SubSetHai

Last updated 24 October 2026

Privacy policy

SubSetHai (subsethai.com) helps families in Lahore plan a realistic wedding budget and find vendors that fit it. This page explains, in plain words, what we collect, why, and how you can delete it. We do not sell your information, we do not show ads, and we do not use outside tracking tools. Using the website also means accepting our terms of use.

What we collect

Your plan

The answers you give the planner: the couple’s names, wedding month, city, functions, number of guests, venue level, day type and budget, and any changes you make. Without an account they stay in your own browser. If you save a plan, it is stored with your account.

Your account

If you sign up: your full name, username, email address and/or phone number, WhatsApp number (if you give one) and password. Your password is stored only in scrambled (hashed) form; nobody at SubSetHai can read it. We also record which of your contact details you have verified.

Signing in with Google or Facebook

If you choose this, the provider shares your name, email address and whether the email is confirmed, and may share a profile picture link. We use them only to create or sign in to your account. We never post anything on your behalf.

Your saved plans and listings

The plans you save, the listings you add to your list and the functions you save them for.

When you tap Call or WhatsApp

Which listing you contacted, by phone or WhatsApp, and when, so we can count interest in each vendor. If you are signed in, it is linked to your account. The call or chat itself happens in your own phone or WhatsApp app; we do not see it. A WhatsApp message is only pre-filled: you decide whether to send it. It mentions your number of guests and day type, never your budget.

Security records

To stop misuse (for example someone guessing passwords or asking for many codes), we keep a scrambled (hashed) form of the email or phone number used, the internet (IP) address and the time of sign-in and code attempts. Verification codes themselves are removed as soon as they are sent and are never written in logs.

Simple usage counts

To improve the website we count simple steps, in our own database: for example starting the planner, finishing each question, finishing a plan, opening the signup page, adding a listing to your list or opening “View all”. A count holds only the step’s name, the time and, for some steps, the listing, category, venue level or day type. It never holds your names, budget, guest count or anything you type, and never your IP address. If you are signed in, it is linked to your account.

Visits to the website

To see how many people visit and how they find us, we count each page opened, in our own database: the page’s address, the time, the website or link you came from (for example Google or Facebook), the kind of device, browser and system (for example a mobile phone with Chrome on Android), and your country and city as our hosting company estimates them from your connection. Your IP address itself is not stored. To tell one visit from the next, your browser keeps a random visitor number (kept for a year) and a visit number (ended after 30 minutes without activity); they hold no name or contact details. If you are signed in, a visit is linked to your account.

What we do not do

  • We do not sell or rent your information to anyone.
  • We do not give your details to vendors. You decide whether to contact a vendor.
  • We do not use advertising cookies or third-party tracking tools.
  • We do not use your plan or budget for anything other than showing you your plan and listings.

Who helps us run the website

Some companies process information for us, only to provide their service:

  • Supabase: our database, sign-in system and photo storage. The data is kept on its servers in Mumbai, India.
  • Vercel: hosts the website.
  • Text message, voice call and email services: deliver your verification codes to your phone or email.
  • Google or Facebook: only if you choose to sign in with them.

This means your information may be stored or handled outside Pakistan. We may also share information if the law requires it.

Cookies and your browser

We use the cookies needed for the website to work: to keep you signed in, and (before launch) to let the owner preview the site. We also use two of our own cookies to count visits, described above under “Visits to the website”. They are not shared with anyone and are not used for advertising. Your plan, your list and your progress in the planner are kept in your browser’s storage so they are not lost when you refresh. Logging out clears your list from the browser.

How long we keep it

  • Your account, plans and saved listings: until you delete your account.
  • Sign-ups that never verify an email or phone: deleted after 2 days.
  • Code requests: deleted within 1 day. Security records: deleted after 30 days.
  • Call and WhatsApp taps, usage counts and visit counts: kept, but when you delete your account they no longer point to you; they remain only as anonymous numbers.

Your choices

  • Use the planner without an account; then nothing that identifies you is stored with us, only the anonymous usage counts described above.
  • See and change your name, contact details and password on your Profile page.
  • Delete saved plans and listings at any time.
  • Delete your account and everything in it (below).

How to delete your data

Deleting your account is permanent and cannot be undone.

  1. Open the Delete account page (also in your Profile).
  2. Confirm it is you: enter your password, or a code sent to your verified email or phone.
  3. Type DELETE to confirm.

Your profile, saved plans, saved listings and your sign-in (including any Google or Facebook link) are deleted, and you are signed out. Your username, email and phone become free again. This also works if you can no longer log in. If you cannot use the page, contact us (below) and we will delete it for you.

Children

SubSetHai is meant for adults planning a wedding. Please do not sign up if you are under 18.

Keeping it safe

Connections to the website are encrypted (HTTPS). Access to stored data is limited by strict database rules, and our staff sign in with two-step verification. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Important changes will be shown on the website.

Contact us

Questions about your data, or a request to delete it: contact details will be added here before the website opens.