Privacy policy · Giftio

This policy explains what Giftio collects, why, who helps us run it, where it is stored and the choices you have. It covers the Giftio app on iPhone and Android and this website, mygiftio.com.

Who we are

Giftio is run by FractalX Technologies FZ-LLC, of Ras Al Khaimah, United Arab Emirates, the controller of your personal data.

Questions about this policy or your data: admin@fractalx.io.

What Giftio collects

When you have an account

Your email address, and how you sign in (Apple, Google or an emailed code).
Your profile: display name, @handle, photo, birthday (day and month, the year if you add it), clothing, shoe and ring sizes, favourite colours and preferences.
Your wishlist: the wishes you add, with their links, photos, prices and notes.
The people you connect with or block, the events you join, and the wishes you include in them.
Gifts you say you'll get, group gifts you join, and the budgets and spending you log. Budgets and spending are private to you.
Occasions you save, and, only if you choose to import them, events from your phone's calendar.
Your device's push notification token, your time zone and your language.
Crash reports, and first-party usage analytics that hold IDs, not your name or email. You can turn analytics off in the app.
With your consent only, your device's advertising identifier, used by the ad network (see How we use your data).

When you use a shared link without an account

If you say you'll get a gift: the name you type and, if you give it, your email address for an undo link and updates about that event.
Your IP address, to limit repeated attempts, and a Cloudflare Turnstile check that you are a person, not a bot.

What Giftio doesn't collect

Your location.
Your contacts. When you invite someone from your phone's contacts, your phone sends them a link; nothing is uploaded.
A phone number for your account.

Giftio has no passwords for you to remember. You sign in with Apple, with Google, or with a 6-digit code we email you, which expires after 10 minutes.

Sign in with Apple

Apple shares a stable Apple user ID and your email address, or a private relay address if you choose Hide My Email. Apple may also share your name the first time. We keep the Apple user ID alongside your account so you can always sign in, and email sent to a relay address reaches you through Apple. When you delete your account, we revoke Giftio's Apple sign-in token.

Sign in with Google, and how Giftio uses Google user data

When you choose Sign in with Google, Google confirms your email address to Giftio and shares the basic profile that comes with Google sign-in: your name and a link to your profile picture. Giftio asks for no other access to your Google Account: not your contacts, calendar, Gmail or files.

Giftio uses your email address to create your account, to sign you in, and to keep one account per address.
Your sign-in record keeps the email address, name and picture link that Google sent. Your Giftio profile (display name, @handle and photo) is what you enter in the app.
Google user data is stored with your account in London and deleted when you delete your account.
Giftio does not sell Google user data, does not use it for advertising, and does not share it with anyone except the processors listed below that run Giftio.

Giftio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sign in with an emailed code

We send the code to the address you type, through our email provider, Resend. Typing the code proves the address is yours.

How we use your data

To run Giftio for you: your wishlist, connections, events, gifts you'll get and group gifts, and the links you share.
To send notifications you've allowed, by push and by email, and reminders before occasions. You choose which ones in the app's settings.
To keep Giftio safe: reports, blocks, suspending accounts that break the terms, rate limits and bot checks.
To fix crashes and understand how Giftio is used, unless you turn analytics off.
To show ads in the app. Personalised ads appear only if you agree on the consent screen (and, on iPhone, allow tracking), and only if your birthday says you are 18 or older. Everyone else sees ads that are not personalised. Your wishlist, events, gifts, group gifts and budgets are never used to target ads or sent to an ad network.

We rely on these legal bases under UK data protection law: our contract with you, to provide the account and the features you use; our legitimate interests, to keep Giftio secure and to understand how it is used; and your consent, for personalised ads and tracking, which you can withdraw at any time.

What other people see

Your profile is visible to the people you connect with and to members of events you share. Someone you block sees nothing.
Your wishlist is private until you share it. Then your connections, and anyone you send the link to, can see your shared wishes. You can reset the link or turn sharing off at any time.
Someone who opens one of your links without an account sees your name and photo and your shared wishes, never your other details.
You never see who is getting which of your wishes: not in your account, on your public links, through the app's servers, in live updates or in notifications. Public web pages never show who is getting what, to anyone.

Who processes your data

These companies run parts of Giftio for us and process data only to do that:

Supabase: Giftio's database, sign-in, file storage and server functions, in London.
Resend: sends Giftio's emails, such as sign-in codes, invitations and updates.
Google Firebase Cloud Messaging and Apple Push Notification service: deliver push notifications to your device.
Vercel: hosts this website.
Cloudflare Turnstile: checks that this website's forms are used by people, not bots.
Sentry: crash and error reports.
PostHog (EU): usage analytics, unless you turn them off.
Google AdMob: the ads in the app, personalised only with your consent.
Apple and Google: when you use them to sign in.

Where your data lives

Giftio's database, file storage and sign-in run in London, in the United Kingdom. Some of the services above may handle data outside the UK, such as email delivery, push notifications and crash reports; where they do, the transfer relies on the safeguards UK data protection law requires.

How long we keep it

Your account and everything in it: until you delete your account.
A guest's email address: used only for that gift, and deleted 90 days after the event date.
Sign-in codes: 10 minutes.
Encrypted monthly backups of the database may hold a copy of deleted data until they are replaced.

Deleting your account

You can delete your account at any time in the app (Me, then Account & privacy, then Delete account) or at mygiftio.com/delete-account. Deletion is immediate:

Your profile, photo, wishlist and wishes, budgets and spending, occasions, devices and connections are deleted.
Gifts you said you'd get are released, and the people who can see that wish are told, never its owner.
You leave the group gifts you joined. Events you organise pass to their longest-standing member, or are deleted if no one else is in them.
If you signed in with Apple, Giftio's Apple sign-in token is revoked.

Your rights

Under UK data protection law you can ask for a copy of your data, have it corrected or deleted, object to or restrict how it is used, and take it with you.

Copy: in the app, Me, then Account & privacy, then Download my data; we email you a file.
Correct: edit your profile and wishes in the app.
Delete: see Deleting your account above.
Analytics: turn them off in the app. Ads: change your choice on the consent screen and, on iPhone, in Settings.
Anything else: write to admin@fractalx.io.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

You must be 13 or older to create a Giftio account, and you confirm this when you sign up. Nobody under 18, going by their birthday, sees personalised ads.

Security

Data travels encrypted. Every table in the database is closed by default and opens only to the people a rule allows. Shared links use long random tokens that you can reset. No system is perfectly secure, so tell us at admin@fractalx.io if you find a problem.

Changes to this policy

When this policy changes, we update this page and the date at the top.

Contact

FractalX Technologies FZ-LLC, through admin@fractalx.io.