Privacy Policy — giftstring

This privacy policy describes how giftstring ("we", "us", "the app") collects, uses, and protects information when you use the giftstring iOS app and its associated services.

What we collect

Account information. When you create a giftstring account, we collect your email address, display name, and (if provided) phone number. Authentication is handled by our identity provider, Clerk.

Recordings. When you record an audio or video message in the app, we store the recording in our cloud storage so it can be delivered to its intended recipient.

Recipient and collaborator data. Names, email addresses, and (when supplied) relationships of the people you choose to send gifts to or invite as contributors.

Usage and device information. Standard app telemetry — device model, OS version, IP address — collected automatically when you use the app, used to diagnose crashes and improve the product.

Consent records. We keep a record of the consent choices you make during onboarding and elsewhere in the app, with timestamps.

How we use it

To deliver the gifts you create, by emailing recipients a private link.
To authenticate your account and keep your data scoped to you.
To communicate with you about your account or the service when necessary.
To diagnose technical problems and improve the app.

What we don't do

We do not sell your data. We do not use your recordings to train AI models for any party other than features you have explicitly opted into within the app. We do not share your data with advertisers.

Where it lives

Account and metadata: hosted on Neon (PostgreSQL).
Authentication: Clerk.
Email delivery: Resend.
Audio and video recordings: Cloudflare R2.

These vendors process data on our behalf under their respective privacy and security commitments.

Your rights

View and update your display name and other account information from within the app at any time.
Delete an individual gift you've created (which removes its recordings, invitations, and collaborator rows from our systems).
Leave a gift you've been invited to (which removes your contribution).
Request full deletion of your account and all associated data by contacting us at the address below. We aim to complete deletion within 7 days.

Recordings already delivered to recipients remain with those recipients. We can remove our copy on request, but we cannot retrieve a copy that has been viewed.

Children

giftstring is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided data, contact us and we will delete it.

Changes

We may update this policy. The "Last updated" date above reflects the most recent change. Material changes will be communicated in-app or by email.

Contact

giftstring is operated by Akila Kesavasamy.