Our Privacy Promise
- No ads, ever — Lekha is completely ad-free, which means we have no reason to collect or sell anyone's data to advertisers.
- You control what's collected — You choose what custom questions to ask on each RSVP (dietary needs, allergies, t-shirt sizes, etc.). Nothing is collected that you don't explicitly set up.
- No third-party tracking — We don't use tracking pixels, don't share data with marketing platforms, and don't build advertising profiles on your guests.
- No account required for guests — Guests RSVP via a simple link. They don't need to create an account, download an app, or hand over personal information beyond what you ask for.
- Data stays with your organization — Guest information is accessible only to the event host, not to other users or outside parties.
1. Introduction
Welcome to Lekha ("we," "our," or "us"). Lekha is a digital invitation and event management application operated by Thinkcomputing LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
By using Lekha, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Information You Provide
| Data Type | Purpose | Required? |
|---|---|---|
| Name | Account profile, displayed on invitations as host | Yes |
| Email Address | Account authentication, invitation delivery, notifications | Yes |
| Phone Number | Optional contact information for events | No |
| Event Details | Date, time, location, description of your events | Yes (to create events) |
| Guest Lists | Names and emails of people you invite | Yes (to send invitations) |
| Photos/Images | Event cover images uploaded or generated via AI | No |
2.2 Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers
- Usage Data: Features used, pages viewed, actions taken within the app
- Log Data: IP address, browser type, access times, crash reports
2.3 Information from Third Parties
If you sign in using Google or Apple, we receive your name and email address from those services. We do not receive or store your password.
3. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To create, send, and manage your event invitations
- Communication: To send invitation emails, RSVP notifications, and event reminders
- Account Management: To create and maintain your account
- Improvement: To analyze usage patterns and improve our Service
- Support: To respond to your inquiries and provide customer support
- Security: To detect and prevent fraud, abuse, and security incidents
4. How We Share Your Information
4.1 With Your Guests
When you send an invitation, the following information is shared with your invited guests via the public event page:
- Event details (name, date, time, location, description)
- Host name and optional contact information
- Event cover image
- Other guests' names and RSVP status (if you enable this feature)
4.2 Service Providers
We work with third-party service providers who assist us in operating our Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Google Cloud | Hosting, authentication, database, analytics | Account data, event data, usage analytics |
| SendGrid (Twilio) | Email delivery | Guest email addresses, invitation content |
| Google AI | AI image generation | Text prompts you provide (not personal data) |
4.3 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
- Encryption at Rest: Data stored in our database is encrypted using Google's encryption standards
- Access Controls: Only authorized personnel have access to user data
- Secure Authentication: We support secure sign-in via Google and Apple
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:
- Account Data: Retained until you delete your account
- Event Data: Retained until you delete the event or your account
- Guest RSVP Data: Retained with the associated event
- Usage Analytics: Aggregated and anonymized data may be retained indefinitely
7. Your Rights and Choices
Depending on your location, you may have the following rights:
7.1 Access and Portability
You can access your personal data through your account settings. You may request a copy of your data by contacting us.
7.2 Correction
You can update your account information at any time through the app.
7.3 Deletion
You can delete your account and all associated data by contacting us at [email protected]. We will process deletion requests within 30 days.
7.4 Marketing Communications
You can opt out of promotional emails by clicking the unsubscribe link in any email or adjusting your notification settings.
8. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers are located. By using Lekha, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.
9. Children's Privacy
Lekha is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: You can request information about the personal data we collect, use, and disclose
- Right to Delete: You can request deletion of your personal data
- Right to Opt-Out: We do not sell personal information, so this right does not apply
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact us at [email protected].
11. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:
- Right to access, correct, or delete your personal data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your data includes: your consent, performance of our contract with you, and our legitimate interests in operating and improving the Service.
12. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Effective Date" at the top
- Sending you an email notification (for significant changes)
Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. SMS / Text Messaging Program
Who sends the messages: Lekha, operated by Thinkcomputing LLC.
Types of messages: account alerts and event RSVP notifications.
How to opt in: Users opt in by entering their mobile number and checking the SMS consent box on the Lekha signup form at https://lekha.events. Consent is not a condition of purchase or use of our Service.
Message frequency: Message frequency varies.
Cost: Message and data rates may apply.
Opt-out: Reply STOP to unsubscribe at any time.
Help: Reply HELP for help, or contact [email protected].
We do not sell or share mobile opt-in information or SMS consent with third parties or affiliates for marketing purposes.
15. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us: