Privacy Policy
Last updated: November 10, 2026
Who's Bringing (“we”, “us”) helps families and friends organize potluck gatherings. This policy explains what we collect when you use the website at https://whosbringing.app or the Who's Bringing iPhone app, and how it is used. In short: we only collect what the app needs to work, we don't show ads, we don't track you, and we never sell your data.
What we collect
- Your email address, used to send you sign-in codes and identify your account.
- Your name, as you enter it, shown to people in your groups.
- What you add to the app: group names, gathering details (title, date, time, host and location), dishes, servings, dietary tags and notes, including names you type for someone else (for example “Grandma”).
- Activity in your groups, such as “Sara is bringing saffron rice”, shown in the group's activity feed.
- Basic technical logs kept by our servers for security and troubleshooting (such as IP address, browser type and time of request). These are kept for a short period.
We do not collect your location, contacts, photos, payment information or advertising identifiers.
Who can see your information
- People in the same group see your name, the dishes you sign up for, and the gathering details.
- Group organizers can also see members' email addresses, so they can tell who is who.
- People outside your group cannot see anything in it. Groups can only be joined with the group's invite link.
How we use it
Only to run the service: signing you in, showing your groups and gatherings, and sending the sign-in emails you request. We don't use your information for advertising or profiling, and we don't sell or rent it to anyone.
Cookies and storage
The website uses two cookies that are strictly necessary: one keeps you signed in, and one lets the site know to show your groups instead of the welcome page. The iPhone app stores your sign-in on your device. We use no analytics, advertising or third-party tracking cookies.
Service providers
We use a small number of trusted providers to run the service:
- Amazon Web Services (United States), which hosts the website, app server and database.
- Resend, which delivers our sign-in emails.
They process data only on our behalf and only to provide these services.
Security
All connections use encryption (HTTPS). Sign-in codes are single-use and expire after 20 minutes, and they are stored only in hashed form. No system is perfectly secure, but we take reasonable steps to protect your data.
Keeping and deleting your data
We keep your information while your account exists. You can delete your account at any time in the app or on the website: sign in, then go to Your account → Delete my account on the home screen. This permanently deletes your account and the dishes you added. If you organize a group, another member becomes its organizer; a group with nobody else in it is deleted. You can also ask us to delete your data by emailing adam@adamtorabi.com.
Your rights
You can ask to see, correct or delete the personal information we hold about you by emailing adam@adamtorabi.com. If you live in California, the European Union or another region with privacy laws, you have these rights under those laws too, and we will not treat you differently for using them.
Children
Who's Bringing is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.
Changes
If we change this policy, we will update the date above and, for significant changes, let users know in the app.
Contact
Questions about privacy? Email adam@adamtorabi.com.