Privacy Policy

We Do is a swipe-to-match app that helps engaged couples find New South Wales wedding vendors. This policy explains what we collect, how we use it, and the choices you have. It is written to comply with the Australian Privacy Act 1988 and Apple's App Store requirements.

1. Who we are

We Do is operated by Jasmine Moody and Jonathan Hooper, based in Sydney, NSW, Australia. You can reach us at hello@wedoapp.co.

2. What we collect

We only collect what is needed to run the matching service.

• Account: email address, password (stored hashed), role (couple or vendor).
• Couples: partner names, wedding region, approximate wedding date, guest count, budget range, style/vibe tags, colour palette, moodboard images you upload, a list of vendors you have already booked outside the app (name + Instagram URL, optional), and — if you use the AI style feature — a derived "style persona" (e.g. Romantic & Soft) with confidence scores.
• Vendors: business name, category, region, tagline, "about" description, starting price, style tags, availability months, FAQ entries, optional booking link (e.g. Calendly), portfolio photos and an intro video you upload.
• Messages: the text you send to a matched vendor or couple. Deleted messages are tombstoned in the database so the conversation order is preserved.
• Activity: which vendor profiles you have viewed, liked, or matched with, to power the vendor's "who viewed me" analytics. We do not use third-party analytics or advertising trackers.

3. How we use it

• To compute matches between couples and vendors (scoring on category, region, budget, style, availability, and — where both sides have one — style persona).
• AI style analysis (optional): if you tap "Find my style persona", the photos on your moodboard are sent to Anthropic's Claude AI to be classified into one of eight style personas. This happens only when you request it. Under Anthropic's commercial API terms, your images are not used to train their models. Only the resulting persona (not the images) is stored on your profile, and you can re-run or ignore the feature at any time.
• To deliver messages between matched parties in real time.
• To show vendors anonymous-ish analytics about who has viewed their profile.
• To run the account: sign-in, password reset, account deletion.

We do not sell your personal information, ever.

4. Who sees what

• Vendors can see a couple's brief (region, date, guest count, budget range, style, moodboard, palette, and the vendors a couple has marked as booked) once a couple swipes right on them. They can also see couples in their region/category in the "Couples" tab of the dashboard, where the brief is visible but contact is only possible after a mutual match.
• Couples see the vendor's full public profile (photos, video, FAQ, pricing band, availability).
• No one outside of a matched conversation can read your messages.

5. Where it is stored, and who processes it

We Do is built on Supabase. Database rows are stored in Supabase's Sydney (ap-southeast-2) region. Uploaded photos, videos, and moodboard images are stored in Supabase Storage in the same region. Supabase is operated by Supabase Inc. and uses AWS infrastructure.

If you use the optional AI style feature, your moodboard images are processed by Anthropic PBC (US) for the duration of the analysis only. We use two processors in total — Supabase (hosting) and Anthropic (AI style analysis) — and neither is permitted to use your data for anything beyond providing the service.

6. How long we keep it

We keep your data for as long as your account is active. When you delete your account from inside the app (Profile → Delete account), all of your data — brief, moodboard, palette, photos, video, messages, and your matches — is removed from our database and storage within 24 hours. The auth record is removed immediately.

7. Children

We Do is intended for adults planning a wedding. The app is rated 17+ in the App Store. We do not knowingly collect data from anyone under 18.

8. Cookies and tracking

The app uses a single authentication token in local device storage so you stay signed in. No advertising trackers, no analytics SDKs, no third-party cookies.

9. Your rights

Under the Australian Privacy Principles you can request access to, correction of, or deletion of your personal information. The fastest way is to edit your profile in the app or use the in-app Delete account button. You can also email us at hello@wedoapp.co.

10. Security

All traffic to and from We Do is encrypted in transit (TLS). Database access is gated by row-level security policies: a couple can only read its own brief, a vendor can only read couples that have matched with it, and messages are scoped to the two participants in a thread. Passwords are hashed by Supabase Auth (we never see the plaintext).

11. Changes to this policy

If we change anything material in this policy we will update the "Effective" date above and, where appropriate, notify you in the app before the change takes effect.

12. Contact

Privacy questions, deletion requests, or complaints: hello@wedoapp.co.

---