Privacy

What we store

• Account details: your email address, first name, and any lists or wishes you create.
• Gift reservations: when someone reserves a gift, we store their name, email, message, and which wish they picked. The list owner never sees who reserved what, so the surprise is kept intact.
• Technical logs: basic error and security logs to keep the app running safely. These do not include passwords.

How we use giver details

A giver's name, email, and message are used only for their reservation. We use them to send the reservation confirmation, the optional unreserve link, and a gentle nudge if the gift is still marked reserved after a few days. We do not use giver details for marketing, and we never sell them.

How long we keep things

• Giver details: deleted 90 days after the list's occasion date. If the list has no occasion date, we delete them 12 months after they were collected.
• Your account, lists, and wishes: kept until you delete your account. You can do that in your account settings, and it will remove your lists and wishes along with it.

Security

We use Lovable Cloud's backend infrastructure, which includes standard protections like encrypted data in transit and access controls. We keep your account behind a password, and we never store your password in plain text.

Cookies and analytics

We only use the cookies needed to keep you signed in and to keep the app working. We do not use third-party analytics or advertising cookies.

Questions or requests

For privacy questions, data requests, or to ask us to delete something sooner, email us at hello@shuppy.com.