Privacy Policy

Gift Guide (“Gift Guide”, “we”, “us”) is a universal wishlist and gift management app. This policy explains what information we collect when you use the app, why we collect it, how it is stored, and how you can have it deleted. You can contact us any time at contact@giftguideapp.au.

You can use Gift Guide without an account: in that case your profile, wishlists, saved items, occasions, pools and settings stay on your own device in the app’s local storage, and we hold no copy of them.

If you create an account (email and password, or Google sign-in), your profile details, wishlists, saved gifts, list sharing, reservations and contribution records are also stored in our secure cloud database so they are available on your other devices. Anything already saved on the device is migrated into your account the first time you sign in — nothing is deleted in the process. A copy is kept on the device as an offline cache.

Cloud data is protected by row-level security rules: you can only read and write your own records, plus lists that someone has explicitly shared with you. When a list is shared, the recipient sees the list and its items — not your email address, password or other account data. Reservations and purchase records for a list are deliberately hidden from the list’s owner so gifts are not spoiled.

• Account details — if you sign up, your email address and (for Google sign-in) the basic profile information Google returns, handled by our authentication provider.
• Your Gift Guide content — your display name, handle, avatar and preferences; the lists you create; saved gifts and items, prices, notes and occasion dates; reservations, group gift pools and contribution records; contacts you add; and your notification settings.
• Sent to us for processing — the photos, screenshots, product links, barcodes and any note you submit to a recognition, search or in-store availability feature. These are sent to our servers and to our AI provider at the moment you use the feature to produce a result, and we do not store them in a database afterwards.
• Approximate location — only if you allow it in your browser or device. Your approximate coordinates are used at the moment of a search to find nearby stores and are included in the request to our AI provider. They are held in memory for that session only; we do not save a location history.
• Support messages — if you contact us through the support page, we receive your name, email address, the topic and your message, plus any file you choose to attach.
• Basic technical data — our hosting provider processes standard request data such as your IP address and app errors, which is used to serve requests, limit abuse and keep the app working.

We use this information solely to provide the app: to identify products from photos, links and barcodes, to suggest where an item can be bought or booked and how far away it is, and to answer support enquiries. We do not sell your personal information, we do not use it for third-party advertising, and we do not build advertising or tracking profiles.

Your lists and profile stay on your device, so they are protected by your device’s own security and are removed if you clear the app’s data or uninstall the app. The only user content we store on our side is a file you attach to a support message: it is uploaded to a private storage bucket that is not publicly readable, using an upload link our server generates. All traffic between the app and our servers uses TLS, and our cloud provider encrypts stored files at rest. Our support team opens attachments through a signed link that expires after seven days.

These are the providers that currently receive data:

• Lovable Cloud (Supabase) — hosting, the app’s backend, authentication infrastructure and private file storage for support attachments.
• Lovable AI Gateway, using Google Gemini models — receives the images, links, barcodes, notes and approximate coordinates you submit to recognition, search and in-store availability features, and returns the item details.
• Lovable email delivery — sends your support message to us and a confirmation email back to you.
• Retailer and venue websites — our server fetches public pages to check that a purchase or booking link works. Only the page address is requested; none of your personal information is sent.

These providers process data only on our instructions. Following a link to a retailer takes you to that company’s own website, which is governed by their privacy policy, not ours.

We currently send email only in response to a support message you send us: your message to our support address, and a confirmation to you. Gift Guide does not yet send email notifications about wishlists or reminders — the notification settings in the app control in-app alerts and are stored on your device.

Gift Guide is not intended for children under 13. If you create a wishlist on behalf of a child, please only include the details you genuinely need (such as sizes) and avoid sensitive information.

Content kept on your device stays there until you delete it or remove the app. Support messages and attachments are kept only as long as needed to resolve your enquiry. Images, links and notes submitted to recognition features are processed to return a result and are not stored by us afterwards; our AI provider may retain them briefly for abuse monitoring under its own terms.

You can permanently delete everything at any time from Settings → Account → Delete account. This erases all Gift Guide data held on your device — profile, wishlists, saved items, reservations, pools, contacts and preferences — and, if you are signed in, permanently deletes your account record and any files stored under it on our servers. It is a genuine deletion, not a deactivation, and it cannot be undone. You can also email contact@giftguideapp.au and we will action your deletion request within 30 days. You may also ask us for a copy of, or a correction to, any information we hold about you.

Privacy questions, access requests and complaints: contact@giftguideapp.au. We aim to respond within one business day.