Replycard · Legal
Replycard Privacy Policy
Last updated: 8 July 2026
Replycard is a guest-list and RSVP app for weddings and events, made by Johan Pienaar, trading as Slatefox. This notice explains what data Replycard processes, for the couple using the app and for the guests who reply through a Replycard link. The short version: your guest list lives on your device; replies pass through our EU server only briefly, hold the minimum, and are deleted fast.
Who we are
Johan Pienaar, trading as Slatefox - a sole proprietorship (eenmanszaak) in the Netherlands
Stationsplein 65, 7641 ZW Wierden, The Netherlands
KVK: 83025472 · VAT/BTW: NL003765463B87
Email: support@slatefox.nl
The two halves of Replycard
The app (used by the couple). Your full guest list - names, households, contact notes, and the replies you've received - is stored only on your device, in the app's local database. Replycard has no user accounts and no sign-in. We cannot see your guest list.
The reply service (used by guests). So that guests can reply from a link without installing anything, a small server receives their answers. This is the only part of Replycard that processes data on our side, and it is deliberately minimal - described in full below.
What the reply service stores
When you publish an event, the server stores: the event title and date, the meal options you offer, and for each invited party a greeting line (e.g. "The Smith family") and how many seats you reserved for them. When a guest replies, it stores their answer: attending or not, headcount, meal choices, an optional dietary note, and an optional message to you.
It stores no guest email addresses, phone numbers, postal addresses, or payment details - the reply page doesn't even ask for them. Reply links contain a random code; the server stores only a cryptographic hash of it, so a copy of the database cannot be used to impersonate a guest or open their reply page.
Where it is stored
Reply data is stored with Cloudflare, in a database located in Western Europe, and is encrypted in transit and at rest. Cloudflare, Inc. is a US company; data transfers are covered by its certification under the EU-US Data Privacy Framework and Standard Contractual Clauses under its Data Processing Addendum. Cloudflare is our only sub-processor.
How long we keep it
As briefly as the product allows:
- Dietary notes and personal messages are deleted from the server about 7 days after the couple's app has collected them. From then on they exist only on the couple's device.
- The whole event - every stored reply and greeting - is automatically and permanently deleted 90 days after the event date.
- The couple can also delete everything immediately, at any time, from the app.
Legal bases
For guests, we process reply data to perform the service the couple and their guests are asking for - collecting their RSVP (legitimate interest / performance of a service). Dietary notes are provided voluntarily by the guest so the couple can cater for them; if you prefer not to share one, leave the field empty and tell the couple directly.
What we do not do
The reply page contains no analytics, no advertising, no tracking, no cookies, and no third-party resources of any kind. The app contains no tracking SDKs. We do not build profiles, and we do not sell or share data with anyone.
Purchases
Replycard offers a one-time in-app purchase to unlock the full version. Purchases are handled entirely by Apple through the App Store; we never see or store your payment details. Apple's processing of a purchase is governed by Apple's Privacy Policy.
If you contact support
If you email support@slatefox.nl, we receive your email address and whatever you include in your message, so we can help you. Legal basis: our legitimate interest in responding to you. We keep support emails only as long as needed to handle your request and for a reasonable period afterwards, then delete them.
Your rights
Under the GDPR you have rights to access, correct, delete, restrict or object to the processing of your personal data. Guests: the fastest route for a reply you've sent is your own reply link (you can change or blank your answer at any time) or asking the couple who invited you; you can also email us. Couples and guests can email support@slatefox.nl to exercise any right. You may also lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Children
Replycard is not directed at children under 16 and we do not knowingly collect their data. Headcounts may include children attending an event; no data about them is collected beyond a number and a meal choice entered by their parents.
Changes to this policy
We may update this notice from time to time. The "last updated" date above reflects the latest version.
Contact
Questions about your data or this notice? Email support@slatefox.nl.