Privacy Policy

Seating Charts ("the app", "we", "us") helps you design event floor plans and seat your guests. This policy explains what information the app collects, how it is used, and the choices you have. By using the app you agree to this policy.

The short version: we store the charts you make and, if you create an account, your email address. If you import guests from your contacts, only the names you tick are used. If you agree, we also count which screens are opened and which features are used, to improve the app — never what you type into a chart. The app asks you once, and you can change your answer in Settings. If you subscribe to Seating Charts Pro, Apple or Google takes the payment, and RevenueCat, our subscription provider, keeps a record of the purchase so Pro works on all your devices; neither we nor RevenueCat ever see your card details. No advertising, no tracking across other apps or websites, no selling of data. Your charts are private unless you turn on the seat finder for one, which lets anyone you give the link to look up where its guests sit.

1. Information you provide

• Account details — your email address and password, only if you choose to create an account. You can use the whole app without one.
• Your charts — room dimensions, tables, chairs and other objects you place, chart names, and venue notes.
• Guest information — for each guest on a chart's guest list: their name, group label and notes; their meal choice, if you track meals; which guests arrive together as a household; which guests you have asked to be kept apart; and the table and seat each guest is assigned to. All of it is what you type in or import. You are responsible for having the right to enter other people's details (see section 7).

2. Information you allow us to read

• Contacts — if you choose "Import from Contacts", the app asks your device for permission and shows you a list of the names in your address book. Only the people you tick become guests. We read display names only — no phone numbers, email addresses, photos or postal addresses are requested. Your address book is never uploaded, and contacts you do not select are never stored anywhere. You can decline the permission and still use every part of the app; pasting a list or importing a spreadsheet works just as well.
• Spreadsheet files — if you import a spreadsheet (a .csv, .tsv or .txt file), it is read on your device. The app takes each guest's name and, where the file has a column for them, their group, party size, household, meal choice and notes; any other columns are ignored. What it takes becomes guest information on your chart, as described in section 1. The file itself is not uploaded or kept.

Exporting works the same way in the other direction. A PDF of the chart, or a CSV of the seating — each guest's name, group, household, table, seat, meal choice and notes — is made on your device. The app hands it to your device's share sheet, to its print dialog for a PDF, or, for a CSV on Android, to its save screen. Where the file goes from there is up to you; we do not receive a copy. Share it as you would the guest list itself.

3. Information stored automatically

• Account identifier — a random user ID that ties your charts to your account.
• Timestamps — when a chart was created and last edited, used to sort your library and sync between devices.
• Usage statistics, only if you agree — see Usage statistics below.
• Subscription records — whether your account has Seating Charts Pro and, if you subscribe, the purchases behind it, kept by RevenueCat — see Subscriptions below.

That is the whole list. The app contains no advertising SDKs and does not track you across other companies' apps or websites. We do not collect your location, your photos, or any hardware or advertising identifier — and we never read your contacts except in the one case described in section 2, where you pick the individual people yourself.

Usage statistics

If you agree, the app reports how it is used to PostHog, our analytics provider, so we can learn which parts of the app are useful and where people get stuck. The app asks once: when you first set it up, or — if you were using it before this question was added — the next time you open your library. Until you say yes, nothing is sent and PostHog is not contacted at all. Even after a yes, nothing is collected while you are signed out — using the app without an account counts as signed in.

• What is sent — which screens you open (for example the editor or Settings); when you use certain features, such as creating a chart, adding guests, running auto-seat, exporting a PDF or a CSV, or turning on the seat finder, along with simple counts like how many guests were added or seated; when the app is opened, closed, installed or updated; and basic details of the device it runs on: the app version, device model and type, screen size, operating system version, language, time zone, whether you are on Wi-Fi or mobile data and, on Android, the name of your mobile network.
• What is never sent — chart names, guest names, groups or notes, your contacts, your email address, or anything else you type into the app. PostHog is set not to keep your IP address or work out your location from it.
• How it is identified — by the random account identifier described above, so one person using the app on two devices is counted once. Each installation of the app also has a random ID of its own, created by the analytics software; it is not a hardware or advertising identifier, and it is deleted when you delete the app — unless your phone's backup keeps the app's data and restores it. When a different account signs in on the device, its statistics start under a new ID rather than the previous account's.
• Your choice — answer when the app asks, and change your mind at any time with Settings → Share usage data. Turning it off stops any further collection from that moment, and so does signing out. The choice belongs to the device you made it on: a new device asks again, unless it is set up from a backup of this one, and if you sign in again on this device, your answer here still applies.

