Giftlist Privacy Policy

Last updated: 16 November 2026

Giftlist is an app for sharing lists of things you'd like with family and friends, and for keeping gifts a surprise. It is run by D C B Kwan, Longueville, NSW, Australia ("we", "us"). This policy explains what information we collect, why, who can see it, and what you can do about it.

If you have a question, email us at giftlistapphelp@gmail.com.

1. What we collect

Information you give us

Account details: your email address and password. Your password is stored in a scrambled form; we can't read it.
Profile: your first and last name, birthday and, if you choose, your location.
Your list: the items you add – name, how happy it would make you (1 to 5), and, if you add them, the price, link, picture, notes and occasion.
Important dates: dates you add, such as birthdays, anniversaries and Christmas.
Friends: who you are friends with, your invite links, and the private groups you put friends in.
Gifts you plan to give: items you claim on friends' lists, and whether you have bought or given them.

Information created when you use Giftlist

Notifications we send you inside the app (for example, "Mia used your invite link, so you're now friends").
Basic technical records kept by our service providers so the app works and stays secure, such as when you last signed in.

What we don't collect

We don't collect or store phone numbers, payment details or precise location.
We don't use advertising or tracking tools, we don't try to identify your device, and we don't sell your information.

2. Invite links, clipboard and websites

Invite links: to add friends, you send your invite link yourself, from your own Messages, WhatsApp, email or another app. Giftlist doesn't see who you send it to, and doesn't use your contacts. Anyone who opens your link within 7 days becomes your friend, and you're told who. You can stop your link at any time. Expired links are deleted 30 days after they expire.
The invite web page: if Giftlist isn't installed yet, the link opens a page on joingiftlist.com. When you tap "Get Giftlist", the page copies the invite link so Giftlist can find it after you install it. Our website uses no cookies, analytics or tracking.
Clipboard: the first time Giftlist opens, before you log in, it checks whether something was copied. If it was, your phone asks your permission before Giftlist reads it. We only use it to find an invite link, and don't keep anything else.
Adding items from websites: when you search for an item or paste a link, the page opens inside Giftlist. When you choose "Add this item", we read the page's name, picture and price to fill in your item. The websites you visit have their own privacy policies.

3. Who can see your information

Your friends can see your name, birthday, important dates and your list. You choose your friends: a friendship only starts when you send your invite link to someone, or open someone else's. Anyone who has your link while it's open can become your friend, so only share it with people you know. You can remove a friend at any time.
The surprise: you can't see who has claimed or bought items on your list, and other friends can't see who claimed an item – only that it has been claimed. The friend who claimed it can see their own claim. The only times you'll learn an item has been claimed are if you try to remove it, or when it has been given to you.
Your private details: your email address, location and groups are never shown to other users. Nobody can search for you by name or email.
Our service providers, who store and process information for us:
- Supabase – stores our database and handles sign-in. Our data is stored in Supabase's Tokyo region, in Japan.
- Resend – sends emails such as password-reset codes, from no-reply@joingiftlist.com.
- Cloudflare – hosts our website, joingiftlist.com, including the invite page.
- Apple and Expo – deliver notifications to your phone (from when push notifications are added) and distribute test versions of the app.
If the law requires it, for example a court order.

This means your information is stored outside Australia, in Japan, and some of these providers may also handle it in other countries, including the United States.

4. Children

You must be 13 or older to create an account, or a parent or guardian can set up and manage an account for their child. In that case the parent controls the login, and the child doesn't use the app themselves. The parent is responsible for the account and can delete it at any time.

5. How long we keep information

We keep your information while you have an account. When you delete your account in the app (Profile → Delete my account):

your profile, list, important dates, friendships, invite links and groups are deleted;
items you had claimed on friends' lists become available again (your friends aren't told who had claimed them);
friends who had claimed items from your list are told that your list is no longer available.

Notifications are deleted 3 months after they are sent. Items you've been given stay in your account until you delete it. Our service providers may keep short-term technical records for a limited time for security reasons.

6. Keeping information safe

Your information is sent over encrypted connections. Access rules in our database stop users from seeing information that isn't meant for them – for example, you can't download claim information about your own list. No system is perfectly secure, so please use a password you don't use anywhere else.

7. Your choices

See and change your information: most of it is in the app – Profile, My List and Friends.
Get a copy or ask a question: email giftlistapphelp@gmail.com. We'll reply within 30 days.
Delete your account: Profile → Delete my account. This can't be undone.
Complaints: email us first. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

8. Changes to this policy

If we change this policy, we'll update the date at the top and, for important changes, tell you in the app.

9. Contact

D C B Kwan
giftlistapphelp@gmail.com