Privacy Policy

Last updated: May 23, 2026  ·  Effective: May 23, 2026

This Privacy Policy describes how GivWrap LLC (“GivWrap,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the GivWrap mobile application and any related services (collectively, the “Service”).

This Privacy Policy applies to information we collect when you download, install, register for, or use the Service.

1. Summary of Key Points

• What we collect: Your account information (email, password), the personal information you choose to enter about gift recipients (such as names, relationships, birthdays, sizes, and preferences), the gift ideas and URLs you save, subscription and purchase information, and limited technical data about your device and use of the app.
• Why we collect it: To provide and improve the Service, to deliver subscription features, to keep the app secure, and to comply with legal obligations.
• Who we share it with: Service providers that help us operate the Service (such as our cloud hosting, authentication, subscription, and email providers), affiliate marketing networks when you tap a retailer link, and as required by law. We do not sell your personal information.
• Your choices: You can review, correct, export, or delete your account and information at any time. You can opt out of certain processing as described in Section 9.
• Age limits: GivWrap is intended only for users 18 years of age or older. We do not knowingly collect information from anyone under 18.

2. Information We Collect

2.1 Information You Provide Directly

Account information. When you create an account, we collect your email address and a password (stored in encrypted form). If you use Sign in with Apple or another third-party login provider, we receive a unique identifier from that provider and, depending on your choices, your email address.

Recipient information. GivWrap allows you to create profiles for people you intend to give gifts to (“Recipients”). The information you enter about Recipients may include their name or nickname, your relationship to them, birthday or important dates, age, clothing or shoe sizes, preferences, interests, and any notes you choose to add. This information is associated with your account and is not visible to other GivWrap users.

Gift information. When you save a gift idea, we collect the information you enter (such as product name, description, price, occasion, and notes) as well as any URL you paste. If you paste a URL from a supported retailer, we send that URL to our backend service to retrieve publicly available product information (such as title, image, and price), and we store the result with your gift entry. See Section 3 for more on how URL scraping works.

Subscription and purchase information. When you subscribe to GivWrap, we receive a record of your purchase from Apple’s App Store or Google Play, including the product purchased, transaction date, and subscription status. We do not receive or store your full payment card or bank account details — those are handled by Apple and Google.

Communications. If you contact us by email or through in-app support, we keep a record of your message and our response.

2.2 Information Collected Automatically

Device and usage information. When you use the Service, we automatically collect limited technical information including device type, operating system and version, app version, language settings, time zone, IP address, and general usage events (for example, that an account was created, that a gift was saved, or that a crash occurred). This information helps us operate the Service, diagnose problems, and improve the app.

Cookies and similar technologies. GivWrap is a mobile application and does not use traditional browser cookies. We do use device-level identifiers and local storage on your device to keep you logged in and to remember your preferences.

2.3 Information We Do Not Collect

• We do not collect precise geolocation data.
• We do not collect contacts, photos, calendars, or microphone or camera data, unless you specifically grant the app permission for a feature that requires it (and we will ask before doing so).
• We do not collect health, financial, biometric, or other categories of sensitive personal information.
• We do not knowingly collect any information from anyone under 18 years of age.

3. URL Scraping and Third-Party Retailer Content

A core feature of GivWrap is the ability to paste a URL from a retailer’s website and have product details automatically populated into your gift entry. Here is how that works and what it means for your privacy:

• When you paste a URL into the Service, we send that URL to our backend hosted on Railway, which retrieves the public web page at that URL and extracts product details such as title, image, description, and price.
• Our backend may use third-party scraping services (such as RapidAPI, ScrapingDog, ScrapingBee, or Zyte) to perform this retrieval. These providers receive the URL and return the extracted product data. They do not receive your account information or any information about you personally.
• GivWrap is not affiliated with, sponsored by, or endorsed by any retailer whose URLs you may paste. Product images, descriptions, and prices retrieved from retailer websites remain the property of those retailers and are displayed in your gift entries for your personal reference only.
• Retailer URLs sometimes change, expire, or are reformatted by GivWrap to include affiliate tracking parameters as described in Section 4.

4. Affiliate Marketing Disclosure

GivWrap participates in affiliate marketing programs, including programs operated by Amazon Associates, Walmart, Target, and other retailers and affiliate networks. This means that when you tap on a retailer link saved in the app, the link may include tracking parameters that allow the retailer or affiliate network to credit GivWrap with a commission if you make a qualifying purchase.

