Privacy
This product involves one person uploading another person’s name and photograph. That deserves a plain explanation rather than a page of boilerplate, so here is exactly what happens.
If someone sent you a link
Your name and photo are on that page because the person who made it uploaded them. We did not get them from anywhere else, and we did not ask you first — they confirmed they had your permission.
You can delete all of it yourself, from the page, without an account and without asking them. The link at the bottom of the invitation removes your name, your photo and anything you wrote, and takes the page offline immediately. The person who made it is not asked to approve that and cannot undo it.
What we store
For someone with an account: their email address, the display name they choose, and any invitations they build.
For a recipient: the first name and photograph the sender uploaded, and whatever she chooses to fill in — a date, a time, activities she likes, and any note she writes.
We do not sell any of it, we do not use it for advertising, and we do not share it with anyone else.
Who can see it
Only the person who made an invitation can read the answers to it. That is enforced by the database itself, not by the app being careful — other accounts cannot read another account’s invitations or answers under any circumstances.
The invitation page is reachable by anyone holding its link, which is a long random string that cannot be guessed or found by searching. These pages are excluded from search engines. Once an invitation is unpublished or removed, the link and its photo stop working immediately.
Deleting things
A recipient can erase herself from the invitation page, as above.
An account holder can delete any invitation from their studio, which also deletes its photo, its video and any answers.
To delete an entire account, email velas@afriiot.com and it will be removed along with everything in it.
Where it lives
Data is stored with Supabase on servers in Ireland, and the site is served by Vercel. Both act as processors on our behalf.
Your rights
Under South Africa’s POPIA — and the GDPR if you are in the EU — you can ask what we hold about you, have it corrected, or have it deleted. The delete link on the invitation does the last of those instantly. For anything else, use the email address above.
If you are unhappy with how a request was handled, you can complain to the Information Regulator of South Africa.
Last updated 16 August 2026.