privacy policy

1. Data stored on your device

The majority of your data never leaves your device. The following is stored locally using Apple's SwiftData framework and is not transmitted to our servers:

• People you add (names, birthdays, interests, sizes, notes, photos)
• Gift ideas, occasions, and spending history
• Your preferences (accent colour, region, holidays)

If you have iCloud enabled, this data syncs between your devices through your private iCloud database and is included in your iCloud backup — both under Apple's own privacy terms. We cannot read your private iCloud data.

2. Account and authentication

If you choose to sign in (optional, required only for personalised suggestions, sharing, and notification features), we use Sign in with Apple. We receive and store:

• A unique Apple user identifier
• Your email address (or Apple's private relay address if you choose to hide it)
• Your name as shared by Sign in with Apple, used as your display name in shared occasions

We store this in our database (hosted on Supabase) to authenticate your requests, manage your subscription, and identify you to people you choose to share with.

3. Personalised suggestion features

When you request personalised gift suggestions, we send the following to our server to generate recommendations:

• The person's relationship, age range, gender, location, interests, dislikes, and sizes (never their name)
• Notes you have logged about them
• Existing gift ideas (to avoid duplicates)
• Your country and currency

This data is processed by Anthropic's Claude AI via our secure server-side proxy. We do not store the content of your requests or the generated responses on our servers. We do log anonymised usage counts and token usage for billing purposes.

Anthropic's data handling is governed by their privacy policy. Per their commercial API terms, your data is not used to train their models.

4. Usage tracking

We track your personalised suggestion usage to enforce free and premium tier limits. We store:

• Request counts and remaining credit balances (suggestions and guide refreshes)
• Promotional credit grants we have applied to your account
• Token counts and estimated cost (for our internal cost management)

This data is linked to your account ID.

5. Anonymous analytics

We collect anonymous, non-identifiable analytics to understand how the app is used and to power features like trending gifts. This data is stored without any user identifier and cannot be traced back to an individual account. We collect:

• Gift events: when a gift idea is saved, purchased, or given — including the gift title, category, price range, retailer, occasion type, and recipient demographics (relationship, age range, location). No names or user IDs are included.
• Usage snapshots: periodic aggregate counts of how many people, gift ideas, occasions, and notes exist on the device, along with common interests and relationship types. Sent at most once per day.

This data is stored separately from your account and is used solely to improve the app and surface trending gift data to all users.

6. Shared occasions and cards

Some features let you share gift planning with other people. Only what you actively choose to share leaves your device:

• Shared occasions. If you share an occasion (for example, planning Christmas with family), we store on our servers: the occasion's name and date, the display names of members, the names of the people the plan covers, and the gift list itself (gift titles, descriptions, prices, and statuses). This content is visible to everyone you invite, and is linked to the accounts of the members who create or edit it. Private notes on your own gift ideas are never shared.
• Person cards. Sharing a card by QR code passes it directly device-to-device — no server involved. Sharing a card by link seals it with end-to-end encryption on your phone: our server stores only unreadable ciphertext under a short code for up to 90 days, and the decryption key travels in the link itself, which never reaches our server. We cannot read your cards.

7. Notifications

Occasion and birthday reminders are scheduled on your device. If you enable notifications, we also store your device's push token with your account so we can deliver notifications, including occasional tips and offers from Toayen — this is stated where you enable notifications, and you can switch tips and offers off at any time in Settings (we honour that choice on our servers). Push tokens are removed when you sign out or delete your account.

8. Subscriptions

Subscriptions are processed entirely by Apple through StoreKit 2. We do not collect or store any payment information. We receive subscription status updates (active, expired, renewed) to determine your tier.

9. Analytics and tracking

We do not use any third-party analytics, advertising SDKs, or tracking frameworks. We do not track your behaviour across other companies' apps or websites, build advertising profiles, or sell your data to anyone.

10. Data sharing

We do not sell, rent, or share your personal data with third parties. The only external services that receive any of your data are Anthropic (for personalised suggestion features, as described above) and Apple (to deliver push notifications and process subscriptions).

11. Data retention and deletion

Your on-device data persists until you delete the app or remove it manually. Deleting your account in the app's Settings permanently removes all your server-side data: your account record (email, display name), usage counts and credit grants, subscription events, push tokens, shared occasions you own (including their gift lists), and any encrypted card links you created. Shared-card links also expire automatically after 90 days.

12. Children's privacy

Toayen is not directed at children under 13. We do not knowingly collect personal information from children.

13. Your rights

You can:

• Use the app without signing in (personalised suggestion, sharing, and push notification features will be unavailable)
• Use Apple's private email relay to hide your real email
• Switch off tips and offers at any time in Settings
• Delete your account and all server-side data at any time from Settings
• Request a copy of your server-side data by contacting us

14. Changes to this policy

We may update this policy from time to time. We will notify you of material changes through the app or by updating the effective date above.