Privacy

Who we are

Bashlo is run by an indie developer based in India. You can reach us at support@bashlo.com.

What we keep

• Your account. Guests get an anonymous account and are never asked to sign in. A host can sign in with Apple or Google. That sign-in is handled by Google Firebase, and we only note which of the two you used last.
• Parties you host. The name, time, time zone, venue (and a map link for it, if you add one), occasion, audience, dress code, the name you show as host, the guest list, the answers to your invitation and the questions you ask your guests.
• What a guest gives. The name they enter, their answer to the invitation, their answers to the host's questions (such as a dietary note), a poll answer, a potluck dish, a Secret Santa wishlist and a White Elephant gift label.
• What happens in a live activity. The guests' display names, answers, votes and results.
• Pictures. Drawings and photos made in some activities (JPEG, PNG, WebP, up to 5 MB). We remove location and camera details from a photo before anyone else can see it.
• Purchases. Where passes are offered, they are bought through the App Store or Google Play, or on the web through a payment provider, who take the payment and handle any refund. When you buy one, we keep the purchase id, what was bought and the passes it gave.
• Notifications. If you allow them on your phone, we keep your phone's notification token (the address we send them to), your reminder switch and a note of when you allowed or turned them off. A guest gets at most 3 reminders for one party.
• Reports. Reports you make about a guest.
• Referrals. A referral code you create, with its expiry (30 days after you made it). We remove it 30 days after that. When someone uses it, we record that, so the offer can be applied.
• Feedback and ratings. The text you write, an optional rating and, only if you choose to attach them, the app version and phone details. We also keep your answers to the rating prompt.
• Party Recap. A summary of a party's highlights, kept with the party.
• Short-lived records. So that a request is never processed twice, the app's requests leave a fingerprint (not their content) that we delete after 7 days.

Usage statistics never include your account id, your name or your email address, and our logs never contain a name, an email address, a join code or a sign-in token.

Why we use it

• To run a party you host or join. Your name, answers, votes and results are needed to show the party to the right people and to run the activities. Without them Bashlo cannot work.
• To keep Bashlo safe: reports, limits on repeated requests and the short-lived records above.
• To remind you about a party, only if you allow notifications.
• To process a purchase, where purchases are offered: the store takes the payment and we keep what is listed above.

Who can see it

• The guests of a party see its details and the names of the other guests in an activity.
• A map link the host adds for the venue is shown to anyone who opens the invitation link, like the venue itself.
• Only the host sees the guest list, the answers to the invitation and the answers to the host's questions. Dietary notes are never written to logs or usage statistics.
• When the host keeps votes anonymous, nobody sees who voted for whom. In quiz activities no guest's answer is shown to the others.
• Secret Santa: only the giver sees the receiver's wishlist, and only after the draw. The host cannot see who gives to whom.
• A photo taken as evidence in an activity is seen by the host only. A drawing is seen by the guests of that activity.

How long we keep it

• A party that took place, its activity history and its pictures are deleted 365 days after the party ends.
• A cancelled party is deleted 30 days after it was cancelled. A party that never started is cancelled 7 days after its start time.
• Everything tied to your account is deleted when you delete your account (see below).

Analytics

The app does not send analytics or crash reports to us. If that ever changes, we will ask you first and update this page.

In a web browser

A guest can join a party from a web browser without an account. The browser keeps an anonymous sign-in on that device only. Clearing the browser's site data removes it.

Who else is involved

• Bashlo runs on Google's cloud services, which store and process your data for us.
• Apple and Google deliver notifications through their services. Apple, Google and our payment provider handle payments where passes are offered.
• We do not sell your data, we show no ads and we use no advertising id.

Where it is stored

Your data is stored in the United States (Google Cloud, Iowa). If you use Bashlo from another country, your data is sent there.

Your choices

• Delete your account in the app, or as described on the account deletion page.
• Turn off notifications at any time in your phone's settings.
• Ask what we hold about you, ask us to correct it or ask us to delete it, by writing to support@bashlo.com. We answer within 30 days.
• You can complain to the data protection authority where you live.

Children

A guest must be at least 13 years old and a host at least 18. We do not knowingly collect data from anyone younger. If you think a younger child has used Bashlo, write to us and we will delete the data.

Changes

When this page changes, the date at the top changes. If a change matters to you, we also tell you in the app.

Questions

Write to support@bashlo.com.