Privacy Policy

This Privacy Policy explains how Gift it ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile app, website at shopit.store, or any related services (the "Services").

By using the Services, you agree to the practices described here. If you do not agree, please stop using the Services.

Information We Collect

Information You Provide

• Account information — name, email address, phone number, and authentication credentials managed through our identity provider
• Profile information — username, profile photo, bio, and other details you choose to add
• Order and shipping information — billing and shipping addresses, payment confirmations, and order history, collected through Shopify checkout
• Social activity — wishlists, follows, comments, gift sends, and other actions you take in the app
• Communications — messages, support requests, and feedback you send us

Information Collected Automatically

• Device and usage data — IP address, device identifiers, operating system, app version, and pages or screens viewed
• Push notification tokens — issued by Apple or Google when you enable notifications, used to deliver messages to your device
• Diagnostic data — crash reports and performance information through our error monitoring tools
• Cookies and similar technologies — used on our website (the mobile app does not use browser cookies)

Information From Third Parties

• Authentication and account details from our identity provider
• Order, payment, and fulfillment data from our commerce platform
• Analytics and attribution data from our analytics partners

How We Use Your Information

• Provide and operate the Services — create your account, process orders, manage wishlists and social activity, deliver gift cards, and send transactional emails
• Improve the Services — understand how features are used, debug issues, and develop new functionality
• Personalize your experience — recommend products, surface relevant activity from people you follow, and tailor content
• Communicate with you — send order updates, push notifications you have enabled, and (with your consent) promotional messages
• Security and fraud prevention — detect and prevent fraudulent transactions, account abuse, and policy violations
• Comply with law — meet legal obligations and respond to lawful requests

Social Features and Public Information

Gift it includes social features. Some information is visible to other users by default, including:

• Your username, profile photo, and bio
• Accounts you follow and accounts that follow you
• Public wishlists and items you add to them
• Comments you post
• Activity that appears in friend feeds, such as recent shopping activity from people you follow

You can adjust visibility settings or remove content in the app at any time. Information shared through social features may be cached by other users' devices and may not be immediately removed everywhere.

Profile Birthday

Your profile birthday is not part of the information described above as visible by default. It is private unless you affirmatively choose to share it.

• What we collect and why — a profile birthday is an optional month and day, stored privately on your profile. We use it to power a relative upcoming-birthday signal for accepted friends, but only if you choose to turn sharing on.
• Birth year. If you add your profile birthday during account setup, you may also be asked for a year. Everywhere else — adding a profile birthday for the first time outside account setup, or editing one already on file — only uses month and day; a year already on file (including one you provided before this section was published) stays on file unless you remove your profile birthday entirely. Where we hold a birth year, we use it only to help confirm age-based eligibility for certain account protections and features — it is not displayed to anyone else, including friends, and is not used for any other purpose.
• Sharing is private by default. Being friends with someone on Gift it does not, by itself, share your birthday. You must affirmatively set your birthday visibility to "Friends on Gift it" in your profile settings before anyone receives a signal.
• What friends actually see. Even when sharing is on, accepted friends only ever receive a relative signal (for example, that your birthday is coming up, or is today or tomorrow) — your stored numeric date is never shown, and neither is your birth year or age.
• Turning it off. You can stop new signals at any time by switching visibility back to "Only me," removing your profile birthday, unfriending or blocking the person, or starting account deletion. This does not retract information a friend already viewed or saved before you made the change.
• Retention. Your profile birthday and the record of your sharing choice are retained the same way as other account information described in "Data Retention," and are deleted when you delete your account.
• Push reminders. We do not currently send birthday-related push reminders. If we introduce them in the future, they will require a separate, specific opt-in.
• Never shared for these purposes. Your profile birthday, any birth year we hold, and your birthday-sharing choice are never provided to merchants, and are never included in advertising, analytics, crash-reporting, or application-log data.

Third-Party Service Providers

We rely on third-party providers to operate the Services. These providers process your information only as needed to provide services to us:

• Shopify — commerce platform, checkout, payments, and order fulfillment
• Clerk — user authentication and account management
• Convex — backend infrastructure and app data storage
• Expo / EAS — mobile app delivery, push notifications, and over-the-air updates
• Sentry — error monitoring and crash reporting
• PostHog — product analytics
• Resend — transactional email delivery

Each provider has its own privacy practices, which we encourage you to review.

Your profile birthday, any birth year we hold, and your birthday-sharing choice are excluded from what we send to Sentry and PostHog.

How We Share Information

We share personal information only in the circumstances described below:

• With merchants — order, shipping, and payment information necessary to fulfill orders you place
• With service providers — as listed above, to operate the Services
• With other users — through social features, as described above
• For legal reasons — to comply with applicable law, respond to lawful requests, or protect our rights, our users, or the public
• In business transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections
• With your consent — for any other purpose disclosed to you at the time

We do not sell your personal information.

Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated information
• Receive a portable copy of your information
• Object to or restrict certain uses of your information
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time
• Appeal a denied request

To exercise these rights, contact us at support@shopit.store. We may need to verify your identity before fulfilling your request. We will not discriminate against you for exercising these rights.

Push Notifications

With your permission, we send push notifications about orders, social activity, and updates from accounts you follow. You can disable push notifications at any time in your device settings or in the app's notification preferences.

Cookies

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, measure site performance, and analyze how visitors use the site. Most browsers let you block or delete cookies; doing so may affect some site features. Our mobile app does not use browser cookies.

Children's Privacy

Our Terms of Service require you to be at least 18 years old to use Gift it, or to have the consent of a parent or legal guardian. Regardless of claimed parental or guardian consent, the Services are not intended for, and we do not knowingly collect personal information from, children under 13 (or under 16 where required by law). Where we hold a profile birth year for an existing account, we use it only to help confirm age-based eligibility for certain account protections and features, as described above under "Profile Birthday" — we do not display it to anyone else or use it for any other purpose. If you believe a child under the applicable age has provided us with personal information, please contact us at support@shopit.store and we will take appropriate steps to delete it.

Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. No system is completely secure, and we cannot guarantee the absolute security of your information.

Data Retention

We retain your personal information for as long as your account is active and as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. You can request deletion of your account at any time.

International Data Transfers

We are based in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses to protect international transfers.

Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will update the "Last updated" date and notify you through the Services or by email. Your continued use of the Services after the changes take effect constitutes acceptance of the revised policy.

Contact Us

Questions about this Privacy Policy or how your information is handled? Contact us at: