Privacy Policy

We have written this Privacy Policy in plain language so it is easy to read and understand. We want you to know exactly what information we collect, why we collect it, and what we do with it. If you have any questions after reading this, please contact us at privacy@niftygiftyapp.com.

 

Nifty Gifty App (‘we’, ‘us’, ‘our’) is operated by Reputation Continuum Pty Ltd, a company registered in Western Australia, Australia. This Privacy Policy explains how we handle your personal information when you use our mobile application and related services (together, ‘the App’).

 

1.  What information we collect

We collect only what we need to provide and improve the App.

 

Information you give us directly

• Account information: your name and email address when you sign up.

• Profile photo: you may upload a photo of yourself for your profile. This is optional. We do not collect or store photos of your contacts.

• Contact information: when you add people to the App to track gift ideas or occasions for them, you may enter their name, phone number, birthday, and notes about their gift preferences. Contact profiles display an icon you choose or default to initials — we do not collect or store photos of your contacts.

• Approximate location: your postcode or country. We use this to set your default currency and phone country code. You can update it at any time in Settings.

• Age range: your year of birth or age range, if you choose to add it.

• Occasion information: names, dates, and descriptions of occasions you create.

• Gift and wishlist information: items you add, claim, or contribute to.

• Group gift information: messages and amounts related to group contributions.

• Communications: messages you send us, including support requests.

• Messaging data: when you send a contact a claim link or invitation via SMS or WhatsApp through the App, we store the message text, the recipient’s phone number, and the delivery status in our database. This lets you track what was sent and confirm delivery.

 

Information we collect automatically

• Device information: device type, operating system, and app version.

• Device identifiers: a unique installation ID and device token assigned to your device by Firebase, used to deliver push notifications to you.

• Usage information: how you use the App, features you use, and when.

• Log data: error logs and crash reports to help us fix problems.

• IP address: collected when you create an account and when you give or change your marketing preferences.

 

Information from third parties

• Payment information: when you subscribe, your payment is processed by Apple (App Store) or Google (Google Play). We do not receive your full card number — only a subscription status confirmation from RevenueCat, our subscription management provider.

• App store information: basic information about your app installation provided by Apple or Google.

 

About the people you add as contacts

When you add personal information about others into the App — such as a friend’s name, phone number, or birthday — we store that information on your behalf to provide the gifting and occasion features you signed up for. Those people have not directly signed up to Nifty Gifty App.

 

Our legal basis for processing this information is our legitimate interest in providing you with the service you requested, balanced against the privacy interests of your contacts. We use their information only to power the App’s features and never for advertising or marketing.

 

If someone whose information you have added wishes to access, correct, or delete their information from our system, they can contact us at privacy@niftygiftyapp.com and we will handle their request as required by applicable law.

 

ℹ  You are responsible for ensuring you have a legitimate reason to add someone’s information and that doing so is consistent with any applicable privacy laws in your jurisdiction. See also Section 8 of our Terms and Conditions.

 

2.  How we use your information

We use your information for the following purposes:

 

To provide the App

What we do: Create and manage your account; save your occasions, wishlists, and gift coordination; send claim links to your recipients.

Legal basis: Necessary to perform our contract with you

To maintain your contact list

What we do: Store and display the names, phone numbers, birthdays, notes, and gift preferences you enter for the people you track gifts for.

Legal basis: Legitimate interest (providing the gifting organisation service you signed up for)

To manage your subscription

What we do: Process and verify your subscription; send you subscription confirmations, renewal reminders, and trial expiry notices.

Legal basis: Necessary to perform our contract with you

To communicate with you

What we do: Respond to your support requests and questions.

Legal basis: Legitimate interest (customer support)

To send you occasion reminders

What we do: Remind you when an occasion you have saved is coming up.

Legal basis: Legitimate interest / contract performance

To improve the App

What we do: Understand how people use the App so we can fix problems and build better features.

Legal basis: Legitimate interest (service improvement)

To keep the App secure

What we do: Detect and prevent fraud, abuse, and technical issues.

Legal basis: Legitimate interest (security)

To send you marketing communications

What we do: With your consent, send gifting tips, app updates, and seasonal planning guides. You can opt in or out at any time in the App under Settings > Preferences.

Legal basis: Your consent (you can withdraw at any time)

To comply with the law

What we do: Retain consent records and respond to lawful requests from authorities.

Legal basis: Legal obligation

 

ℹ  We never sell your personal information. We never share it with advertisers. We only share it with the service providers listed in Section 4, and only to operate the App.

 

3.  Legal basis for processing your information (EU and UK users)

If you are located in the European Union or the United Kingdom, data protection law requires us to explain the legal basis on which we process your personal information. We set this out in Section 2. In summary:

• Contract performance: we process most of your data because it is necessary to provide you with the App and your subscription.

• Legitimate interest: we process some data because it is in our and your legitimate interests — for example, to keep the App secure, to improve it, and to maintain the contact list features you use for gift planning.

