About this policy
DEVELU OÜ is responsible for the processing described here. Contact us at develu.oy@gmail.com.
This policy covers giftfoxly.com, the app at app.giftfoxly.com, the native GiftFoxly app, and reminder email.
What data we use
- Account data: your account identifier and, where available, your email address, name, profile image, timezone, and reminder preference. An authentication provider handles sign-in; GiftFoxly does not receive your password.
- Planning data: the people, occasions, gifts, gift photos, notes, budgets, dates, links, and contact details you choose to save. In a Household, records you mark as Household or Shared are visible to the other member. This may include information about someone who does not use GiftFoxly, so please avoid unnecessary or sensitive details.
- Reminder data: the details needed to schedule and send reminders, plus limited delivery history used to prevent duplicate messages.
- Billing data: customer, subscription, price, status, and renewal details for paid plans. Our payment provider processes payment details; GiftFoxly does not store full card or bank details.
- Limited first-party product counts: daily aggregate counts for fixed product events such as app activity, billing views, feature interest, checkout and subscription outcomes, Household activity, cancellation choices, gift status outcomes, and reminder delivery outcomes. Metric rows contain no names, email addresses, raw URLs, IP addresses, device fingerprints, or raw event stream. Daily aggregate rows are not linked to an account and may remain after an account is deleted. We also keep limited account milestone/activity dates needed to make these counts unique and current.
- Technical and support data: information needed to keep the service secure and working, such as IP address, request time, device or browser information, service logs, and messages you send us.
Most data comes from you. Account information comes from our authentication provider, subscription status comes from our payment provider, and technical information comes from your use of the service and our providers. Account identity is required to use the app; most planning fields are optional. Email reminders are enabled by default for new accounts. An email can be scheduled only for a reminder rule you create and when an account email and saved timezone are available. You can turn email reminders off at any time.
Gift photos are optional. The native app uses your camera only with your permission, or lets you choose individual photos from your library. Uploaded gift photos are resized and re-encoded without embedded location metadata. A photo follows its gift’s sharing setting and is removed when you replace or delete the photo or delete the gift.
If you save a product link, GiftFoxly may fetch its public title and image and store a thumbnail. The linked site receives the normal technical request, including the link, request time, and service IP address. Do not save private or credential-bearing links.
Why we use data
- To provide your account, private planning tools, paid subscription, and requested support under our contract with you.
- To provide reminder email for reminder rules you configure as part of our service contract with you. You can turn it off at any time without losing access to the rest of the app.
- To provide the private planning service and keep it secure and reliable, based on our legitimate interests. We do not contact people in your plans.
- To comply with law and respond to valid legal requests where required.
We do not sell personal data or use it for advertising, cross-site tracking, marketing email, or automated decisions with legal or similarly significant effects. The limited first-party counts support service operations, product planning, billing health, and reliability under our legitimate interests. They use fixed event labels and aggregate counts, not a behavioral profile or a raw event stream.
Who helps us provide GiftFoxly
Specialist service providers help with account authentication, application and data hosting, website delivery and security, reminder-email delivery, and paid-plan payments. They receive only the data needed to provide those services.
Some providers process data outside Estonia and the European Economic Area, including in the United States. Where required, transfers are protected by an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful safeguard. Contact us to ask which safeguard applies or request a copy.
We may also disclose the minimum necessary data to advisers, courts, regulators, or authorities where legally required or needed to protect users, the service, or legal rights.
GiftFoxly has no advertising, cross-site tracking, third-party analytics, tracking pixels, or non-essential cookies. The app uses technology necessary for authentication, security, delivery, and limited first-party product counts, so we do not show a cookie-consent banner.
How long we keep data and your choices
We keep account and planning data while your account is open. Data you delete is removed from the live app, although limited information may remain temporarily in backups, security logs, delivery history, or where law requires it. Providers keep their records under their own retention rules. Routine support messages are normally kept for up to 12 months after resolution.
There is no in-app whole-account deletion button yet. To delete your account and GiftFoxly data, email develu.oy@gmail.com, preferably from your account address. We will verify the request and normally complete deletion from the live service and authentication account within 30 days. We will explain if a legal exception or extra verification changes that timing.
Your rights
Depending on the circumstances, you may ask us to access, correct, delete, restrict, or provide a portable copy of your personal data, or object to processing based on legitimate interests. You can turn reminder email off at any time.
Email requests to develu.oy@gmail.com. We may need to verify your identity and normally respond within one month. You may also complain to the Estonian Data Protection Inspectorate or the data-protection authority where you live or work.
We use access controls, owner-scoped data, validation, limited provider access, and other safeguards to protect GiftFoxly. No online service can promise absolute security. We may update this policy when the service, providers, or law changes; the date above shows the latest version.