Updated: 30 September 2026
Controller and scope
Longzhong Wu operates Fejola and is responsible for personal data in the website and app. Contact: [email protected]. This policy also covers invitations, greeting cards and support requests.
Data we process
We receive your provider ID, name and email from Apple or Google, and store account and session identifiers. We process profiles, follows, invitations, guest names, RSVP answers and votes, messages, greeting signatures, uploaded photos, reports and blocks you provide. Requests expose IP addresses, device/browser information and technical errors to infrastructure and SDK providers. Fejola does not read your address book or precise GPS location; event addresses are supplied by users.
Purposes and legal grounds
We use necessary data to perform our service contract: sign-in, hosting, guest responses, communication and storage. Security, abuse prevention, moderation and support rely on legitimate interests; statutory disclosures rely on legal obligations. Optional website analytics relies on consent, which you can withdraw on the cookie page. Supplying optional profile or content fields is voluntary; without required authentication data, online features cannot work. We do not sell personal data or use it for advertising profiles.
Who can see content
Hosts and authorized cohosts see guest responses and event content. Other guests see what the host enables. Public invitations, organizer profiles and discovery content may be visible and reshared by others; private links may also be forwarded. Direct messages are available to conversation members. Administrators review reports. Choose your audience before publishing and avoid unnecessary sensitive information.
Providers and international processing
Apple and Google handle sign-in under their own policies. Cloudflare R2 stores photos and media in an EU bucket; hosting infrastructure processes requests. Resend delivers email when enabled. Google Analytics processes consented website usage; the app has no Fejola analytics integration. Sign-in and sharing SDKs may process device, usage or diagnostic information under provider policies. Providers may process data outside the EEA; applicable transfer safeguards, including standard contractual clauses where required, must apply. Ask us for provider and transfer details.
Retention and deletion
Account and content data remain while needed to provide the service, until you delete content or your account. Sessions expire after 30 days; sign-in challenges after five minutes. Account deletion removes your hosted events, cards, responses, messages and photo records and invalidates sessions. Private photo objects are queued for deletion and retried after outages. Reports and audit evidence remain only while needed to investigate abuse, meet legal duties or resolve claims; backups remain until securely replaced. Copies saved by other people or providers are outside our control.
Your rights
Email [email protected] to request access, correction, erasure, portability, restriction or objection, or withdraw consent. We verify identity with minimum necessary information and normally respond within one month. You may complain to your local data protection authority. Delete your account in Account → Settings → Delete account. Apple authorization is revoked; signing in again creates a new account. We do not make decisions with legal or similarly significant effects solely by automated processing.
Security, children and changes
We use HTTPS, restricted access, private photo authorization and encrypted stored credentials. No system guarantees complete security. Fejola is not intended for children below the local digital-consent age; contact us about a child's data. Do not upload others' data without authority. We update this policy when processing changes and display the revision date here; contact [email protected] for questions or incidents.