• Consent: we process your information for marketing purposes only with your consent. You can withdraw your consent at any time.

• Legal obligation: we retain certain records because the law requires us to.

 

4.  Who we share your information with

We share your information only with the service providers we need to operate the App. We do not sell your data or share it for advertising purposes.

 

Supabase Inc.

Location: United States

What they do: Our database and infrastructure provider. Stores your account data, occasions, wishlists, and gift information securely.

Their privacy policy: supabase.com/privacy

 

RevenueCat Inc.

Location: United States

What they do: Manages your subscription status and billing. Does not store your payment card details.

Their privacy policy: revenuecat.com/privacy

 

Apple Inc.

Location: United States

What they do: Processes your payment and manages your subscription if you subscribe via the App Store.

Their privacy policy: apple.com/privacy

 

Google LLC

Location: United States

What they do: Processes your payment and manages your subscription if you subscribe via Google Play.

Their privacy policy: policies.google.com/privacy

 

Twilio Inc. / SendGrid

Location: United States

What they do: Delivers transactional emails (account verification, subscription notices) and sends SMS and WhatsApp claim links and invitations on your behalf. Message content, recipient phone number, and delivery status are stored via Twilio and in our database.

Their privacy policy: twilio.com/legal/privacy

 

Klaviyo Inc.

Location: United States

What they do: Sends marketing emails on our behalf — only to users who have opted in. Holds your email address and marketing preferences.

Their privacy policy: klaviyo.com/legal/privacy

 

Sentry

Location: United States

What they do: Receives crash reports and error logs from the App to help us identify and fix technical problems. May receive device information and app state at the time of a crash.

Their privacy policy: sentry.io/privacy/

 

Google LLC (Firebase)

Location: United States

What they do: Delivers push notifications to your device via Firebase Cloud Messaging and provides app analytics via Google Analytics for Firebase. Receives your device identifier and app usage events.

Their privacy policy: policies.google.com/privacy

 

We may also share your information if we are required to do so by law, by court order, or by a government authority. If Reputation Continuum Pty Ltd is acquired by or merges with another company, your information may be transferred as part of that transaction. We will notify you before that happens.

 

5.  International data transfers

We are based in Australia, but some of our service providers are based in the United States and other countries. This means your information may be transferred to and stored in countries outside your own.

 

We only transfer your information to countries or companies that provide an adequate level of protection. Where required by law (for example, for EU or UK users), we use Standard Contractual Clauses or other approved transfer mechanisms to protect your information.

 

ℹ  Supabase, RevenueCat, Klaviyo, and Twilio/SendGrid are all US-based and participate in data transfer frameworks that provide protections for information transferred from the EU and UK.

 

6.  How long we keep your information

Account information (name, email)

While your account is active, plus up to 3 years after you close your account (for dispute resolution or reactivation).

Profile photo

While your account is active. Deleted immediately when you remove your photo, or within 30 days of account closure.

Contact data (names, phone numbers, birthdays, notes)

While your account is active. Individual contact records are deleted immediately when you remove them. All contact data is deleted within 30 days of account closure.

Occasion, wishlist, and gift data

While your account is active. Deleted within 30 days of account closure.

Marketing consent records

6 years from the date of consent (required for legal compliance).

Payment records

7 years (required by Australian tax law).

Usage and log data

Up to 2 years.

Support communications

3 years from the date of the last communication.

Message records (SMS/WhatsApp content, recipient phone, delivery status)

1 year from the date of sending, or until account closure (whichever is sooner).

 

When we no longer need your information, we delete it securely or anonymise it so it can no longer be linked to you.

 

7.  Your privacy rights

Depending on where you live, you have rights over your personal information. We honour all of the following rights regardless of your location.

 

Rights everyone has

Access

You can ask us for a copy of the personal information we hold about you.

Correction

You can ask us to correct information that is inaccurate or incomplete. You can update most of your information directly in the App under Settings.

Deletion

You can ask us to delete your personal information. You can delete your account directly in the App under Settings > Account > Delete Account, or by emailing privacy@niftygiftyapp.com. We will delete your data unless we are required to keep it by law (see Section 6 for retention periods).

Portability

You can ask us to provide your personal information in a structured, machine-readable format so you can transfer it to another service.

Withdraw consent

If we are processing your information based on your consent (e.g. marketing emails), you can withdraw that consent at any time without affecting anything we did before.

Object to processing

You can object to us processing your information based on our legitimate interests. We will stop unless we have compelling reasons to continue.

Restrict processing

You can ask us to pause processing your information in certain circumstances — for example, while we verify a correction request.

Complain

You have the right to complain to a privacy regulator if you are not satisfied with how we handle your information.

 

Rights of people whose information you have added

If you are a person whose information has been added to the App by another user (for example, a friend added your name and phone number to help them plan a gift for you), you have the right to ask us to access, correct, or delete your information. Please contact us at privacy@niftygiftyapp.com and we will handle your request as required by applicable law.

