Privacy Policy

1. About this policy

This policy explains how Rukn ("we", "us", or "our") handles personal information when you use joinrukn.com, the Rukn mobile application, or contact us. Rukn is the controller for the information described here. Questions and privacy requests can be sent to support@joinrukn.com.

2. Information we handle

• Account and sign-in information: your name, email address, account identifier, and profile details. If you use Google or Apple sign-in, that provider sends us the account information you approve. Passwords are handled by Supabase Auth; we do not have access to your readable password.
• Enquiries and communications: the name, email address, optional phone number and event date, and message you provide when contacting a venue or vendor, plus messages you send to Rukn.
• Planning and preference data: information you choose to save, such as your wedding date and city, guest estimate and guest list, budget, checklist, day plan, and saved listings. The mobile app can keep limited onboarding preferences on your device before you sign in.
• Business listing data: business and contact details, service information, pricing, and images submitted by a business or obtained from its public website. We keep source information so listing facts can be reviewed.
• Technical service data: essential session or authentication tokens and request information that our hosting and backend providers may process, such as IP address, browser or app version, operating system, request time, and error details. This supports service delivery, security, and troubleshooting.
• Listing image requests: some approved listing images are served directly by the business's website or an approved storage provider. We do not use stock photos for listings. Loading an image can disclose ordinary request data, such as your IP address and device/browser details, to that image host.

The current website and mobile app do not include advertising or a behavioural analytics SDK. The mobile app does not request access to precise device location, contacts, or the photo library. We do not make decisions about you that have legal or similarly significant effects using solely automated processing.

3. How and why we use information

• Provide accounts, saved lists, planning tools, and support.
• Record an enquiry you submit and route it to a verified business account or to the Rukn team for assistance. Send a receipt and maintain delivery status so failed emails can be reviewed.
• Operate, secure, troubleshoot, and improve Rukn and prevent misuse.
• Review, publish, correct, verify, or remove marketplace listings.
• Meet legal obligations and establish or defend legal claims where necessary.

4. Lawful bases

Depending on the activity, we rely on one or more of these bases:

• Contract: to provide the account, enquiry, and planning services you request.
• Legitimate interests: to run and secure the service, maintain an accurate business directory, answer support requests, understand service performance without behavioural tracking, and prevent fraud or misuse. We consider the impact on people before relying on this basis.
• Consent: where we specifically ask for it. You can withdraw consent at any time, without affecting processing that already took place.
• Legal obligation: where applicable law requires us to keep, use, or disclose information.

5. When information is shared

• Supabase: database, authentication, server functions, and file storage.
• Vercel: website hosting, delivery, and associated security logs.
• Resend: transactional email delivery, including your enquiry details and email address. A delivery provider accepting an email does not guarantee it reaches an inbox.
• Google or Apple: only when you choose the relevant sign-in service. Their own privacy terms also apply.
• Listing image hosts: your device contacts the relevant host when it loads an externally hosted, approved image.
• Authorities or professional advisers: when reasonably necessary to meet a legal obligation, protect rights or safety, or handle a legal claim.
• A successor organisation: if Rukn is involved in a merger, acquisition, financing, or sale, subject to appropriate confidentiality and notice requirements.

When you enquire, your message and contact details are shared with the selected business through its verified account, or with the Rukn team to help route it where the profile is not claimed. The team receives an operational copy. An enquiry is not a marketing subscription. We do not sell personal information or share it with third parties for cross-context behavioural advertising.

Service measurement and local drafts

We count broad website actions such as searches, planner starts and listing submissions. Our first-party counters store only a day, event category and total, not your search terms, religion-related filters, email, account identifier, full URL or a persistent visitor identifier. Our counter respects your browser’s Do Not Track setting. Hosting providers still process ordinary request logs as described above.

Before you submit, planner and business forms may keep a draft on your device. A submitted listing or saved planner is stored in your account. Business drafts remain on that browser until submitted or browser data is cleared; avoid shared devices for private drafts.

6. International processing

Our providers may process information in the UK, the European Economic Area, the United States, or other locations described in their service terms. The locations and transfer safeguards depend on the provider, project settings, and service terms. Contact us for current details and information about the safeguards relevant to your data.

7. Retention and deletion

We keep personal information only for as long as needed for the purposes above. The period depends on whether your account remains active, whether the information is needed to provide a requested service, resolve a dispute, maintain security records, or meet a legal obligation.

• Account and planner data is normally retained while your account is active and deleted when your account is deleted, subject to limited legal or security exceptions.
• The mobile app includes an in-app account deletion control. You can also request deletion using the contact address below.
• Provider logs and backups follow the providers' operational retention schedules and are removed or overwritten over time.

8. Cookies and local app storage

The website uses strictly necessary cookies for sign-in, session continuity, and security. The mobile app uses local storage for its session and limited preferences. We do not currently set analytics or advertising cookies. Blocking or deleting essential storage may sign you out or prevent account features from working. If we add non-essential cookies later, we will update this policy and request consent where required.

9. Your choices and rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict, or receive a copy of your personal information, and to object to certain processing. If we rely on consent, you can withdraw it. These rights can have legal exceptions.

You have the right to object to processing based on legitimate interests. You also have an absolute right to object to direct marketing.

Email support@joinrukn.com to make a request. We may need to verify your identity. We aim to respond within one month where the UK GDPR timeframe applies.

10. Security

We use access controls, encrypted connections, authentication, and provider security features intended to protect personal information. No online system can be guaranteed completely secure, so please use a unique password and tell us promptly if you suspect unauthorised account access.

11. Changes and complaints

We may update this policy when the service or our practices change. We will publish the new version here, update the date above, and provide additional notice when a change materially affects how we use personal information.

Please contact us first if you have a concern. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

12. Contact