps an unfinished celebration plan, so you can come back to it, and a note when you dismiss the install banner. Logging out clears the saved plan.

We do not use analytics, advertising, or tracking cookies.

• Sign-in sessions expire after 30 days.
• Password reset links expire after one hour.
• A vendor's live location is deleted when the job is marked done, and expires within 30 minutes of the last update in any case.
• Everything else is kept while your account is open. Payment and booking records may be kept longer where tax or accounting law requires it.

You can ask to see, correct, export or delete your personal information. Email us at [CONTACT EMAIL] and we will respond within 30 days. You can also delete your account yourself at any time, from your account page in the app.

You can turn off notifications in the app or in your browser settings. You can stop location sharing at any time by closing the trip page.

Depending on where you live, laws such as the California Consumer Privacy Act or the GDPR may give you further rights. We will honor them, and we will not treat you differently for using them.

When you add someone else's details, such as a birthday reminder or a gift recipient's address, please make sure you are allowed to share them. We use those details only to provide the reminder or deliver the gift.

We use encrypted connections, hashed passwords, limits on repeated sign-in attempts, and access controls on every account. No system is perfectly secure. If you think your account has been compromised, reset your password and contact us.

SHOWUP is not meant for children under 13, and we do not knowingly collect their information. You must be at least 18 to make payments or join as a vendor. If you believe a child has given us information, contact us and we will delete it.

We will update this policy as the service changes and post the new effective date here. For significant changes, we will tell you in the app or by email.

Questions? Contact [LEGAL ENTITY NAME] at [CONTACT EMAIL], or by mail at [MAILING ADDRESS]. See also our Terms of Use.