Privacy Policy

Effective Date:01-01-2025

Welcome to Giftu! Your privacy is important to us, and this Privacy Policy explains how we collect, use, and protect your personal information. By using Giftu, you agree to the practices described in this policy.

1. Data Collection

We collect only the data necessary for the functionality and improvement of our platform:

Mandatory Data: Phone number (used for authentication and communication).
Optional Data: First and last name (provided at the user’s discretion).
Other Data: Purchase history, device push tokens, app usage patterns, and OS version through Google Analytics.

Additionally, we integrate with:

Google Analytics: To track app events like screen views and clicks. No PII is logged.
Payment Gateway Services: Payment information is not stored on our platform. Users are redirected to the payment gateway, and we receive only a confirmation or failure callback.

2. Data Use

The data collected is used for:

Account authentication and communication.
Sending notifications about order updates.
Improving user experience through analytics.
Marketing purposes (e.g., promotions and offers).

We do not share user data with third parties.

3. User Rights

Users may choose to provide, modify, or delete optional information like their first and last name. The phone number is mandatory for authentication and app functionality and cannot be changed.

To delete your account:

Log in to the Giftu app.
Navigate to the Settings page.
Tap the "Delete Account" button and confirm the prompt.

Once confirmed, your account and all associated data will be deleted immediately and cannot be restored.

4. Account Deletion

All user data, including authentication information, profile data, and order history, is permanently deleted immediately upon account deletion.

5. Data Storage and Security

Data Storage: Authentication data is stored in Saudi Arabia (KSA). Other data, such as orders, carts, and products, are stored in regions optimized for performance and availability.

Data Security Measures:

All user data is encrypted in our databases.
Server-client communications are protected via SSL.
Authentication is managed using JWT.
Ratelimiting mechanisms are implemented to prevent service misuse.

6. Third-Party Services

We integrate with the following third-party services:

Twilio: For SMS services in all regions.
Taqnyat: A local SMS service provider in Saudi Arabia.

These providers comply with regional data protection standards. Giftu does not operate in GDPR regions and does not interact with GDPR regulations.

7. Automatically Collected Information

Giftu automatically collects the following information to improve the app’s functionality and user experience:

App usage patterns (e.g., screen views and clicks).
OS version of the user’s device.

This data is collected via Google Analytics and does not include any personally identifiable information.

8. Cookies and Tracking

Giftu does not operate a website and does not use cookies. However, the mobile app uses Google Analytics to improve the user experience and core functionality. No PII is collected during analytics tracking.

9. Children’s Privacy

Giftu is rated USK: All Ages. We do not knowingly collect data from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete it immediately.

10. Changes to the Privacy Policy

We may update this Privacy Policy periodically. If significant changes are made, we will notify users through:

In-app notifications.
In-app banners to ensure visibility for all users.

11. User Consent

By using Giftu, you agree to this Privacy Policy. A link to the Privacy Policy is provided in the app’s Settings page and on the Apple App Store and Google Play Store.

12. Contact Information

For privacy-related inquiries or support, please contact us at:

[email protected]

If you have any questions or concerns about this Privacy Policy, don’t hesitate to reach out to us. Thank you for trusting Giftu!