Privacy

Who we are

The Big Reveal is a private space for expecting parents and the people they invite. For anything in this policy, including a request to see or delete your data, write to muqitfuseini@gmail.com.

What we collect

Your account

• Your email address, which is how you sign in and how we reach you.
• Your name, if you give one. It is what other members of a celebration see.
• A profile photo, if you upload one.
• A password, if you created your account in the mobile app. It is stored only as a bcrypt hash — we cannot read it, and neither can anyone who obtained a copy of the database.
• Your chosen language and colour theme.

What you put into a celebration

• The celebration itself: its name, the baby's nickname, due date, reveal date, shower date, venue and party theme.
• Messages you post, and photos attached to them.
• Gift lists, and who reserved or bought what.
• Gender predictions, name suggestions, wishes and game answers.
• Tasks and budget items, if you are hosting.
• Whether you are coming, and any dietary requirements you enter.

Information that needs saying plainly

Two things here are more sensitive than the rest, and are treated as such:

• The pregnancy journal. Symptoms, cravings, milestones, thoughts and feelings, week by week, with photographs. This is health information about the pregnancy. It is visible to the parent and to co-hosts of that celebration — not to guests, and not to anyone outside it.
• Dietary requirements. What you cannot eat can imply your health or your beliefs. A note you enter is visible to you and to the hosts of that celebration, who need it to feed you. It is not shown to other guests.

Other people's email addresses

A host can add email addresses in order to invite someone, or to send them an announcement or a due-date card. Those addresses are stored against that celebration so the card can be sent and so the same person is not invited twice. If you are adding someone, please be sure they are happy to hear from you — see the Terms.

Technical

• A device token, if you turn on notifications, so we can send you one. It identifies the app on your device, not you.
• For the contact form: your name, your message, and a one-way hash of your IP address. The hash exists to stop the form being abused; the address itself is never stored.
• A cookie holding your sign-in session, and one holding your chosen language. There is no advertising and no analytics tracking.

Why we hold it, and on what basis

• To provide the service — your account, your celebrations, and everything in them. Without this data there is no product. (Performance of a contract.)
• To send what you asked for — invitations, the reveal, notifications you enabled.
• The sensitive parts above — the journal and dietary notes are held because you chose to enter them, and you can delete them at any time. (Consent, which you may withdraw.)
• To keep it working and safe — the hashed IP on the contact form, and ordinary server logs. (Legitimate interests.)

Who else sees it

We do not sell anything to anyone, and there is no advertising. The service runs on other companies' infrastructure, and each of these handles data only to do a specific job for us:

• Vercel — hosts the website and its servers.
• Neon — hosts the database, in the European Union.
• Cloudinary — stores photos and videos you upload.
• Resend — delivers our emails, which means it handles the recipient's address and the message.
• Groq — runs the model behind Ask AI. See below.
• Expo, and through it Apple or Google — deliver push notifications to your device.
• Google — only if you choose to sign in with a Google account, and only to confirm it is you.

Ask AI, specifically

When you use Ask AI, what you type and any photo you attach are sent to Groq to produce an answer. Nothing about your celebration is sent with it — not the baby's name, not your members, not your journal. The assistant is given no information about your community at all, which is why it cannot answer questions about one. The conversation is not stored on our servers; it exists only in your browser or app until you leave the screen.

Deleting things

• Anything you posted — you can delete your own messages, gifts, predictions and journal entries in the app.
• A celebration — its owner can delete it, which permanently removes everything inside it for everyone: messages, photos, gift lists, the journal, all of it. There is no undo.
• Your account — in Settings. Everything personal to you goes with it. If you still own a celebration, the app will ask you to hand it over or delete it first, so that other people's memories are not removed without warning.

Backups may keep a copy for a short period after deletion before they expire.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it, and you can withdraw consent for the optional parts at any time. Write to muqitfuseini@gmail.com. If you are in the UK or the EU and you think we have handled your data badly, you can also complain to your national data protection authority.

Children

The Big Reveal is not intended for children. Do not create an account if you are under 16. A parent may of course post about their own child.

Changes

If this policy changes in a way that matters, we will say so in the app rather than quietly updating the date at the top.