Privacy notice
Last updated: 5 November 2026
Who we are
The Big Day Plan is run by Laurence Priest, in the UK. Write to privacy@thebigdayplan.com about anything here.
What we keep, and why
- Your plan: your wedding's dates, places, suppliers, prices and the money you're putting towards it, so the planner can work out what's affordable. Only planning numbers: never your income, savings, payslips or bank details.
- Your guest list: names, households and replies; and, where you or your guests add them, contact details, and dietary and access needs. These are there so you can plan who's coming and what to serve them.
- Your sign-in: your email address, so we know which wedding is yours and whether you're one of the couple or a helper.
- Nothing else. No tracking, no adverts, no selling or sharing your details, no profiling.
You can try the planner without an account: until you sign in, your plan is kept only on your phone or computer, and we keep nothing of it.
Your guests' details
You decide who's on your list and what you add about them, so for those details you're in charge and we look after them for you. Dietary and access needs can say something about someone's health or beliefs, so a guest gives them only with their own tick, and only so the caterer can feed them. A guest can remove their own details at any time: their contact details and needs go; their name and replies stay, so your plan still adds up.
Signing in
- With Google: Google tells us your name and your email address, which Google has checked. We ask for nothing else from your Google account when you sign in.
- With an emailed link: we send a one-time link to your email address.
- With a passkey: your phone or computer keeps the passkey; we keep only the part that checks it.
- One cookie keeps you signed in, and a short-lived one carries you to Google and back. There are no other cookies: none for tracking or adverts.
Emails we send
Our emails are sent through Cloudflare's email service: sign-in links, the invitations you send to your partner or a helper, and the messages you choose to send your guests from the planner, such as their invitation and their private link (these go under your names). A guest's reply goes to a hidden address of yours on our domain, received through Cloudflare too: it's kept with your wedding's messages and we tell you it's there. Cloudflare handles the addresses and the messages only to deliver them. We never send you or your guests marketing.
Your calendar and your to-dos
- The calendar feed: if you make a calendar link on the to-do page, your dated to-dos and your wedding's events are at a private address that your calendar app (Apple, Google, Outlook or another) fetches. Anyone with that address can read it, so keep it to yourselves. Making a new link, or stopping it, ends the old one at once.
- Google Tasks: only if one of you turns it on, and then only for that one of you. The planner asks Google for permission to see, add, change and remove your Google Tasks. It keeps one list there, called "Wedding": it puts each to-do's name and date in it, and reads back what you've ticked, when you open the planner and once a day. Google's permission covers all your Google Tasks, not only that list: the planner can read and change them, but uses only the "Wedding" list. The permission is kept encrypted with your wedding's key. Turn it off at any time in the planner, and we ask Google to cancel the permission; you can also remove it in your Google account.
- Google Sheets: if you choose "Open in Google Sheets", the planner makes a new spreadsheet of your plan in your Google Drive. Google lets it see only the files it makes, never the rest of your Drive, and the permission is used once and not kept.
What we get from Google is used only for these things, never for adverts and never to train AI, and isn't passed to anyone else. The Big Day Plan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How it's kept safe
- Everything is held on Cloudflare's servers in the EU.
- Contact details, needs, and the private parts of your plan (notes, how likely someone is, who's on which list) are encrypted one by one, with a key for your wedding alone, so a copy of the database on its own shows none of them.
- Only you and the people you invite can open your plan. Helpers see your guests, never your money, notes, or who's most or least likely.
- Nothing you type is written to our logs.
- Your phone or computer keeps an encrypted copy of your current plan, so it opens without a connection. "Forget this device" removes it.
Your own AI
If you connect your own AI assistant (such as Claude), it reads and changes your plan only when you add it and only as you ask; the assistant's own provider handles what you say to it under their own terms. The changes your AI asks for can be held for your OK: a held change is kept with your wedding, encrypted, with your AI's words for it, until one of you approves or rejects it, and for 30 days after that.
Card payments
If you take card payments from your guests, that's through your own Stripe account, set up with Stripe. We keep your Stripe account's number and a record of each payment, never card or bank details.
How long
Your wedding's details are deleted automatically six months after the wedding, or two years after you last saved it if it never got a date, or sooner if you ask. You can download your whole plan at any time before then.
Your rights
You can see, download, correct or delete what we hold, or object to how it's used, by asking us. If you're unhappy with how we've handled it, you can complain to the Information Commissioner's Office (ico.org.uk).
The legal bits
We use your details to run the planner you've asked for (a contract with you), and your guests' needs only with their own consent. The companies that handle your details for us: Cloudflare (hosting in the EU, and sending our emails); Amazon SES (sending email, only if Cloudflare's can't); and Google, only for what you choose to connect to it, as above.