Introduction

Gift Marshal ("Gift Marshal," "we," "us," or "our") operates the Gift Marshal mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Information We Collect

Information You Provide Directly

Account Information

• Full name
• Email address (may be masked if using Sign in with Apple)
• Username
• Profile picture (optional)

Event Information

• Event titles and descriptions
• Event dates and locations
• Event type (e.g., Birthday, Wedding, Secret Santa)
• Participant lists and roles

Wishlist Information

• Wishlist titles and descriptions
• Item names, descriptions, and notes
• Product URLs and retailer information
• Price ranges and priorities
• Item images you upload

Gift Coordination Data

• Gift claims (which items you've claimed)
• Purchase status
• Gift history records
• Group gift contribution amounts and notes

Guest Information

If you use the App without creating an account ("Guest Mode"), we collect:

• Name you provide when claiming items
• Email address (for claim management and account linking)

Information Collected Automatically

• Push notification tokens (Firebase Cloud Messaging tokens)
• Device type and operating system version
• Viewing presence (when you're actively viewing a wishlist)
• Timestamps of actions (for sync and display purposes)

Information from Third-Party Services

Sign in with Apple

When you sign in with Apple, we receive a unique user identifier, your name (as you choose to share it), and your email address (which Apple may mask at your request). Biometric data is processed entirely by Apple on your device and is never transmitted to us.

Apple App Store

For premium purchases, Apple provides us with transaction identifiers and purchase status. We do not receive or store your payment card information.

How We Use Your Information

• Provide Core Functionality: Create and manage events, wishlists, and gift coordination
• Enable Gift Coordination: Track claims to prevent duplicate gifts while keeping surprises hidden from recipients
• Send Notifications: Deliver event reminders, claim notifications, and Secret Santa assignments
• Process Purchases: Verify and maintain premium subscription status
• Provide Customer Support: Respond to your requests and resolve issues

How We Share Your Information

With Other Users

Depending on your participation in events, other users may see your name, profile picture, wishlists (based on privacy settings), and messages you send in event chats.

Important Privacy Features:

• The wishlist owner cannot see who claimed their items (preserves the surprise)
• In Secret Santa events, participants cannot see assignment pairings (only their own)
• Group gift contributor names are visible only to other contributors, not the recipient

With Service Providers

We use Firebase (Google Cloud) for authentication, database storage, image hosting, and push notifications. Firebase data is stored on servers in the United States.

Data Retention

Data Type	Retention Period
Account Data	Until you delete your account
Event Data	Until deleted by organizer, or 1 year after event date if inactive
Claims Data	Until released, purchased, or event is deleted
Guest Data	Indefinitely, until account creation or deletion request
Transaction Records	7 years (for legal and tax compliance)
Diagnostic Logs	90 days

Your Rights and Choices

Access and Export Your Data

You can export all your personal data at any time through the App: Go to Settings > Export My Data.

Delete Your Account

You can request account deletion at any time: Go to Settings > Delete Account. Your profile, events, and wishlists will be deleted within 30 days.

Guest Data Deletion

If you used the App as a guest and want your data deleted, contact us at seisembay@proton.me with the email address you used for claims.

Data Security

• All data transmitted between the App and our servers is encrypted using HTTPS/TLS
• Data at rest in Firebase is encrypted
• Authentication is handled through secure OAuth protocols
• Access controls limit who can view your data based on event participation

Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

International Data Transfers

Your information is transferred to and processed in the United States. By using the App, you consent to the transfer of your information to the United States.

California Privacy Rights (CCPA)

California residents have the right to know, delete, and opt-out of sale of personal information. We do not sell personal information. To exercise these rights, use the in-app features or contact us.

European Privacy Rights (GDPR)

Users in the EEA, UK, or Switzerland have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise these rights, use the in-app features or contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the "Last Updated" date.

Summary of Key Points

Topic	Our Practice
Advertising	None - we do not display ads
Analytics	Disabled - we do not track behavior
Data Sales	Never - we do not sell your data
Encryption	Yes - all data encrypted in transit and at rest
Data Export	Yes - export all your data anytime
Account Deletion	Yes - delete your account anytime

← Back to Gift Marshal