Privacy Policy — Mazaltov App (מוזמנים)

Last updated: October 2026

Who we are

מוזמנים (Muzmanim) is a private administrative tool for wedding organizers, operated by Gadi Melamed. The app is not intended for general public use — access requires an authorized admin account.

What data is collected and stored

Admin account data (you, the app user)

Wedding guest data (third parties)

The app allows admins to enter, view, and edit guest records. Guests themselves do not interact with this app directly.

Guest records may include:

• Name and phone number
• RSVP status and response date
• Number of attendees, children, and babies
• Meal preferences (regular, vegetarian, vegan, gluten-free)
• Special meal note (free text — may reflect dietary restrictions)
• Free-text comments entered by the admin
• Invitation and reminder tracking (sent/not sent, timestamp, by whom)

This data is stored on Cloudflare's infrastructure and is used solely to provide the service to the wedding organizer.

Optional feedback and bug reports

Signed-in users can review and explicitly consent to each submission. We retain the category, subject, description, optional reproduction steps or benefit, selected screenshot, account name and email, and wedding identity. All feedback categories additionally include platform, OS version, device model, app version/build or web browser information, and the reporting screen.

No advertising or persistent device identifiers, location, cookies or authentication tokens are attached. Image metadata is removed locally before upload and independently on the server before storage. Do not include passwords or unnecessary personal information; your selected image and text may contain personal information.

Records and internal support notes are stored in Cloudflare D1; screenshots are stored privately in R2. Management and screenshot access are restricted to Super Admins. When email notifications are configured, report text, account/wedding details and diagnostics are sent to support@mazaltov.app through Resend; screenshots are not attached to email. Data is used for support and service improvement, without advertising or tracking.

Records remain until administrative deletion, with no automatic expiry, including after a wedding is deleted. Request deletion at support@mazaltov.app. Feedback is optional and does not affect access to other features.

Audit logs

Every admin action is recorded in an audit log: timestamp, admin email address, action type, and old and new values. Audit logs are retained indefinitely and are accessible only to authorized admins of the same wedding. There is no automatic deletion of audit logs.

Backups

Backup files (CSV exports containing guest data) are stored in Cloudflare R2. Automatic backups are kept as a rolling set — older backups are overwritten. Manual (pinned) backups are retained until manually deleted. Deleting a guest record does not necessarily remove that guest's history from audit logs or from backups created before the deletion.

What we do not collect

• Location data
• Device identifiers or advertising IDs
• Automatic usage analytics or crash reporting (user-initiated support diagnostics are described above)
• Financial information
• Access to contacts or camera; optional screenshots use the system photo picker, without broad library access

Third-party services

The app does not include advertising networks or analytics SDKs. System components and libraries provide the service functionality described above.

Data controller and processor

The wedding organizer (admin user) is responsible for the guest data they enter into the service. Mazaltov App processes that data on their behalf as a service provider. We do not use guest data for any purpose other than providing the service.

If you are a wedding guest and wish to inquire about data collected about you, please contact your wedding organizer directly.

Optional biometric sign-in: The operating system verifies biometrics; we do not receive face images or fingerprints. A separate device credential is protected by biometric authentication, expires after 90 days, and survives ordinary logout with your consent. The server stores a random device identifier, credential hashes, account/wedding identity and expiry. Disable it in the app profile or login screen. Offline revocations are encrypted and queued until connectivity returns. Expired or revoked server records cannot authorize sign-in and may remain until administrative deletion. iOS Keychain entries may survive reinstalling the app.

Data retention and deletion

• Bearer tokens: expire after 30 days; removed from local sign-in on logout. An encrypted revocation-only queue retains pending session tokens until server revocation succeeds. Offline server revocation requires connectivity.
• Web sessions: expire after 8 hours.
• Guest records: retained until manually deleted by an admin.
• Audit logs: retained indefinitely.
• Backups: see "Backups" section above.

To request deletion of your data, contact us at support@mazaltov.app. Deletion requests are handled manually and are subject to applicable legal and operational requirements.

Security

Admin authentication uses Google OAuth with PKCE. Bearer tokens are stored in the iOS Keychain (hardware-backed on modern iPhones). All communication with our servers uses HTTPS. We do not make absolute security guarantees, as no system is entirely free from risk.

Children

This app is not directed at children and is not intended for use by anyone under 18.

Changes to this policy

We may update this policy. The "Last updated" date at the top will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Gadi Melamed
support@mazaltov.app