Privacy Policy — Giftat

Effective date: [EFFECTIVE_DATE]
Last updated: [LAST_UPDATED_DATE]

This Privacy Policy describes how [OPERATOR_LEGAL_NAME] (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the Giftat mobile application and related services (collectively, the “Service”).

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are

The Service is operated by [OPERATOR_LEGAL_NAME] (“[OPERATOR_SHORT_NAME]”).

Contact: [CONTACT_EMAIL]
Website: [WEBSITE_URL]
Postal address (if applicable): [REGISTERED_ADDRESS]

2. Information we collect

We collect information in the following categories, depending on how you use the Service and your device settings.

2.1 Information you provide

Account and authentication: When you sign in (for example via phone or other methods we support), our authentication providers may process identifiers needed to create and secure your account.
Profile information: Such as name, photo, bio, phone number, or other fields you choose to add in your profile.
Content you create: Information you enter about people (contacts), occasions (e.g. birthdays, events), gifts, notes, reminders, images you attach, and similar planner content (“User Content”).
Communications: Messages you send to us (e.g. support requests).

2.2 Information collected automatically

Device and app data: Device type, operating system, app version, language, general diagnostics, and similar technical data.
Usage data: Features used, interaction patterns, and in-app events that help us improve the Service (may be aggregated or pseudonymous).
Identifiers: Such as mobile advertising IDs or similar, where permitted by your device settings and applicable law, for advertising and analytics as described below.

2.3 Information from permissions (with your consent where required)

Contacts (optional): If you grant permission, the app may access device contacts to help you add people. You can deny this permission and still use many features; you may also add people manually.
Notifications: If you enable notifications, we may use push notification services to deliver reminders or updates you request.

2.4 Payments and subscriptions

If you purchase a subscription or other paid feature through Google Play or Apple App Store, payment processing is handled by the platform. We receive limited information (e.g. subscription status, transaction identifiers) needed to provide entitlements—not your full payment card details.

2.5 Advertising

We may show advertising in the Service (for example interstitial ads) using partners such as Google AdMob. Ad partners may collect or receive device and usage data to measure and personalize ads according to their policies and your choices.

3. How we use information

We use the information above to:

Provide, operate, and maintain the Service (including sync and backup features tied to your account).
Authenticate users and secure accounts.
Store and display your User Content to you across your devices.
Process subscriptions and enforce plan limits and features.
Send transactional messages, reminders, or service-related notices where enabled.
Analyze usage to improve performance, reliability, and product design.
Show and measure advertising where applicable.
Comply with law, enforce our Terms and Conditions, and protect rights, safety, and security.

We do not sell your personal information in the conventional sense of selling lists of individuals for money. Where required by law (e.g. certain U.S. state laws), we will provide additional disclosures about “sale” or “sharing” as those terms are defined locally.

4. Legal bases (where applicable)

If laws such as the GDPR apply, we rely on one or more of the following:

Contract: Processing necessary to provide the Service you request.
Legitimate interests: Such as security, fraud prevention, product improvement, and advertising (balanced against your rights).
Consent: Where we ask for consent (e.g. certain permissions, marketing, or non-essential cookies/analytics where relevant).
Legal obligation: Where we must process data to comply with law.

You may withdraw consent where processing is consent-based, without affecting the lawfulness of processing before withdrawal.

5. How we share information

We may share information with:

Service providers who assist us under strict terms (e.g. cloud hosting, authentication, analytics, crash reporting, customer support tools), including Google Firebase and related Google services used to run the app.
Advertising partners (e.g. Google AdMob) to deliver and measure ads.
App stores (Google / Apple) for purchases, updates, and policy compliance.
Authorities when required by law, regulation, legal process, or to protect vital interests.
Business transfers in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards and notice where required.

We require processors to protect your information appropriately and use it only for the purposes we specify.

6. International transfers

Your information may be processed in countries other than where you live, including countries that may not provide the same level of data protection. Where required, we use appropriate safeguards (such as standard contractual clauses) or rely on permitted derogations.

7. Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. User Content may be deleted when you delete it in the app or close your account, subject to backup and technical retention periods. Some logs or aggregated data may be retained in depersonalized form.

8. Security

We implement technical and organizational measures designed to protect your information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your choices and rights

Depending on your location, you may have rights to:

Access or receive a copy of your personal information.
Correct inaccurate data.
Delete certain data or your account (subject to legal exceptions).
Restrict or object to certain processing.
Data portability where applicable.
Withdraw consent where processing is based on consent.
Opt out of certain advertising uses (e.g. via device settings like “Limit Ad Tracking” / “Opt out of Ads Personalization,” and industry tools where available).
Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at [CONTACT_EMAIL]. We may need to verify your identity before responding.

10. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

11. Third-party links and services

The Service may contain links to third-party sites or integrate third-party SDKs. Their collection and use of information is governed by their privacy policies. We encourage you to read them (e.g. Google, Apple, AdMob).

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice (e.g. in-app or by email). Continued use after the effective date constitutes acceptance of the updated Policy, except where restricted by law.

13. Contact us

For privacy questions or requests: [CONTACT_EMAIL]
General support: [SUPPORT_EMAIL]
Website: [WEBSITE_URL]

This document is a practical template. [OPERATOR_LEGAL_NAME] should have it reviewed by qualified legal counsel before publication.

Arabic version: privacy-policy-ar.md (same placeholders).