Last updated October 5, 2026

Your event details are personal.

Cerebra Enterprises, LLC operates Hostwelly. This notice explains the information we handle to provide the app and invitation experience for lunches, business events, celebrations, dinner parties, and other gatherings. Event plans are saved on your device and synchronize with your account when the service is available.

Information you choose to add

You may add account details, household and event details, guest contact information, dietary and accessibility notes, relationships, seating preferences, menu notes, schedules, music links, and photographs. Please add another person’s information only when you have a reasonable basis to do so, and avoid recording details you do not need.

Account and service data

Sign in with Apple supplies a stable account identifier and, depending on your choice, a name or relay email address. The service also handles short-lived access credentials, hashed refresh credentials, request identifiers, coarse security logs, and operational data needed to prevent abuse and keep the service reliable.

Purchases and access

Apple processes payments. Hostwelly does not receive your payment-card or bank-account details. To verify purchases, restore access, and prevent duplicate redemption, we store Apple transaction and original-transaction identifiers, product identifiers, signed purchase proof, price and currency, purchase and renewal dates, expiration or revocation information, and an opaque identifier associated with your Hostwelly account. A One Evening purchase is also associated with the identifier of the gathering it unlocks. A hosting-frequency choice may accompany purchase verification. These purchase records do not include your guest notes, photographs, or private event content.

How the app is used

We collect a limited set of first-party events about onboarding, hosting-frequency selections, the access screen, purchases, and restores to understand where the experience works and where it needs improvement. These events can include prices and currency, the selected or recommended plan, and the frequency-based comparison shown in the app. Each app launch uses a new random session identifier; the event stream does not include account identifiers, names, email addresses, gathering titles or dates, guest details, advertising identifiers, or purchase receipts. We do not join these sessions to account records or use them for advertising tracking.

Usage events are scheduled for deletion from our service after 90 days. The app keeps a bounded local queue of up to 200 records for delivery, plus limited purchase context while an Apple purchase is pending. Security rate limits use short-lived, scoped hashes, including hashes derived from a connecting IP address; the analytics records do not store raw IP addresses. Our hosting provider also processes network requests to operate and protect the service.

Advertising measurement

We advertise Hostwelly on Facebook and Instagram. To learn which ads bring people to the app, the iOS app includes Meta’s software development kit, which sends Meta a small set of events: that the app was installed or opened, that onboarding was finished, that a purchase was started, and that an App Store purchase was completed, with the plan, price, and currency. Meta’s software also sends an identifier it creates for this installation of the app and technical details such as the device model, operating system, app version, language, and time zone, and Meta receives the network address used to reach it. These events never include your name, email address, Hostwelly account, gatherings, guests, notes, or photographs.

If your App Store country or your device’s region is in the European Economic Area or the United Kingdom, Hostwelly asks first. Meta’s software doesn’t run and nothing is sent to Meta unless you allow it, and we rely on that consent. Elsewhere, measurement is on unless you turn it off. Wherever you are, you can change your choice at any time under Ad choices, on the membership screen or in Settings. Turning it off stops further events, and what Meta’s software stored on your phone is deleted by the next time Hostwelly opens.

Hostwelly does not ask for permission to track you across other companies’ apps and websites, and it does not read your device’s advertising identifier. Meta uses these events to attribute and improve our ads, including through Apple’s SKAdNetwork, under its own privacy policy. Removing the app deletes the identifier Meta’s software stored on your device.

Invitations

An RSVP link reveals only the details the host elects to publish, such as the event name, date, arrival time, host note, and optional location guidance, menu preview, or shared-photo album. A guest can submit an RSVP, plus-one name when allowed, and dietary note. Invitation secrets are stored as one-way hashes and may be revoked or expire.

Shared event photos

When a host enables photo sharing for a personal invitation, a guest who has accepted can use that RSVP link to see and add photos to the event’s private album. Hostwelly prepares a resized JPEG copy and removes common embedded metadata, including location and camera details, before private storage. The host can see which invited guest submitted a photo; other guests see only “You,” “A guest,” or “Your host.” The host may remove any album photo, while an eligible guest may remove only a photo added through their own link. Revoking the invitation or changing the RSVP blocks that guest’s access but does not automatically erase a photo already shared with the host.

Cloud and AI processing

Cloudflare provides the application service, database, private object storage, and security edge used for synchronization, purchase verification, and usage events. Apple provides sign-in and payment services. If optional AI-assisted drafting is enabled and you request it, the information necessary for that request may be sent through Cloudflare AI Gateway to the enabled model provider. Seating, timing, and dietary checks use deterministic logic. Shared event photos are not sent to a model. We do not enable model requests containing private event information unless the provider and its data-handling settings have been disclosed for that feature.

How information is used

Information is used to provide synchronization, invitations, uploads, purchase access and restoration, optional writing assistance, support, fraud prevention, and service reliability. The limited usage events described above help us improve the app. Hostwelly does not sell personal information or use your guest notes or event photos to build advertising profiles. Apart from the advertising measurement events described above, which go to Meta, we do not share usage data with advertising networks, and we never share it with data brokers.

Retention and control

You can edit or remove events and guests in the app and initiate account deletion from account settings. Account deletion removes your identity, sessions, and household-owned event data and shared photo copies. Interrupted file deletion is retried. Removing an attendee can remove their attribution without deleting a photo they previously shared.

Account deletion also removes the account link, signed purchase proof, hosting-frequency value, and price and currency from our purchase records. We retain limited transaction-ownership records, including opaque transaction, account-token, and gathering identifiers, product and environment, and relevant purchase-state dates, as needed to prevent receipts being reassigned or redeemed twice and to process refunds or revocations. These retained records do not contain names, email addresses, guest content, or photographs. Apple maintains its own purchase records. Deleting your Hostwelly account does not cancel an Apple subscription; manage or cancel it in your Apple account subscription settings.

Usage events are not linked to your account and follow the 90-day deletion schedule above. Local onboarding preferences, pending purchase context, and the device purchase ledger may remain after account deletion; removing the app clears its ordinary local storage, while system-protected purchase information may persist separately. Contact us if you need help understanding or exercising a privacy right that applies where you live.

Security

Hostwelly uses encrypted transport, household-scoped authorization, short-lived access credentials, rotating refresh credentials, hashed public links, and private object access. No system can promise absolute security, so please contact us promptly if something looks wrong.

Questions

Contact Cerebra Enterprises, LLC at support@hostwelly.com or use the support page for privacy questions and requests. Do not send passwords, purchase credentials, private invitation links, or guest notes. This notice will be updated when the service or its legal obligations materially change.