Subscriptions

Seating Charts Pro is sold through the App Store and Google Play. Apple or Google takes the payment under its own privacy policy, and your card details never reach the app, us, or RevenueCat. To unlock Pro for your account and restore it on your other devices, the app uses RevenueCat, a subscription-management service that processes this information on our behalf.

• What RevenueCat receives — the random account identifier described above (your Firebase user ID). When the app starts, it connects to RevenueCat to load the plans and check whether your account has Pro, so RevenueCat keeps a record for your account even if you never subscribe. If you subscribe or start a free trial, it also receives the store's record of the purchase: the plan, its price and currency, the dates it was bought, renewed, cancelled, or expires, whether it is a trial, and the store's transaction identifiers. With each request the app sends your store country, the app and operating-system version, the device model and your preferred language, and, on an iPhone or iPad, Apple's identifier for vendor, a random ID that Apple gives each app maker and that is not an advertising identifier.
• What it is used for — only to unlock Pro, restore it on your other devices or after reinstalling, show your plan and renewal date in the app, keep the trial reminder in step with your subscription, and give us totals such as how many people subscribe or cancel. It is not used for advertising.
• What is never sent — your charts, guest names, contacts, email address, or payment details.
• How long it is kept — while your account exists. Deleting your account does not erase RevenueCat's records by itself; see section 9.

RevenueCat's own privacy policy is at revenuecat.com/privacy.

Free trial reminder

If you start a free trial, the app can remind you a few days before it ends. The reminder is a notification scheduled on your device by the app itself. There is no push server, and nothing leaves your device to schedule or deliver it: we, RevenueCat, and our other providers receive nothing about it. Whether it can appear depends on the notification permission, which belongs to your device's operating system and which you control in its settings. On an iPhone or iPad the reminder arrives quietly in Notification Center unless you choose to have it on your Lock Screen, which is when iOS asks for permission. On Android 13 and later the system asks once. You can turn the reminder off from the app's confirmation screen or in your device's settings, and if you cancel the trial, the app removes the pending reminder the next time it sees your subscription.

4. How we use your information

• To provide the service: storing your charts and syncing them across the devices you sign in on.
• To operate your account: signing you in and, if you ask, sending a password-reset email.
• To provide Seating Charts Pro: unlocking it for your account, restoring it on your other devices, and, if you start a free trial, reminding you on your device before it ends.
• To improve the app: usage statistics, if you agreed to share them, show us which features are used and which are not. You can withdraw that agreement at any time in Settings.
• To respond when you contact support.

We do not use your information for advertising or profiling, and we do not send marketing email.

5. How we share information

We do not sell your personal information and we do not show advertising. Information is shared only with:

• Service providers — Google Firebase provides authentication and the database your charts are stored in. Google processes this data on our behalf under its own privacy commitments.
• Analytics provider — PostHog receives the usage statistics described in section 3 and stores them in the European Union. It processes them on our behalf only, under a data processing agreement, and does not use them for advertising.
• Subscription provider — RevenueCat receives your account identifier and, if you subscribe, your purchase and subscription history, as described in Subscriptions. It processes them on our behalf only, to manage subscriptions, under a data processing agreement and its privacy policy. Payment itself is handled by Apple or Google under their own privacy policies.
• Legal requirements — if required by law or to protect the rights and safety of our users.

Nobody else can see your charts. There are no collaboration features, and our security rules restrict every chart to the account that created it. The one thing you can choose to publish is a chart's seat finder, described next.

6. The seat finder

If you turn on Share seat finder for a chart, we publish a small read-only web page where your guests type their name and see where they sit. It is off until you turn it on, one chart at a time.