Important things to know:

• GivWrap may earn a small commission from qualifying purchases. This does not change the price you pay or affect what products you can save.
• As an Amazon Associate, GivWrap earns from qualifying purchases.
• When you tap an affiliate link, the affiliate network or retailer typically receives information such as the time of the click, the source app (GivWrap), the URL clicked, your IP address, and a unique click identifier. Some affiliate networks may also receive limited device information from the retailer’s website after you arrive.
• We do not share your name, email address, account details, recipient information, or gift list contents with affiliate networks.
• Our use of affiliate links does not constitute an endorsement of any retailer or product. We do not curate, recommend, or guarantee any product available through retailer links.

5. How We Use Your Information

We use the information we collect for the following purposes:

• To provide the Service. Create and manage your account, store and display your gift lists and recipients, retrieve product information from URLs you paste, and deliver subscription features.
• To process subscriptions and purchases. Manage your free trial, activate your subscription, and confirm renewal status through Apple or Google.
• To communicate with you. Respond to your questions, send important Service-related notices (such as changes to these policies or to your subscription), and, with your consent, send occasional product updates.
• To keep the Service secure. Detect and prevent fraud, abuse, and security incidents.
• To improve the Service. Diagnose technical problems, understand how the Service is used in aggregate, and develop new features.
• To comply with law. Respond to lawful requests from public authorities, enforce our Terms of Service, and protect our legal rights.

We do not use your information to train artificial intelligence or machine learning models on behalf of third parties, and we do not use the contents of your gift lists for advertising targeting.

6. How We Share Your Information

We share your information only as described in this section. We do not sell your personal information.

6.1 Service Providers (Sub-processors)

We share information with service providers that help us operate the Service. These providers are contractually obligated to handle information consistent with this Privacy Policy. Our current key service providers are:

• Supabase — authentication, database, and account storage (United States).
• Railway — hosting of our URL scraping backend (United States).
• RevenueCat — subscription management and entitlement verification (United States).
• Apple App Store and Google Play — payment processing and subscription billing.
• Resend — transactional email delivery (such as password resets and account notifications).
• URL scraping providers — including RapidAPI, ScrapingDog, ScrapingBee, and Zyte, which retrieve publicly available product information from URLs you paste. These providers receive only the URL, not information about you.

We may update this list of service providers from time to time as our infrastructure evolves. The most current list will always be available in this Privacy Policy.

6.2 Affiliate Networks

As described in Section 4, when you tap a retailer link, the relevant affiliate network or retailer receives click and device information through standard affiliate tracking parameters.

6.3 Legal and Safety

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with a law, regulation, legal process, or governmental request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of GivWrap, our users, or others.

6.4 Business Transfers

If GivWrap is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you (such as by email or a notice in the app) of any change in ownership or use of your personal information.

6.5 With Your Direction or Consent

We may share information for any other purpose with your express direction or consent.

6.6 No Sale of Personal Information

We do not sell your personal information for money. Under certain state privacy laws (such as the California Consumer Privacy Act), sharing information with affiliate networks for cross-context behavioral advertising can constitute “sharing” in a technical sense. If we ever enable such sharing, we will update this Privacy Policy and provide an opt-out mechanism as required by law.

7. Information About Other People (Recipients)

GivWrap is built around the idea that you, as a giver, track gifts and information for the Recipients you intend to give them to. This is different from most apps, and it raises specific questions about the information you enter about other people.

7.1 Your Responsibility

When you enter information about a Recipient (such as a name, birthday, sizes, or preferences), you represent and warrant that:

• You have a personal relationship with the Recipient and a legitimate reason to keep this information for the purpose of giving them gifts;
• You will not enter information about a Recipient that you would not be comfortable telling them you have stored;
• You will not enter sensitive categories of information about a Recipient (such as health, sexual orientation, religious beliefs, or financial information) unless strictly necessary for a gift; and
• If you live in a region (such as the European Economic Area or the United Kingdom) where data protection laws require a lawful basis for processing information about another person, you are responsible for confirming you have such a basis.

7.2 Recipient Privacy Requests

Because Recipient information is entered by you and is associated with your account, we do not have a direct relationship with Recipients. If a Recipient contacts us asking about information they believe you may have entered about them, we will direct them to contact you, the account holder. If the Recipient demonstrates a legal right to deletion (such as under GDPR), we will assist as required by law.

7.3 Information About Minors as Recipients

You may enter information about minor Recipients (such as your own children, nieces, nephews, or godchildren) for the purpose of giving them gifts. You agree that you have the right to do so as a parent, guardian, or family member, and that you will keep such information limited to what is reasonably necessary for gift-giving purposes.