 

Additional rights by region

Australian users

The Australian Privacy Act 1988 and Australian Privacy Principles apply to us. You may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

 

EU and UK users (GDPR / UK GDPR)

All rights above apply in full. You may complain to your local supervisory authority — for example, the Information Commissioner’s Office (ICO) at ico.org.uk, or your national data protection authority in the EU.

 

California users (CCPA / CPRA)

You have the right to know what personal information we collect, use, and share. You have the right to delete your personal information. You have the right to opt out of the sale of your personal information — we do not sell your personal information.

 

Canadian users (PIPEDA / CASL)

Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies to us. You have the right to access and correct your personal information. We only send marketing emails with your express consent, in compliance with CASL.

 

To exercise any of your rights, please email us at privacy@niftygiftyapp.com. We will respond within 30 days (or sooner where required by law). We do not charge a fee to exercise your rights.

 

8.  Marketing communications

We will only send you marketing emails if you have given us your consent. We offer three types of marketing communication, and you can choose to opt in or out of each category separately:

 

• App news and product updates: new features, improvements, and important announcements about the App.

• Gifting tips and ideas: inspiration and suggestions to help you find the perfect gift.

• Seasonal planning guides: timely content around key gifting seasons (e.g. Christmas, Valentine’s Day, Mother’s Day).

 

You can:

• Opt in when you create your account.

• Opt in via occasional in-app prompts — for example, after you send your first claim link or complete your subscription.

• Opt in or out of each category at any time in the App under Settings > Preferences > Marketing Communications.

• Unsubscribe from all marketing using the link in the footer of any marketing email.

 

If you opt out, we will stop sending marketing emails in that category within 2 business days. We will still send you essential service emails — like subscription receipts and occasion reminders — because these are necessary for your account and do not require marketing consent.

 

ℹ  We keep a record of your consent choices as required by law, including the date and time of consent, the version of this policy in effect, and whether consent was given at account creation or changed later. If you ask us to delete your account, we retain consent records for up to 6 years in anonymised form.

 

9.  Children’s privacy

The App is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@niftygiftyapp.com and we will delete it promptly.

 

ℹ  In some jurisdictions the age threshold is higher — for example, 16 in parts of the EU. If you are under the applicable age in your country, please ask a parent or guardian to use the App on your behalf.

When you add a contact to the App and select an age range of 0–3, 4–12, or 13–17, the App displays an age verification prompt. You must tap ‘I understand and agree’ to confirm that appropriate parental or guardian awareness is in place before proceeding. This prompt appears both when adding a new contact and when editing an existing contact’s age details. Your acknowledgement is recorded: we store a timestamp against the contact record noting the date and time you confirmed the prompt and the age range selected. If a contact's age range is subsequently changed to an adult range (18 or older), the recorded timestamp is removed.

 

10.  Security

We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, and alteration. These steps include:

• Storing your data on Supabase’s secure infrastructure with encryption at rest and in transit.

• Using HTTPS for all communications between the App and our servers.

• Restricting access to your personal information to employees and contractors who need it to operate the App.

• Using industry-standard authentication and access controls.

 

No method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable measures, we cannot guarantee absolute security. If a data breach occurs that is likely to harm you, we will notify you and the relevant authorities as required by law.

 

11.  Cookies and tracking

The Nifty Gifty App is a mobile application and does not use browser cookies. We use the following technologies on our mobile app:

• Session tokens: to keep you logged in securely.

• Analytics: we may collect anonymised usage data to understand how people use the App. This data cannot be used to identify you personally.

• Crash reporting: error and crash logs to help us fix technical problems.

• Advertising identifiers: your Google Advertising ID (Android) or Apple IDFA (iOS) are collected by analytics tools integrated into the App. On iOS, we request your permission before collecting your IDFA via Apple’s App Tracking Transparency prompt. You can reset or limit ad tracking at any time in your device settings. We use advertising identifiers for aggregate analytics only — not to serve you personalised ads.

 

If we launch a website at niftygiftyapp.com, we will update this section to describe any cookies we use there.

 

12.  Links to other services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those services. We encourage you to read their privacy policies before providing them with your information.

 

13.  Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the ‘last updated’ date at the top of this document. If we make a significant change — for example, a new way of using your information — we will notify you in the App and, where required by law, ask for your consent.

 

We encourage you to review this policy periodically. Continuing to use the App after a change takes effect means you accept the updated policy.

 

14.  How to contact us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal information, please contact us:

 

Email: privacy@niftygiftyapp.com

Company: Reputation Continuum Pty Ltd

App: Nifty Gifty App — niftygiftyapp.com

Location: Western Australia, Australia

Response time: We aim to respond to all privacy enquiries within 30 days.

 

If you are not satisfied with our response, you have the right to complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the privacy regulator in your country.

 

 

Nifty Gifty App  ·  Privacy Policy v5.0  ·  Reputation Continuum Pty Ltd  ·  Western Australia, Australia  ·  privacy@niftygiftyapp.com  ·  Last updated 3 July 2026