• What it shows — the chart's name and venue note, and the name, table and seat number of each guest you have seated. Groups, notes, meals, households, guests not yet seated and the floor plan are not published. The page also carries your account's random ID, which is part of the link too, and the chart's. Our security rules use them to make sure only you can change the page; they say nothing about who you are.
• Who can see it — anyone with the link. The page shows guests only the names that match what they type, but the whole list is sent with it, so anyone with the link can see the name, table and seat of every guest you have seated. The link ends in a long random code that cannot be guessed, pages cannot be listed or searched for, and search engines are asked not to index them. Anyone you send the link to can pass it on, so share it as you would the guest list itself.
• Keeping it current — while it is on, the page updates as you edit the chart.
• Turning it off — switch it off in the app at any time. The page is removed from our servers and the link stops working for good; turning it on again creates a new link. Deleting the chart, or your account, removes its page too.
• The page itself — its own code sets no cookies, stores nothing in your browser and contains no analytics or advertising. Its one outside service, Google reCAPTCHA, is described below.

To keep automated traffic away from seat finder pages, the page uses Google reCAPTCHA to tell people from bots. reCAPTCHA works by collecting hardware and software information, such as device and browser data, and sending it to Google for analysis. For this, Google may also store a cookie, and an item in your browser's local storage for the seat finder's site. We never see that information. Google's Privacy Policy and Terms of Service apply to it.

If you use the app without an account, turn the seat finder off before deleting the app: once it is gone, there is no way back into the session to turn it off. If that has already happened, email us and we will remove the page.

7. Your guests' information

When you add guests to a chart, you are providing information about other people — typically just their name and a group like "family" or "work". You confirm that you are entitled to record it (for example, that they are people you are inviting to your event). If someone asks you to remove their name, you can edit or delete it in the app at any time, and deleting a chart removes everyone in it. If the chart's seat finder is on, the change reaches its page as soon as the chart saves.

8. Security and storage

Your data is encrypted in transit and stored on Google Cloud infrastructure in the European Union (multi-region Belgium/Netherlands). Usage statistics are stored by PostHog, also in the European Union, and PostHog is set not to keep your IP address or derive a location from it. Subscription records are stored by RevenueCat in data centers in the United States, under a data processing agreement. Access is restricted by per-user security rules: only your signed-in account can read or modify your charts. A seat finder page you publish can be read by anyone with its link, and changed or removed only by you.

9. Data retention and deletion

Your data is kept while your account exists. You can delete your account at any time from Settings → Delete account inside the app, which immediately and permanently removes your account, every chart and every seat finder page from our servers. You can also email us at motaztarawneh92@gmail.com to request deletion.

Usage statistics are kept for up to 12 months and then deleted automatically. Deleting your account stops any more from being collected for it; the statistics already recorded carry only the random account identifier, not your email or charts. If you would like those erased straight away too, email us and we will delete them.

Deleting your account does not cancel a Seating Charts Pro subscription. Cancel it in the App Store or Google Play first, or you will keep being charged. Subscription records held by RevenueCat are not erased automatically when you delete your account; email us and we will ask RevenueCat to delete them. Some purchase records may be kept for as long as the law requires, for example for tax, accounting, or fraud prevention, under RevenueCat's policy. Apple and Google keep their own records of your purchases under their privacy policies.

10. Children

The app is not directed at children under 16, and we do not knowingly collect information from them. Guest names on a chart are provided by the account holder, not by the guests themselves.

11. Your rights

Depending on where you live — including under the GDPR — you may have rights to access, correct, export, or delete your personal information, and to object to its use. Your account and charts are visible and editable inside the app, deletion is self-service, and sharing usage statistics can be switched off in Settings at any time; for anything else, including a copy or erasure of your usage statistics or your subscription records, contact us and we will help.

12. Changes to this policy

If we make material changes, we will update this page and note the new date above. Continued use of the app after changes means you accept the updated policy.

13. Contact

Questions about privacy? Email motaztarawneh92@gmail.com.