Privacy Policy
Last Updated: December 23, 2026
1. Introduction
Welcome to Giftpik ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
By using Giftpik, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide to Us
- Account Information: Email address, name, and password when you create an account
- Contact Information: Names, birthdays, anniversaries, and other dates you add for your contacts
- Gift Ideas: Gift descriptions, prices, links, and notes you save
- Photos: Images you upload for contacts or gift ideas
- Preferences: App settings and notification preferences
2.2 Information Automatically Collected
- Device Information: Device type, operating system, unique device identifiers
- Usage Data: App features used, time spent in app, crash reports
- Log Data: IP address, access times, app version
2.3 Information from Third Parties
- Authentication Services: If you sign in using third-party services, we receive basic profile information
- Payment Processors: For premium subscriptions, payment information is processed by Google Play Billing (Android) and Apple In-App Purchase (iOS). We do not store or have access to your payment card information. All payment data is handled directly by Google and Apple.
3. How We Use Your Information
We use the collected information for:
- Providing Services: To operate and maintain the Giftpik app functionality
- Personalization: To customize your experience and provide relevant reminders
- Notifications: To send you birthday and event reminders you've requested
- Account Management: To manage your account and provide customer support
- Improvements: To analyze usage patterns and improve our app
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Legal Compliance: To comply with applicable laws and regulations
4. Data Storage and Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
- Secure Storage: Your data is stored on secure servers provided by Supabase with encryption at rest
- Access Controls: Limited access to personal data, restricted to authorized personnel only
- Regular Security Audits: We regularly review our security practices
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With third-party vendors who help us operate our app (hosting, analytics, customer support)
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share specific information
- Protection of Rights: To protect our rights, privacy, safety, or property
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and personal data
- Data Portability: Request your data in a portable format
- Opt-Out: Unsubscribe from marketing communications at any time
- Notification Settings: Control which notifications you receive
To exercise these rights, please contact us at privacy@giftpik.app or visit our Account Deletion page.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide you with our services
- Comply with legal obligations
- Resolve disputes and enforce our agreements
When You Delete Your Account:
- Immediate (within 24 hours): Your account access is revoked and you can no longer log in
- Within 30 days: All personal data (contacts, gift ideas, photos, profile information) is permanently deleted from our servers and backups
- Confirmation: You will receive a confirmation email when deletion is complete
Data We May Retain Longer:
- Transaction records: Payment and subscription history may be retained for up to 7 years for tax and accounting purposes as required by law
- Aggregated analytics: Anonymized, non-identifiable usage statistics that cannot be linked back to you
Request Account Deletion: Click here to delete your account and data
8. Children's Privacy
Giftpik is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.
9. Third-Party Services
Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
Third-Party Services We Use:
AI-Powered Gift Suggestions
Our premium feature uses artificial intelligence to generate personalized gift recommendations. When you request AI gift suggestions, the following occurs:
- Data Sent to AI: Contact's name, age, gender, relationship type (e.g., friend, family), occasion (e.g., birthday), and any notes you've added about their interests
- AI Providers: We use Groq (LLaMA), OpenAI, or Anthropic (Claude) to process your request. The specific provider may vary based on availability and performance
- Data Retention: AI providers process your request in real-time and do not retain your personal data beyond the processing period. Your data is not used to train AI models
- Caching: We cache anonymized suggestion results to improve response times. Cached data does not contain personally identifiable information
AI provider privacy policies: Groq, OpenAI, Anthropic
Product Search Service
To provide real product recommendations with purchase links, we use SerpAPI to search for products on Amazon and other retailers:
- Data Sent: Gift keywords and search terms only. No personal information is shared with this service
- Purpose: To find relevant products with verified availability and pricing
SerpAPI privacy policy: Privacy Policy
Analytics
We use Mixpanel, a third-party analytics service, to understand app usage patterns and improve our services. Mixpanel helps us track:
- App feature usage (e.g., contacts added, gift ideas created, AI suggestions requested)
- User engagement and retention patterns
- Premium subscription conversions
- Wishlist sharing and viral growth metrics
What data is sent to Mixpanel:
- User ID (anonymized identifier, not your email or name)
- Event names (e.g., "Contact Added", "Gift Claimed")
- Event metadata (e.g., timestamp, platform)
- Aggregated counts (e.g., number of contacts, gift ideas)
What is NOT sent: Personal identifiable information (PII) such as names, email addresses, gift details, or contact information.
First-party analytics: This is first-party analytics (tracking within our app only, not across other apps or websites). No cross-app tracking is performed.
Data retention: Analytics data is retained according to Mixpanel's data retention policies. You can learn more at Mixpanel's Privacy Policy.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Giftpik, you consent to the transfer of your information to these countries.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access your personal information
- Right to equal service and price
Note: We do not sell personal information.
12. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right to access, rectify, or erase your personal data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your data includes: consent, contract performance, legal obligations, and legitimate interests.
13. Push Notifications
We send push notifications to remind you of upcoming birthdays and events. You can opt out of push notifications at any time through your device settings or in-app notification preferences.
14. Camera and Photo Library Access
Giftpik requests access to your camera and photo library to allow you to:
- Take photos of contacts
- Capture gift ideas when shopping
- Add images from your photo library
We only access your camera and photos when you explicitly choose to use these features. Photos are stored securely and are not shared with third parties.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending you an email notification (for material changes)
- Displaying an in-app notification
Your continued use of Giftpik after changes become effective constitutes acceptance of the revised Privacy Policy.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: