privacy policy

1. Data stored on your device

The majority of your data never leaves your device. The following is stored locally using Apple's SwiftData framework and is not transmitted to any server:

• People you add (names, birthdays, interests, sizes, notes)
• Gift ideas, events, and spending history
• Your preferences (accent colour, region, holidays)
• Voice note recordings and transcriptions

This data is included in your iCloud backup if you have iCloud enabled, under Apple's own privacy terms.

2. Account and authentication

If you choose to sign in (optional, required only for AI features), we use Sign in with Apple. We receive:

• A unique Apple user identifier
• Your email address (or Apple's private relay address if you choose to hide it)

We store this in our database (hosted on Supabase) solely to authenticate your AI suggestion requests and manage your subscription.

3. AI suggestion features

When you request personalised gift suggestions, we send the following to our server to generate recommendations:

• The person's relationship, age range, gender, location, interests, dislikes, and sizes (never their name)
• Notes you have logged about them
• Existing gift ideas (to avoid duplicates)
• Your country and currency

This data is processed by Anthropic's Claude AI via our secure server-side proxy. We do not store the content of your requests or the AI responses on our servers. We do log anonymised usage counts and token usage for billing purposes.

Anthropic's data handling is governed by their privacy policy. Per their commercial API terms, your data is not used to train their models.

4. Usage tracking

We track the number of AI requests you make each month to enforce free and premium tier limits. We store:

• Monthly request counts (suggestions and guide refreshes)
• Token counts and estimated cost (for our internal cost management)

This data is linked to your account ID and cannot identify you personally.

5. Anonymous analytics

We collect anonymous, non-identifiable analytics to understand how the app is used and to power features like trending gifts. This data cannot be traced back to any individual user. We collect:

• Gift events: when a gift idea is saved, purchased, or given — including the gift title, category, price range, retailer, occasion type, and recipient demographics (relationship, age range, location). No names or user IDs are included.
• Usage snapshots: periodic aggregate counts of how many people, gift ideas, events, and notes exist on the device, along with common interests and relationship types. Sent at most once per day.

This data is stored separately from your account and contains no personally identifiable information. It is used solely to improve the app and surface trending gift data to all users.

6. Subscriptions

Subscriptions are processed entirely by Apple through StoreKit 2. We do not collect or store any payment information. We receive subscription status updates (active, expired, renewed) to determine your tier.

7. Analytics and tracking

We do not use any third-party analytics, advertising SDKs, or tracking frameworks. We do not track your behaviour, build advertising profiles, or sell your data to anyone.

8. Data sharing

We do not sell, rent, or share your personal data with third parties. The only external service that receives any of your data is Anthropic (for AI features), as described above.

9. Data retention and deletion

Your on-device data persists until you delete the app or remove it manually. Your server-side account data (email, usage counts, subscription events) can be permanently deleted at any time by tapping "Delete Account" in the app's Settings. This immediately removes all your data from our servers.

10. Children's privacy

Toayen is not directed at children under 13. We do not knowingly collect personal information from children.

11. Your rights

You can:

• Use the app without signing in (AI features will be unavailable)
• Use Apple's private email relay to hide your real email
• Delete your account and all server-side data at any time from Settings
• Request a copy of your server-side data by contacting us

12. Changes to this policy

We may update this policy from time to time. We will notify you of material changes through the app or by updating the effective date above.