GiftSwap helps friends and families organize gift exchanges, share wishlists and celebrate together. This policy explains what we collect when you use the GiftSwap app and website, why, and the choices you have. We do not sell your personal information, and we do not show third-party advertising.
Information you give us
- Account details — your name, email address, password (stored only as a one-way hash) and an auto-generated @handle. If you sign in with Google we receive your name, email and Google account ID.
- Profile — an optional profile photo, birthday and gift preferences (sizes, favorite things, things to avoid).
- Events and wishlists — the events you create or join, their dates, budgets, optional location, cover images, participants you invite by email, and the items on your wishlists.
- Messages and photos — messages and images you post in an event chat.
- Support — anything you send us when you contact support.
Information collected automatically
- Push token — if you allow notifications, a device token so we can send you event and wishlist updates.
- Affiliate clicks — when you open a product in a partner store from inside the app, we record that click (product, store, time, IP address and browser user-agent) so the store can attribute any resulting purchase.
- Server logs — standard request logs (IP address, time, errors) kept for security and debugging.
We do not use third-party analytics or advertising SDKs, and we do not track you across other companies' apps or websites.
How we use it
- To run the app: create your account, run name draws, show wishlists to the people you share them with, and deliver chat messages and notifications.
- To send account email such as verification codes, password resets and invitations you ask us to send.
- To keep GiftSwap secure, prevent abuse and fix problems.
Who can see your information
Wishlists are visible to the friends and event participants you share them with, or to anyone with the link if you make a wishlist public. Name-draw results are only shown to the person who drew them. Event chat is visible to that event's participants.
Service providers
We share data only with providers that help us operate GiftSwap, and only what they need:
- Cloudinary — stores uploaded photos.
- Email delivery (Google Workspace / SendGrid) — sends account and invitation email.
- Apple Push Notification service / Expo — delivers push notifications.
- Anthropic — when you use “Write a card”, the occasion, tone and recipient first name you enter are sent to generate a suggested message. It is not used to train models.
- Partner stores (for example Amazon, Walmart, eBay) — when you open a product link, the store receives the visit under its own privacy policy.
- Google — if you choose Google Sign-In.
We may also disclose information if required by law.
Retention and deletion
We keep your information while your account is active. You can edit or remove profile details, wishlists and events in the app at any time. To delete your account and associated data, email [email protected] from the address on your account and we will complete the deletion within 30 days.
Your rights
Depending on where you live (including the EU/UK under the GDPR and California under the CCPA), you may have the right to access, correct, export or delete your personal information, and to object to certain processing. Contact us to exercise any of these rights; we will not discriminate against you for doing so.
Children
GiftSwap accounts are for people 13 and older. Parents can add a child's wishlist to their own account; the child does not get an account and we do not knowingly collect personal information directly from children under 13.
Security
Data is sent over HTTPS, passwords are hashed, and access to our servers is restricted. No system is perfectly secure, but we work to protect your information.
Changes
If we make material changes we will update this page and the date above, and tell you in the app.
Contact
Questions? Email [email protected].