Privacy Policy

1. Using Gift Tracker without an account

You can use Gift Tracker on one phone without signing in. Your lists are then stored only on that phone, encrypted, and nothing about them is sent to us. If you make a backup, it's a password-protected file saved wherever you choose; we never receive it.

2. Signing in with Google

To sync lists between phones and share them, you sign in with your Google account. Google then gives our sign-in service (Firebase Authentication) your name, email address, profile picture link and a Google account identifier, and Firebase gives you a random account ID. We use these only to sign you in, keep your lists connected to your account, and let other people share lists with you by email. We don't get access to your Gmail, contacts, files or anything else in your Google account.

3. Your lists and end-to-end encryption

The contents of your lists are end-to-end encrypted: they're encrypted on your phone (AES-256-GCM) before they're uploaded, and can only be decrypted by the phones of people who belong to that list. This covers:

• people (names, relationships, birthdays and other dates, sizes, likes and notes) and groups;
• gifts and occasions (ideas, prices, budgets, shops, links, notes, status, where a gift is hidden, whether it's wrapped);
• gift photos;
• purchase details (who bought a gift, what it cost, where it's hidden), which are encrypted with a second key that only the list's managers hold;
• the name you show to other members of a list.

The keys that unlock your lists stay on your members' phones. Copies stored online are themselves locked with keys that never reach our servers. This means we cannot read your lists, and neither could anyone who broke into our servers.

4. What our servers can see

To sync and share encrypted data, our servers (Google Cloud Firestore) also store some information that isn't encrypted:

5. Sharing lists with other people

When you share a list, its members can see its contents according to their role. Owners and members with full control see everything, including purchase details. Guests can see the gifts and mark them as bought, but can't see who bought what or what anyone paid. On a wishlist, nobody (not even the owner) can see who is buying which gift. Members of a list can see each other's names as shown in that list. Please only add details about other people that you're comfortable sharing with the people on that list.

6. Passkeys, recovery codes and app lock

• Passkeys: if you create one, it's stored by your phone's password manager (for example Google Password Manager) for goldengemcreations.com, and you confirm it with your screen lock or fingerprint. We never receive the passkey's private key or your fingerprint.
• Recovery code: a long code you keep somewhere safe, such as a password manager. We never receive it.
• App lock: handled entirely on your phone by Android. Fingerprints and PINs are never sent to us.

7. Barcodes, product links and the camera

When you add a gift by scanning a barcode or pasting a product link, Gift Tracker looks the product up so it can fill in the name, picture and price:

• a barcode number is sent from your phone to the public product databases UPCitemdb and Open Food Facts;
• a product link is opened from your phone to fetch that web page from the shop;
• product pictures are downloaded from the shop or database that provided them.

These requests go directly from your phone to those services, not through us. They contain only the barcode or link, never anything from your lists, but like any website those services can see your phone's IP address. Their own privacy policies apply. Scanning uses Google's barcode scanner in Google Play services, which reads the barcode on your phone; Gift Tracker receives only the number, never camera images.

8. Optional support purchases

Gift Tracker is free, with every feature for everyone. You can choose to buy optional "thank-you" items that unlock nothing. These are processed by Google Play; we receive confirmation of the purchase from Google, but never your payment details. Refunds are handled by Google Play under its policies.

9. Usage statistics and crash reports

To see how Gift Tracker is used and fix problems, the app sends anonymous usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics). Both are on by default, except in the European Union, the rest of the EEA, the UK and Switzerland, where nothing is sent unless you agree when you first use the app. You can turn either off at any time in Settings → Security & account, under "Helping improve Gift Tracker". Turning statistics off also resets this phone's anonymous analytics ID.

