OnlyyGiftsOnlyyGifts

Privacy Policy for OnlyyGifts

Effective Date: June 19, 2026

At OnlyyGifts, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and services.

1. Information We Collect

1.1 Account Information

When you sign up for OnlyyGifts, we collect information from your chosen authentication provider:

  • Google: We receive your name, email address, and profile picture. If you choose to sync your calendar, we request additional access to your Google Calendar events (read/write, via the calendar.events scope) solely to detect and remind you and your friends about upcoming birthdays and special occasions.
  • Apple Sign In: We receive your name and email address.
  • Email OTP: We collect your email address to send verification codes.

1.2 Profile Information

You may provide additional information to personalize your profile, such as a unique handle (username) and display name.

1.3 Wishlist and Social Data

We collect content you create, including:

  • Wishlist items (titles, descriptions, images, and links).
  • Connections with friends on the platform.
  • Group memberships and gift "quizzes."

1.4 Payment Information

When you unlock a wishlist item's link or subscribe to OnlyyGifts Premium, payment is processed by our payment provider, Stripe. We do not collect or store your full card number, CVC, or other sensitive payment credentials — Stripe handles this directly and is PCI-DSS compliant. We retain only the transaction outcome (e.g. amount, date, status) needed to maintain your order and subscription history.

1.5 Push Notification Tokens

If you enable notifications, we store a device push token (provided by Apple/Google/Expo) so we can deliver alerts such as friend requests, birthday reminders, and gift activity. This token does not identify you personally beyond your own device and notification settings.

2. How We Use Your Information

We use the collected data to:

  • Provide and maintain the OnlyyGifts service.
  • Enable social features, such as sharing wishlists with friends.
  • Send transactional emails, including OTP codes and password reset links.
  • Send weekly social digests and upcoming event alerts (if opted-in).
  • Improve our service and develop new features.

3. Data Sharing and Third Parties

We do not sell your personal information. We only share your data with trusted service providers as necessary to operate our service:

  • Infrastructure Partners: We use Convex for database management and secure data storage.
  • Email Services: We use Brevo to deliver transactional emails.
  • Payments: We use Stripe to process link-unlock fees and Premium subscription payments.
  • Calendar Sync: If enabled, we use the Google Calendar API to read and write birthday/event reminders on your behalf.
  • Analytics: We may use anonymized analytics to improve app performance.

Note on Third-Party Safety: All third-party partners with whom we share user data are contractually obligated to provide the same or equal protection of user data as stated in this Privacy Policy and as required by the Apple App Store Review Guidelines.

We do not sell your personal data to third parties. We only share information in the following circumstances:

  • With your consent: When you add a friend or join a group, your wishlist items are visible to those users.
  • Service Providers: We use trusted third-party services like Convex and Brevo.
  • Legal Requirements: If required by law to comply with legal obligations.

4. Your Choices and Controls

  • Opt-out: You can disable email notifications and digests at any time in the app Settings.
  • Edit/Delete: You can modify or delete your wishlist items and profile data within the app.
  • Account Deletion: You can permanently delete your account and all associated data via the Settings menu. This action is irreversible.

5. Security

We implement industry-standard security measures to protect your data. Authentication is handled securely through OAuth and encrypted tokens. However, no method of transmission over the internet is 100% secure.

6. Children's Privacy

OnlyyGifts is not intended for children under the age of 13. We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date."

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at: justicesolomon5@icloud.com