The short version: GiftDrop is a family gift-list app. We store
what you put into it — your profile, your wish lists, your group's gift activity —
so the app works. We don't run ads, we don't track you across apps or websites,
we don't sell your data, and we don't use third-party analytics.
1. Anonymous sign-in, optional recovery email
GiftDrop uses anonymous sign-in. When you open the app, it creates an anonymous
identifier — you never need a password. You can optionally add a recovery email
address under Profile → Protect your account. If you do, we use it only to send
you a one-time sign-in code so you can recover your account if you change phones
or reinstall the app. We never share your email address, and you can delete your
account (and its email) at any time from Profile.
2. What we store
Everything below is content you (or your group) choose to add:
Your profile — display name, photo, and any "about me" answers you fill in. Profiles are per group.
Your wish lists — items with names, product links, prices, photos, priority tags, and notes you add.
Your groups — which groups you belong to and their invite codes.
Your private shopping data — gifts you've claimed, amounts you spent, per-person budgets, your buy list, and your favorites. Only you can see these. List owners never see who claimed what, or for how much.
Secret Santa — exchanges, participants, exclusions, assignments, and anonymous messages. An assignment is visible only to the gift giver (or the parent managing a child's profile). Messages never carry names — they show only as "Your Secret Santa" or "Your gift recipient."
Managed profiles — if a parent or guardian creates a profile for someone without the app (for example a young child), we store that profile and its list exactly as described above, under the manager's control.
3. Where it's stored
On Supabase, our database and file-storage provider, hosted in the United States.
Photos you upload are stored in Supabase Storage. If you add a recovery email,
we use Resend to deliver the one-time sign-in code to your inbox. We don't keep
copies anywhere else.
4. What we never do
No advertising, and no ad tracking.
We don't sell, rent, or share your personal information with data brokers or advertisers.
No third-party analytics SDKs — we don't measure your behavior for anyone but you.
We don't track you across other apps or websites.
5. Price comparison
If you use the price-comparison feature, the app sends the product's name or link to
DataForSEO to look up public Google Shopping listings. No personal information is
sent — only what's needed to find the product's price.
6. Children
Children don't need accounts or devices to be included. A parent or guardian can
create a managed profile for a child and controls it — its name, photo,
list, and everything on it. If the manager leaves the group, the profile passes to
the group's creator. We don't knowingly collect information directly from children,
and managed profiles exist only through a parent or guardian.
7. Your control and deletion
Delete a wish, a whole list, or leave a group at any time in the app.
To delete your account and everything tied to it, open the Profile tab,
scroll to the Danger zone, and tap "Delete my account." This permanently removes
your profile, wish lists, gift records, and group memberships. Kid profiles you
manage are transferred to the group creator rather than deleted.