Privacy Policy

1. Who We Are

Gifted ("we", "our", or "us") is a wishlist application that allows users to create and share gift wishlists with friends and family. We are operated from Colorado, United States. You can reach us at giftedappinsta@gmail.com.

2. Information We Collect

When you sign in with Instagram or Google, we receive basic profile information including your name, username, and profile picture. We do not receive your password or private messages.

We also store the wishlist items you create, including titles, descriptions, URLs, images, and prices you provide. We collect standard server logs including IP addresses and browser information for security and debugging purposes.

3. How We Use Your Information

We use your information solely to provide the Gifted service:

• To create and display your profile and wishlist • To allow friends to view and claim gifts on your list • To generate your shareable wishlist link • To send you product information you request via URL scraping

We do not sell your personal information. We do not use your information for advertising or share it with third-party advertisers.

4. Instagram Data

If you sign in with Instagram, we access the following data through Meta's API:

• Your Instagram user ID • Your Instagram username • Your display name • Your profile picture

We use this information only to create and maintain your Gifted account. We do not access your Instagram posts, followers, direct messages, or any other Instagram content beyond what is listed above.

You can revoke Gifted's access to your Instagram account at any time through your Instagram account settings under "Apps and Websites."

5. Data Sharing

We use the following third-party services to operate Gifted:

• Supabase (database hosting) — your data is stored securely in their infrastructure • Vercel (application hosting) — your requests are served through their network • Google (authentication) — if you sign in with Google • Meta (authentication) — if you sign in with Instagram

These providers have their own privacy policies and data handling practices.

6. Your Wishlist and Visibility

You control who can see your wishlist through the visibility settings in your account:

• Public: Anyone with your link can view your wishlist • Friends only: Only people you've connected with can view your list • Private: Only you can see your list

When a friend claims a gift on your list, you will not be told who claimed it or what they claimed, preserving the surprise.

7. Data Retention

We retain your account data for as long as your account is active. You can request deletion of your account and all associated data by emailing giftedappinsta@gmail.com. We will process deletion requests within 30 days.

8. Your Rights (Colorado & U.S.)

Under the Colorado Privacy Act (CPA) and applicable U.S. law, you have the right to:

• Access the personal data we hold about you • Correct inaccurate personal data • Request deletion of your personal data • Opt out of any sale of personal data (we do not sell your data)

To exercise any of these rights, contact us at giftedappinsta@gmail.com.

9. Children's Privacy

Gifted is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it promptly.

10. Security

We use industry-standard security practices including encrypted connections (HTTPS), secure database hosting, and server-side authentication to protect your data. However, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of Gifted after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

giftedappinsta@gmail.com