Skip to content
Lorjova

Christmas Planning Privacy Policy

Last updated:

Christmas Planning helps a family plan Christmas together. Plans are shared only with the members a host has approved. The app does not ask for an email address, phone number or password.

Data we store

The app stores the information you and your family enter, including:

  • Family and household names, the names people choose to show, and their roles (organizer, co-host, member)
  • Events: titles, dates and times, time zones, venue, address, parking and arrival notes
  • RSVPs, numbers of adults, children and infants, and dietary needs and allergies you choose to share
  • Food sign-ups, preparation jobs, polls and votes, outfit plans, announcements and replies, games
  • Wishlists, White Elephant and Secret Santa settings
  • Private records only you can see: gift reservations, your gift tracker, budget and spending, and card drafts
  • Photos you choose to add (profile, dishes, outfits, wishes, gifts and cards)
  • Notification preferences and quiet hours

Where it is stored

Everything is saved on your phone. To share plans with your family, the app also stores them in Google Firebase (Cloud Firestore, hosted in London, United Kingdom), operated by Google on our behalf.

  • Shared family plans (events, RSVPs, food, jobs, polls, outfits, announcements, wishlists, games and the members list) can be read only by that family's approved members.
  • Gift reservations are never shown to the person who made the wish, or to the hosts. Other members see only whether an item is still available.
  • Secret Santa: each person can read only their own assignment. Hosts cannot see who has whom.
  • Your private records (gift tracker, budget, spending, card drafts and your own reservations) are stored so that only you can read them.
  • Photos stay on the phone that added them and are not uploaded.

App data on the phone is excluded from Android cloud backup and device transfer.

Accounts and sign-in

The app signs in anonymously with Firebase Authentication. This creates a random identifier for your phone so the family's access rules work. It is not linked to your name, email or phone number. A host approves every request to join a family, and names alone never give access to someone else's profile or gifts. Organizers receive a private recovery code; it is stored only as a one-way hash.

Invitations

Invitation QR codes and links contain only an invitation code, never names or addresses. Before a host approves a request, the person joining sees only the family name and the number of planned events.

Web RSVP page

Relatives without the app can reply at lorjova.com/christmas-planning/rsvp/. The page uses the same anonymous sign-in, join request and host approval as the app, and stores only the name, household, numbers and dietary notes entered there. The browser keeps the sign-in for the current tab only, unless "Remember me" is ticked; "Leave this device" signs the browser out.

Notifications

The app uses Firebase Cloud Messaging and stores a notification token for your phone. Notification texts never include gift, address or other private details; they only say that something new is waiting in the app. Android asks for your permission before notifications are shown, and you can turn them off at any time.

Advertising

Christmas Planning uses Google AdMob to show small, clearly labelled banners on list and browsing screens. Ads are not shown while you join a family, approve requests, send an RSVP, share a card, reveal a gift or play a live game, and exported cards never contain ads. To show and measure ads, Google may collect device information such as the advertising ID, IP address, approximate location derived from it, and how you interact with ads. This is handled by Google under the Google Privacy Policy and How Google uses information from sites or apps that use our services. Family names, addresses, allergies, photos, wishlists and gift details are never used for advertising.

Where the law requires it (for example in the EEA, UK and Switzerland), the app asks for your consent before ads are shown. You can change your choice in Settings > Ad privacy choices. You can also reset or delete your advertising ID in Android Settings.

Purchases

The optional one-time Remove ads purchase is handled by Google Play Billing and tied to your Google Play account. We do not receive your payment details.

Data sharing

We do not sell your data. Shared plans are visible to your family's approved members as described above. Google provides Firebase, AdMob and Google Play Billing for the app. Cards and invitations you share go only where you choose to send them.

Analytics

Christmas Planning does not use analytics.

Your choices and deleting data

  • Members can leave a family in Settings > Privacy. Hosts can remove members, which stops their access.
  • Settings > Privacy > Delete my data from this phone removes everything stored on the phone and your private records in Firebase, and signs the phone out.
  • Plans you added to a family's shared space stay with that family so the plans still make sense to others. To have them removed, ask the family's host or email us.

Permissions

The app uses the internet, notifications and the advertising ID permission required by Google AdMob. Photos are chosen with Android's photo picker, which needs no storage permission. On Android 8 and 9 only, the storage permission is used to save exported cards to your Pictures folder. The app does not request contacts, location, SMS, camera or microphone permissions.

Children

Christmas Planning is for families and is not directed at children under 13. Adults can add children to their household and manage a child's wishlist; children do not need their own phone or sign-in.

Security

Access to shared plans is enforced by Firebase security rules. Your data security also depends on your device security (device lock, encryption).

Contact

For privacy questions or deletion requests, email contact@lorjova.com.