Privacy Policy

Last updated: September 6, 2026

1. Information GiftDNA may collect

• Account information: verified email address, unique GiftDNA username, profile/display name, account creation and verification information, authentication-session records, and—if you use Google Sign-In—the Google account identifier and basic identity information Google provides for sign-in. GiftDNA does not receive your Google password.
• Preferences: language, shopping region, appearance, sound and reminder settings.
• People and gift-planning information you choose to save: recipient names, relationships, budgets, interests such as music, movies, games and books, free-text notes, birthdays, special dates, reminder preferences, past gifts, TasteDNA traits and corrections, recommendation feedback, Surprise Drop history and collection information.
• AI request information: information you enter to generate recommendations is sent through the GiftDNA backend to the configured AI service so GiftDNA can generate gift ideas and explanations. If you save a person, the saved fields may be stored with your account. Raw free-text gift-form answers are not intentionally written to GiftDNA analytics events.
• Usage and diagnostic information: a browser/session identifier, app version, selected region and language, feature interactions, recommendation metadata, feedback choices, retailer/compare clicks and similar product-usage events used to understand reliability and improve GiftDNA.

2. How GiftDNA uses information

• Provide account sign-in, cross-device sync and account security.
• Remember people, important dates, gift preferences and Drop history you choose to save.
• Generate, rank and explain gift recommendations and improve later recommendations using your feedback.
• Send verification emails and optional gift-reminder emails when you enable them.
• Operate, debug, secure and improve the service and measure feature quality.
• Open retailer search/product pages and, where enabled and permitted, support price comparison and affiliate attribution.

3. Service providers and external services

GiftDNA uses service providers only for functions needed to operate the service. Depending on the feature you use, information may be processed by:

• Cloudflare: hosting, Workers, D1 database and Cloudflare Workers AI used by the GiftDNA backend.
• Google: Google Sign-In when you choose that sign-in method.
• Brevo: delivery of account-verification and optional reminder emails.
• Retailers such as Amazon: when you choose a retailer link, you leave GiftDNA and the retailer receives information according to its own privacy policy. Retailer links may contain an affiliate tracking identifier where permitted.

GiftDNA does not sell your personal data to advertisers. Affiliate compensation does not purchase or change GiftDNA's organic recommendation ranking.

4. Data security

GiftDNA uses HTTPS in transit, hashed password storage, hashed authentication-session tokens, access controls for account data, and server-side validation. No internet service can guarantee absolute security, so users should also protect their account credentials and devices.

5. Retention

Account and saved gift-planning data are generally kept while your account remains active so the features you requested can continue to work. Verification requests and operational records may expire or be cleaned up as part of normal service operation. GiftDNA may retain limited information when reasonably necessary for security, fraud prevention, dispute handling or legal obligations. Data that has been irreversibly aggregated or de-identified and can no longer reasonably be linked to your account may be retained for service analytics.

6. Account and data deletion

You can permanently delete your GiftDNA account from Profile → Settings → Account & data → Delete account. You can also start the process from the public account deletion page.

When the authenticated deletion request is completed, GiftDNA deletes the account record and associated synced account data that GiftDNA can link to that account, including saved people, dates, Past Gifts, recommendation feedback, Surprise Drop records, collection data, reminder-delivery records, account sessions and linked raw session analytics. This action cannot be undone.

7. Children's privacy

GiftDNA is not designed specifically for children. Do not create accounts for children or submit personal information about children unless you have the authority and a lawful basis to do so.

8. Your choices

You may edit saved people, remove individual saved people, disable optional email reminders, sign out, or delete your account. For privacy questions or requests, contact giftdnaapp@gmail.com.

9. Changes to this policy

GiftDNA may update this policy when features, service providers or legal requirements change. The date at the top will be updated when the policy changes.