Privacy Policy

• We collect only what's needed to run gift lists and exchanges.
• We never sell your data and we don't run ads or tracking.
• Secret Santa draws are visible only to the giver. Claims and pledges are hidden from list owners.
• You can ask for a copy of your data, a correction, or full deletion at any time.

• Account: email, display name, @username, and your Google profile photo if you sign in with Google. If you use email + password, your password is stored only as a secure hash by our sign-in provider.
• Profile (optional): birthday, sizes, likes, dislikes, hobbies, allergies, gift hints and a shipping address.
• Events: names, dates, times, locations, budgets, members, RSVPs, exclusions, draw results and White Elephant game moves.
• Lists and gifts: titles, shop links, photos you upload, prices, notes, claims and group-gift pledges.
• Children's lists: names, birthdays, sizes and hints added by a guardian (see Kids' privacy).
• Messages: anonymous gift questions and answers, and Secret Santa messages.
• Technical: basic server logs (such as time and error details) used to keep the app running.

To provide Giftly's features: sign-in, sharing lists, running draws and games, showing gift previews, and sending the notification emails you've switched on. We don't use your information for advertising or sell it to anyone.

• Your draw result is visible only to you — not even organisers can see it.
• Claims and pledges are hidden from the list owner.
• Your shipping address is shown only to the person who drew you.
• Shared list links require sign-in and use long random codes. A link preview may show the list name and a few gift titles.
• Gift questions are anonymous: the list owner never sees who asked.
• The Giftly administrator can see account names and event/list titles to keep the app safe, but not draw results, claims or Santa messages.

• Lovable Cloud — hosting, database, sign-in and file storage.
• Google and Apple — if you choose to sign in with them.
• Email providers (including Resend) — to deliver sign-in and notification emails.
• Shop websites — our server fetches pages you link to so we can show a photo and price. The shop doesn't see your IP or email.

Our providers may store or process data outside Australia, including in the United States and Europe. We choose providers with strong security practices, and by using Giftly you consent to this transfer.

We use only what's needed to keep you signed in and remember small preferences. No advertising or tracking cookies. Details are on our Cookies page.

We send account emails (confirm sign-up, reset password) and the notifications you choose, like gift questions, list follows and event joins. You can turn notifications off in your profile at any time. Occasionally we may send an important service announcement.

Every piece of data is protected by per-user access rules, uploaded photos are kept private, and invite links can't be guessed. No system is perfectly secure; if we ever have a data breach likely to cause serious harm, we'll notify you and the OAIC as required by the Notifiable Data Breaches scheme.

Your data stays until you delete it or your account. When an event is deleted, its draws, claims and messages go with it. Backups are cycled out within about 30 days. See Delete your data.

You can ask to access or correct the personal information we hold about you, or have it deleted. Use our contact form and we'll respond within 30 days.

If you're unhappy with how we've handled a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We'll update this page and its date when things change, and tell you in the app or by email about anything significant.