Privacy Policy
1. What data we collect
DontForGift stores the data you explicitly enter, plus limited data needed to show ads:
| Data type | Examples | Where it lives |
|---|---|---|
| Account credentials (optional) | Email address, hashed password (via Firebase Auth), or Google Sign-In token | Firebase Authentication |
| People & groups | Names, nicknames, birth dates, anniversary dates, relationship types, notes | Firebase Firestore |
| Gifts | Gift name, price, shop, event, status, ratings, notes | Firebase Firestore |
| Gift plans | Plan name, budget, items, status | Firebase Firestore |
| Shops | Shop name, website, notes | Firebase Firestore |
| Attachments | Photos or documents you attach to gifts | Firebase Storage |
| App state | Zustand store snapshots (synced data, UI state) | Device local storage (MMKV) |
| Advertising data | Advertising identifier (IDFA/AAID), ad request and interaction data | Collected by Google AdMob, a third party (see Section 3) |
We do not collect analytics or crash reports, and we never sell your personal data.
Guest mode (no account)
You can use DontForGift without creating an account. In guest mode, all data — including photos — stays only on your device and is never sent to Firebase. Creating an account later moves your existing local data to the cloud so it can sync and be backed up.
2. How your data is stored
Cloud (Firebase — Google infrastructure)
All user data in Firestore and Storage is stored under a path scoped to your unique user
ID (users/{userId}/…). Firestore security rules enforce that only a
signed-in user can read or write their own data. No other user or third party can access
your records.
Attachment files in Firebase Storage are stored at
users/{userId}/attachments/… with the same per-user access rules and a 10 MB
per-file size limit.
On device (MMKV)
The app keeps a local cache of your data in an encrypted MMKV store
(dontforgift-store). This cache enables offline access and faster load
times. It is cleared when you delete your account.
3. Advertising
DontForGift shows ads served by Google AdMob to support the free app. To select and measure ads, AdMob and its advertising partners may collect your device's advertising identifier (IDFA on iOS, AAID on Android) and ad request/interaction data. This is the only automatically-collected data in the app; it is not linked to your gift/people/plan data.
- iOS: Ads are only personalized if you grant permission at the App Tracking Transparency prompt. If you decline, you still see ads, but non-personalized ones.
- EEA, UK, and Switzerland: A consent form (Google's User Messaging Platform) is shown before any ad is requested, and your choice is respected for personalized vs. non-personalized ads.
- Google's data handling for ads is described at policies.google.com/privacy and support.google.com/admob/answer/6128543.
4. Data sharing
We do not sell, rent, or share your personal data with any third party, advertiser, or data broker.
The external services used are:
- Firebase (Google LLC), which processes data solely to provide infrastructure (authentication, database, file storage). Firebase's own privacy policy applies to that processing: https://firebase.google.com/support/privacy
- Google AdMob (Google LLC), for showing ads, as described above.
5. Data retention
Your data is retained for as long as your account exists. When you delete your account from the Settings screen, the following happens immediately and irreversibly:
-
All Firestore documents in your user subtree are deleted (
gifts,attachments,people,relationships,groups,shops,giftPlans,giftPlanItems). - All files stored in Firebase Storage under your user folder are deleted.
- Your local MMKV cache is wiped.
- Your Firebase Authentication account is deleted.
There is no recovery mechanism after deletion.
Guest mode data is deleted simply by uninstalling the app, or by clearing it from within the app — there is no server-side copy to remove.
6. Security
- All traffic between the app and Firebase is encrypted in transit (TLS).
- Firestore and Storage security rules prevent cross-user data access at the database level.
- Passwords are never stored by the app; they are handled exclusively by Firebase Authentication.
- Sensitive operations (account deletion) require an active authenticated session.
7. Children
DontForGift is not directed at children under 13. We do not knowingly collect data from children, and ads are not configured to target child audiences.
8. Changes to this policy
If this policy changes materially, we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance.
9. Contact
For any privacy-related question or request, contact: enable JavaScript to see contact email