Privacy policy

What we collect

• Your account: name, email address, phone number (optional) and, if you use Google sign-in, your Google name, email and profile photo.
• People you send to: recipient names, phone numbers, delivery addresses, relationship and any birthdays or anniversaries you save, including ones you choose to import from your phone's contacts.
• Orders: the gifts you buy, delivery dates, card messages, notes for our team, promo codes, wallet credit and payment status.
• Media you add: video messages, voice notes and photos you attach to a gift, photos you send in support chat or when reporting a problem.
• Delivery proof: a photo the courier takes at delivery, and the courier's live location while your gift is on the way. We never track your own location.
• Device: a push-notification token so we can send order updates, and basic technical logs needed to run the service.

We do not collect or store your card details. Card payments are handled by Safepay on their secure page.

When you import birthdays, contacts are read on your phone and only the people you select are uploaded.

How we use it

• To take, deliver and track your orders, and to show the recipient their gift page.
• To keep your messages sealed until delivery, then show them to the recipient.
• To send notifications about your orders, refunds, support replies and the dates you saved.
• To run your wallet, referrals and promo codes, and to handle support requests, problem reports and refunds.
• To prevent fraud and keep the service secure.

We do not sell your personal data or use it for advertising.

Who we share it with

• Couriers see the recipient's name, phone and address for the delivery they are assigned.
• Recipients see the gift, your message, video, voice note and photos (after delivery) and your name unless you send anonymously.
• Service providers: Vercel (hosting and media storage), MongoDB Atlas (database), Safepay (card payments), Google (sign-in) and Firebase (push notifications).
• Authorities, if the law requires it.

How long we keep it

We keep your account data while your account is open. Order records are kept as long as needed for accounting and legal reasons. When you delete your account we remove your personal details, saved people and media, and keep only anonymised order totals.

Your choices

• Edit your name and phone, and add or remove saved people, in the app.
• Turn notifications off in your phone's settings at any time.
• Ask for a copy of your data, or delete your account.

Security

Data is sent over encrypted connections (HTTPS), passwords are stored hashed, and access to customer data is limited to staff who need it.

Children

Giftino is meant for people aged 18 and over. We don't knowingly collect data from children.

Contact us

Questions about your privacy? Message us on WhatsApp at +92 314 4724681.

We may update this policy. Changes will be posted on this page with a new date.