What's sent:

• Actions, as fixed codes. For example "a gift was added, by barcode", "a list was shared", "a wish was claimed", "the tour was skipped at step 3", which help topics and screens are opened, whether a barcode or link lookup found the product, which unlock method and app lock mode are chosen, and backups, imports, exports and support purchases.
• Rough counts of how many gift lists, wishlists and shared lists are on the phone, in ranges (0, 1, 2–3, 4–9, 10+), whether you use an account or the phone only, and your Google Play store country.
• App and device details that Firebase collects automatically: a random ID for this installation of the app, app version, phone model, Android version, language, approximate country (worked out from your IP address, which Google Analytics doesn't store), and when and for how long the app is used.
• Crash reports: the type of error and where in our code it happened (a stack trace), the screen that was open, the app version, phone model, Android version and the phone's state (such as free memory), for crashes and for unexpected errors that didn't crash the app.

What's never sent: anything you type or anything from your lists, including names, gift titles, notes, prices, shops, links and email addresses. The app only sends values from a fixed set of short codes and drops anything else, and it removes error messages from crash reports before they're uploaded, because those can contain text you typed. No account ID or other user ID is attached, so the statistics aren't linked to your Google account. Gift Tracker doesn't use the advertising ID, and advertising and ad personalisation features are turned off.

10. What we don't do

• No advertising, and no advertising identifiers.
• No advertising ID, no ad personalisation, and no tracking across other apps or websites.
• Usage statistics and crash reports never include your lists or anything you type, and you can turn them off (see section 9).
• No access to your contacts, location, microphone or files (except files you choose to import or export).
• We never sell, rent or trade your information, and we don't share it with anyone except the service providers below, or where the law requires it.

11. Service providers and where data is stored

Firebase Authentication, Google Analytics and Crashlytics are global Google services, so sign-in information, usage statistics and crash reports may be processed outside Australia, including in the United States. Everything sent between the app and these services is encrypted in transit (HTTPS/TLS).

12. How long we keep information

• Your account and lists stay until you delete them. Deleting a list deletes its contents from our servers.
• Email invitations expire after 14 days.
• Usage statistics: Google deletes the detailed event data after at most 14 months; only overall totals (such as how many people used the app each month) are kept. Crash reports are deleted after 90 days.
• When you delete your account, your sign-in record, key backup, mailbox and the lists only you belong to are deleted straight away. Shared lists you belonged to stay with their other members, including gifts you added to them (see Delete account).
• After deletion, Google (which runs our servers) removes the data from its own systems and backups on its standard schedule.

13. Your choices, access and deletion

• Delete your account: in the app, open Settings → Security & account → Delete account. If you no longer have the app, see Delete your account and data.
• Erase this phone: without an account, Settings → Security & account → Erase all data deletes every list on the phone.
• Usage statistics and crash reports: turn either off in Settings → Security & account, under "Helping improve Gift Tracker".
• Leave a shared list at any time from the list's settings.
• Access and correction: your lists are in the app, where you can view, change, export or delete them. Ask us if you'd like to know what account information we hold about you, or to correct it.

We handle personal information in line with the Australian Privacy Principles. If you're unhappy with how we've handled your information, please contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you live elsewhere, you may have similar rights under your local law, and we'll honour them.

14. Children

Gift Tracker is meant for adults and families planning gifts, and isn't directed at children. Signing in requires a Google account, which has its own minimum age. We don't knowingly collect personal information from children under 13; if you think a child has given us information, contact us and we'll delete it.

15. Contacting us for support

If you contact us through the app (Settings → Help & support → Contact us & suggestions), our website or by email, we receive what you send: your message, its topic, and usually your email address and name (in the app the email is optional for suggestions, but without it we can't reply). Messages from the app also include the app version and your phone model and Android version, unless you turn that off on the form. We keep this in our support inbox (Google Firebase, in Sydney, Australia), use it only to help you, and delete it when it's no longer needed. Support messages are not end-to-end encrypted, so please don't include details from your lists.

16. Changes to this policy

If we change how Gift Tracker handles information, we'll update this page and its effective date. If a change is significant, we'll also let you know before it takes effect, for example in the app.

17. Contact us

GoldenGem Creations, Queensland, Australia (ABN 85 072 632 232)
Email: apps@goldengemcreations.com
Contact form: goldengemcreations.com/contact