GIFTbase Privacy Policy

Last updated: October 19, 2026

1. General Provisions

This Privacy Policy (the "Policy") describes how the GIFTbase mobile application (the "Application") collects, uses, and protects your personal data. By using the Application, you agree to the terms of this Policy. This Policy also applies to the web version of wishlists at giftbase.app: it uses the same account and the same data as the Application.

2. Data We Collect

We collect data that you provide to us directly, as well as data collected automatically:

• Account Data: Information obtained when you register via third-party services (Google, Apple), including your name, email address, and profile picture.
• Data About Others: Information you enter about your close ones (names, birthdays, gender, profession, interests, survey answers, etc.) to enable the gift generator. By entering this data, you confirm that you have the right to provide it.
• Product Links: When you add a gift by link, the Application requests the product page from the store to fill in the name, photo and price. If that fails from your device, our server requests the page instead. The store receives only the link itself, as with an ordinary page visit.
• Contact Data: With your explicit permission, we may access the contacts on your device to simplify adding information to the Application.
• Technical Data: Information about your device's language and region settings, app usage analytics, and technical identifiers. We do not collect precise GPS location data.
• Secret Santa: your name and avatar in the game, wishes, the wishlist you choose to share and messages in the anonymous chat between a Santa and their recipient. The game’s title and meeting place set by the organiser are visible to all players. On the website you can take part without signing up — an anonymous account is created for that. If gifts are sent by mail or to pickup points, a player can add a pickup point or mailing address, the recipient’s name and a phone number: only their Santa sees them, and only after the draw. The address is deleted 30 days after the exchange date, or together with the game if no date was ever set. Chat messages are deleted 60 days after the exchange date; a message sent later is deleted 60 days after it was sent. A game with all its data — players, wishes, chat and wishlists shared with the Santa — is deleted after 60 days without activity, but no earlier than 60 days after the exchange date.

3. Use of Artificial Intelligence (AI)

To generate personalized gift ideas and scenarios, we use AI models from leading third-party providers.

• Profile data (including interests, etc.) is transmitted to the AI only at the moment of your request to generate the result.
• Secret Santa wishes are passed to the AI the same way: only when gift ideas are being picked for a player.
• Important: We do not use your personal data or the data of your close ones to train public AI models, and we require the same commitment from our technology partners.

4. Advertising and Affiliate Links

We do not show ads in the Application and do not sell your data. To measure the effectiveness of our own advertising campaigns, we use standard install analytics tools: they receive technical device data and information about in-app events (such as an install or a purchase), without your name or email.

In the curated gift ideas section, we may place affiliate (referral) links to third-party marketplaces. These clicks are anonymous and are not linked to your personal profile in the Application.

5. The giftbase.app website: cookies, analytics and emails

Without your consent the website keeps only an anonymous visit count: the server records the page address, the domain of the site you came from, your device type (phone or computer) and clicks on links to stores. These records contain no IP address, cookies, identifiers or browser data, so they cannot tell who you are.

Analytics cookies are enabled only after you press “Accept” in the banner at the bottom of the page: until then no third-party scripts are loaded and no requests are sent to analytics services.

With your consent we use Yandex Metrica to understand which pages are useful and which are not: anonymised data about page views, referral source, device and browser. We do not use this data for advertising and do not link it to your account in the app.

You can change your decision at any time via the “Cookie settings” link in the site footer. Technically necessary storage (your cookie choice and a local cache of gift collections so they are not re-fetched on every visit) stays in your browser and is not transmitted anywhere.

GIFTbase emails. If the “Gift guides by email” switch stays on when you sign up on the website, we may send gift ideas for upcoming holidays and GIFTbase news to your account email. If you turn it off, we don’t send such emails. You can withdraw consent at any time via the “Unsubscribe” link in any email or by writing to support@giftbase.app.

6. Payment Data

We do not collect or store your credit card information. All transactions are processed exclusively through secure, built-in platform systems (Apple In-App Purchases, Google Play Billing) or authorized third-party payment providers. We receive only a system confirmation of successful payment.

7. Data Sharing with Third Parties

We do not sell your personal data. Data is shared with third parties only in cases necessary to operate the Application (e.g., cloud infrastructure, AI, payment and analytics providers) or if required by applicable law in response to a valid request by law enforcement authorities.

8. Storage and Security

We use modern technical measures to protect your data, including encryption in transit. Data is stored using reliable cloud infrastructure. By accepting these terms, you consent to the possible cross-border transfer of data necessary for the functionality of the Application.

A Secret Santa chat is visible only to its two participants. We look at a message only when it has been reported, to review the report. Chats are deleted automatically 60 days after the gift exchange date (a message sent later, 60 days after it was sent); the organiser can delete the whole game at any time.

9. Your Rights and Data Deletion

You have the full right to access, correct, and delete your personal data. The Application provides an automatic deletion feature. You can also find detailed instructions in our Data Deletion Policy.

Deleting your account also removes you from all Secret Santa games; games you organised are deleted entirely, for all players.

After you delete your account, we keep minimal technical records without your name or email for 90 days to protect the service from abuse; after that they are deleted automatically.

You can revoke permissions for contacts or push notifications at any time in your device settings.

10. Children's Privacy

Our Application is not intended for individuals under the age of 13. We do not knowingly collect personal data from children under 13 without verified parental consent. If we become aware of an accidental collection of such data, we will immediately delete it.

11. Changes to this Policy

We may update this Policy periodically. In the event of significant changes, we will notify you through the Application interface. By continuing to use the Application, you agree to the updated version of the Policy.

12. Contact Information

If you have any questions regarding your privacy, please contact us.

Support Email: support@giftbase.app