GiftBuster Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how Giftbuster Inc. ("GiftBuster", "we", "us") collects, uses, shares and protects personal information when you use the GiftBuster mobile apps for iOS and Android, the website giftbuster.app, and the GiftBuster browser share extension (together, the "Service").

If you have questions, contact us at info@giftbuster.app.

1. Information we collect

Information you give us

• Account information: email address, first and last name, password (stored only in encrypted/hashed form), and, if you choose to add them, your birthday, gender, country and profile photo.
• Sign in with Apple, Google or Facebook: if you sign in with one of these services, we receive the information that service shares with us, such as your name, email address (which may be a private relay address from Apple) and an account identifier. We do not receive your password for those services.
• Wishlists and gifts: the lists you create and the items you save, including product title, description, price, currency, photos, store name and the link to the product page, plus any notes, priorities or photos you add.
• Social features: people you follow and who follow you, wishlists you share, and people you invite to collaborate on a list.
• Reservations: when you reserve a gift on someone else's list, we store the reservation and the date until which it is reserved. If you reserve a gift as a guest without an account, we collect your name and email address to confirm the reservation.
• Messages to us: information you send when you contact support or report content.

Information collected automatically

• Device and usage information: device type, operating system, app version, language, time zone, and how you use the Service (for example, screens viewed and features used).
• Log information: IP address, request details, date and time, and error and crash information.
• Approximate location: we may infer your country or region from your IP address or device settings. We do not collect precise GPS location.
• Push notification token: if you allow notifications, a token that lets us send notifications to your device.

Information from product pages

When you save an item, the Service reads the public product page you shared (for example, to get the title, price and photos). We send only the product link to do this, not your personal information.

2. How we use information

We use information to:

• provide and operate the Service: create your account, save and display your wishlists, let others view and reserve gifts, and let you collaborate on lists;
• keep reservations a surprise: the owner of a list is not shown which gifts were reserved or by whom;
• track prices of saved items and show price changes;
• send you service messages, such as reservation confirmations, security notices and, if you opt in, notifications about price changes, birthdays of people you follow, and deals;
• understand how the Service is used and improve it, fix bugs and measure performance;
• protect the Service and our users, prevent fraud, spam and abuse, and enforce our Terms;
• comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party targeted advertising.

3. What other people can see

• Profiles are public by default. Your name, profile photo, birthday (if you choose to show it), followers and public wishlists can be seen by other users and by anyone with a link. You can make your account private in Settings; a private account's content is visible only to people you approve as described in the app.
• Collaborators you invite can see and edit the shared list.
• Reservations: other visitors of a list can see that a gift is reserved so it isn't bought twice. The list owner does not see reservations.

4. How we share information

We share personal information only as described here:

• Service providers that host and operate the Service for us, under contracts that limit their use of the data: cloud hosting and database (Supabase, Render, Vercel, Amazon Web Services), push notifications and app analytics (Google Firebase), email delivery, and a web-fetching service used only to read public product pages (it receives product links, not personal information).
• Sign-in providers (Apple, Google, Facebook/Meta) when you choose to sign in with them. Their own privacy policies apply to the data they process.
• Stores and affiliate networks: when you tap a link to a store, you leave GiftBuster and the store's privacy policy applies. Some links are affiliate links, which means we may earn a commission if you make a purchase; the affiliate network (for example, Skimlinks) may record that the click came from GiftBuster.
• Other users, as described in section 3.
• Legal reasons: if required by law, to respond to valid legal requests, or to protect the rights, property or safety of GiftBuster, our users or others.
• Business transfers: if GiftBuster is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

5. How long we keep information

We keep your information for as long as your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep some information for longer to comply with law, resolve disputes or prevent abuse. Backups are overwritten on a regular schedule. Guest reservation details are kept only as long as needed for the reservation.

6. Your choices and rights

• Access and update: you can view and edit your profile information in Settings at any time.
• Delete your account: in the app, go to Settings and choose to delete your account, or on the web go to Settings → Delete account. You can also email info@giftbuster.app from the email address on your account and we will delete it for you.
• Notifications: you can turn off push notifications in the app or in your device settings, and unsubscribe from marketing emails using the link in the email.
• Private account: you can make your profile private in Settings.

Depending on where you live (for example, the European Economic Area, the United Kingdom, or U.S. states such as California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email info@giftbuster.app. We will not discriminate against you for exercising your rights. If you are in the EEA or UK, you may also complain to your local data protection authority.

Legal bases (EEA/UK): we process personal information to perform our contract with you (providing the Service), based on our legitimate interests (improving and securing the Service), with your consent (for example, optional notifications), and to comply with legal obligations.

7. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

GiftBuster is based in the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers of personal information.

9. Children

The Service is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact info@giftbuster.app and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date, and, for significant changes, we will notify you in the app or by email.

11. Contact us

Giftbuster Inc.
Email: info@giftbuster.app