Privacy Policy

Last updated: May 6, 2026

This Privacy Policy explains how Gift Whisper handles information when you use the mobile app and its related product pages. Gift Whisper is built by Rene Arnegger and Tapify Labs.

Short version: Gift Whisper is designed as a local-first app. Your gift list (people, birthdays, ideas) is stored on your device. The optional account holds only your email and an AI usage counter on European servers.

1. What Gift Whisper stores

Gift Whisper can store the following information locally on your device:

Names of people you add
Birthdays and reminder preferences
Avatars or emojis you assign to people
Gift idea notes and optional direct product links you choose to save
Basic app state such as onboarding completion

According to the current app architecture, this information is stored in a local SQLite database on-device.

2. Optional account and where your gift list is stored

Your gift list (people, birthdays, gift ideas) is stored on your device. We do not maintain a cloud dashboard with your gift list.

You can optionally create an account with email and password. The account is used to:

Track your daily quota for AI-generated gift ideas (a counter per user per day)
Validate referral codes

Account data (email, hashed password, AI usage counter) is stored on Supabase servers in the European Union (AWS, Ireland). The app itself never uploads the contents of your gift list.

3. Notifications

If you enable notifications, Gift Whisper schedules reminder notifications on your device to help you prepare for birthdays and other occasions.

Notification permission is optional.
Reminders are used to notify you about dates you configured in the app.
You can disable notifications through the app or through your device settings at any time.

4. External shopping links

Gift Whisper can generate quick Amazon and Etsy search links from the gift idea text you save. These links are generated on-device from your note and are only opened if you choose to tap them.

When you leave Gift Whisper and open Amazon, Etsy, or another external website, your use of that external service is governed by that service's own privacy policy and terms.

5. AI gift idea generation

When you ask Gift Whisper to generate gift ideas, the request is sent to our backend in the European Union (Supabase, AWS Ireland), which then forwards a prompt to OpenAI in the United States to produce the suggestions.

What is sent to OpenAI: the budget range, the optional age, and the free-text description you typed. The recipient's name is removed before the prompt leaves our European server and replaced with a generic placeholder ("this person").

We do not send the rest of your gift list, your other people, your account email, or any device identifiers to OpenAI.

OpenAI processes the prompt to generate suggestions and is contractually bound by the OpenAI API Data Processing Addendum, which includes the EU Standard Contractual Clauses for transfers to the United States. Per OpenAI's API data usage policy, prompts submitted via the API are not used to train OpenAI's models by default.

6. Analytics and crash reporting

To understand how the app is used and to detect bugs, Gift Whisper may include the following services. Both are configured to use European data regions.

PostHog (EU region) — anonymous product analytics, such as which screens are opened or which buttons are tapped. No gift list content and no person names are sent to PostHog.
Sentry (Frankfurt, Germany) — automatic error and crash reporting, including stack traces and limited technical context. We do not deliberately attach gift list content to error reports.

7. Purchases and subscriptions

Gift Whisper may offer paid access, including yearly or lifetime options, depending on the release and store configuration.

Service	Purpose	Data category
Apple App Store / Google Play	Payment processing	Store-managed payment and transaction metadata
RevenueCat	Subscription status management	Purchase receipts and subscription metadata

These purchase systems do not need the contents of your saved gift ideas in order to process payment or entitlement status.

8. Data retention and deletion

Your gift list remains on your device until you delete it in the app or remove the app from your device. Account data on Supabase remains until you ask us to delete it. To request deletion of your account and AI quota records, send an email to the contact address below.

9. Children

Gift Whisper is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us so we can delete it.

10. Your rights under the GDPR

If you are in the European Union or the EEA, you have the right to access, correct, or delete personal data we hold about you, to object to or restrict processing, and to lodge a complaint with your local data protection authority. For requests, contact us at the address below.

11. Changes to this policy

We may update this Privacy Policy if the app architecture, integrations, or legal requirements change. The updated version will be published on this page with a revised last updated date.

12. Contact

If you have questions about this Privacy Policy, contact:
Rene Arnegger
r.arnegger@googlemail.com

Note: this policy is aligned to the current Gift Whisper app architecture as inspected on May 6, 2026. Review it again before public app store submission if integrations or monetization settings change.