8. How Long We Keep Your Information

We keep your information for as long as your account is active and for a reasonable period afterward, as follows:

• Account and content data (including recipients, occasions, gifts, notes, and settings) are retained unless and until you request account deletion. If your free trial or subscription expires, we continue to retain your data so that you may reactivate your subscription and resume using the service. If you request account deletion, your account enters a 30-day recovery period, after which your data is permanently deleted from our active systems. Backup copies may remain for up to an additional 60 days.
• Subscription and payment records: kept for up to seven (7) years after your last transaction, as required by tax, accounting, and consumer protection laws.
• Communications with support: kept for up to three (3) years after your last interaction.
• Security and fraud logs: kept for up to one (1) year.
• De-identified or aggregated information (which cannot be used to identify you): may be kept indefinitely for analytics and product improvement.

We may keep information longer than the periods above if required by law, if necessary to resolve a dispute, or if necessary to enforce our agreements.

9. Your Rights and Choices

9.1 Account Controls

You can:

• Review and update your account information in the app’s settings;
• Export a copy of your data by emailing us at admin@givwrap.app;
• Delete your account at any time from the app’s settings or by emailing us at admin@givwrap.app.

9.2 Marketing Communications

If we ever send you marketing emails, you can opt out at any time by clicking the “unsubscribe” link in the email or by emailing us. Even if you opt out of marketing emails, we may still send you transactional or Service-related emails (such as password resets, billing notices, and policy updates).

9.3 Device-Level Controls

You can manage app permissions (such as notifications) through your device’s settings. Apple and Google also provide controls for managing app tracking, advertising identifiers, and analytics.

9.4 Rights Under U.S. State Privacy Laws

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific rights under your state’s privacy law. Depending on your state, these may include:

• The right to know what personal information we have collected about you;
• The right to request a copy of your personal information in a portable format;
• The right to correct inaccurate personal information;
• The right to delete your personal information, subject to certain exceptions;
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not currently engage in such selling or sharing);
• The right to opt out of profiling that produces legal or similarly significant effects (we do not engage in such profiling);
• The right to be free from discrimination for exercising your privacy rights.

To exercise any of these rights, please email us at admin@givwrap.app with the words “Privacy Rights Request” in the subject line. We will verify your identity before fulfilling your request. We will respond within the timeframes required by applicable law (typically 45 days under most U.S. state laws).

If we decline your request, you have the right to appeal our decision by replying to our response or by contacting us at admin@givwrap.app with the words “Privacy Rights Appeal” in the subject line.

9.5 Rights Under GDPR, UK GDPR, and Swiss Data Protection Law

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

• The right to access your personal data;
• The right to rectification of inaccurate personal data;
• The right to erasure (“right to be forgotten”);
• The right to restriction of processing;
• The right to data portability;
• The right to object to processing;
• The right to withdraw consent at any time, where processing is based on consent;
• The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at admin@givwrap.app. The legal bases we rely on to process your personal data are: (a) performance of a contract with you (to provide the Service); (b) our legitimate interests in operating, securing, and improving the Service; (c) your consent, where applicable; and (d) compliance with legal obligations.

10. International Data Transfers

GivWrap is operated from the United States, and we store information on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of residence.

Where required by law, we rely on appropriate safeguards for international data transfers, including the European Commission’s Standard Contractual Clauses (SCCs) with our sub-processors, and where applicable the UK Addendum and the Swiss-U.S. Data Privacy Framework.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. Examples include encryption of data in transit, password hashing, role-based access controls, and database-level access policies that restrict each user’s data to that user’s account.

No method of transmission over the internet or storage system is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk. If we ever experience a data breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.

12. Children’s Privacy

GivWrap is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete the information and terminate the associated account.

If you believe a person under 18 has provided personal information to us, please contact us at admin@givwrap.app.

Adults who use GivWrap may enter information about minors as Recipients (for example, a parent tracking gifts for a child). That information is provided and controlled by the adult account holder as described in Section 7.

13. Do Not Track Signals

Some browsers and devices send a “Do Not Track” or similar signal. GivWrap is a mobile application and does not respond to browser-based Do Not Track signals. We honor opt-outs as required by applicable state privacy laws and Apple’s and Google’s device-level tracking controls.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by updating the “Last updated” date at the top of this Privacy Policy and, where appropriate, by an in-app notice or email. Your continued use of the Service after the change becomes effective constitutes your acceptance of the updated Privacy Policy.

15. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your information, please contact us: