Privacy policy

If you host events: your account details (name, email, password), the events you create, and the guest lists you enter — group names, the names of people in each group, and any details you choose to add (which can include contact details like an email address or phone number). You control this information, and you should only add guest details you're comfortable managing on your guests' behalf.

If you're a guest: when you RSVP, we store your responses (Yes/No/Maybe per person) and any optional note. We also record that an invite link was opened, so hosts can see whether their invite landed. We don't require an account, and we never ask you for a phone number or your contacts. Your host may have added details about you (like your name) when building their guest list. If you later create your own Hejmo account from an invite, we link that earlier invite activity to your new account so we can understand how people discover Hejmo — invite links are shared with a whole household, so this may include opens by others using the same link.

If your host adds your email address: Hejmo can email you their invite or a reminder when they ask us to, from them and with replies going to them. Every one of these emails has an unsubscribe link, for that host or for every invite sent through Hejmo. To honor an unsubscribe we keep only a one-way hash of the address. We record whether each email was delivered, not whether you opened it.

If you connect an AI assistant: when you connect Hejmo to ChatGPT, Claude, or another AI assistant, it can act for you: read your events (titles, dates, places, and notes), your guest lists (household names and the names of the people in them), RSVP replies, sign-up lists, and each household's invite link; and create, change, and archive events, add, change, and remove households, record replies a family gave you directly, and edit sign-up lists. It never receives guests' email addresses, your password, or payment details. We record which assistant you connected and keep its access in hashed form until it expires or you disconnect. Your conversation with the assistant is handled by its provider under its own privacy policy; Hejmo only receives the requests the assistant makes to Hejmo.

If you upgrade an event: payments are processed by Stripe. We never see or store your card number.

Automatically: standard usage analytics (pages visited, general device info, which steps of a flow you reach) and error reports, web performance, and privacy-configured session replays, so we can keep Hejmo fast and working. Replays can include text visible on recorded host pages, but form inputs and network request bodies or headers are not recorded, and private invite pages are excluded entirely. Where you first arrived from (such as a search result or a link on another site) is kept so we know which channels bring people to Hejmo. We attach a signed-in host's account name and email to their PostHog profile so we can connect support and debugging context. We remove invite links, guest names, and guest or contact email addresses from analytics event properties, and we don't use any of this data for advertising.