GeeftMe Privacy Policy

Effective Date: 01.01.2025

At GeeftMe, we are deeply committed to the privacy and security of our users' data. This Privacy Policy explains how and for what purposes we collect, use, and protect your personal data. By using our application, you agree to the terms of this policy.

1. Information Collected and Data Classification

GeeftMe processes **limited personal data** necessary for providing the service, managing the account, and enhancing the user experience:

Basic Account Information: Username, email address, and optional profile information (photo, biography, etc.). Your email address is used for account verification and password reset processes.
Application Content: Gift list items, descriptions, and images added by the user.
Interaction Data: Social interaction data such as follow relationships, likes, and comments.
Optional Data: Birthday or special date information voluntarily added by the user (used solely for reminders and planning purposes).
Technical Identifiers: Device identifiers for sending notifications and in-app usage statistics (anonymized and non-personal data).

GeeftMe explicitly does not:

Collect the user's **real-time location**.
Request **sensitive personal data** such as financial or health information.
Process or sell user data for **advertising purposes.**

2. Purposes of Data Processing and Legal Basis

The collected data is processed strictly for the purposes of enabling the core functionalities of the app, improving service quality, and ensuring security, in accordance with applicable laws:

Provision of Service (Performance of Contract): Creating, managing, and verifying the user account, and ensuring the stable operation of gift lists and social features.
Security and Legitimate Interest: System security, detection of misuse, troubleshooting technical issues, and performing anonymous statistical analyses for service improvement.
Communication (Consent/Contract): Enabling notifications based on user preference and delivering legal notices via email when necessary.

3. Data Storage, Transfer, and Sharing with Third Parties

GeeftMe works with carefully selected third-party services to ensure the security of user data:

Firebase Usage (Primary Data Storage): Personally identifiable core data such as your username, email address, and all in-app content (lists, interactions) are securely stored on Google's servers via Firebase services. The storage and security of this data are subject to Google's privacy and security standards.
French Server: GeeftMe's own **France-based server** **absolutely does not store any personal information.** This server is only used for **anonymous** and **technical** functions running in the application's backend, such as optimizing images or caching.
Legal Requirements: Your data may only be shared when required by a valid request from legal authorities or to fulfill applicable legal requirements.
Service Providers: Data is shared only with reliable service providers who comply with privacy standards and are strictly necessary for core functions like sending notifications or authentication.

GeeftMe does not share your data with third parties for marketing, targeting, or sales purposes under any circumstances. All sharing is limited to what is strictly necessary, and the parties involved are obliged to adhere to privacy standards.

4. Account Privacy and User Control

Users maintain complete control over the visibility of their accounts and content:

The profile can be set to private or public.
Private profiles are visible only to individuals approved by the user.
Follow requests are not accepted without the user's approval.
The user can change account visibility at any time.

5. Data Retention, Deletion, and User Rights

5.1. Deletion Procedures

When a user deletes their account, profile information, gift lists, follow relationships, comments, likes, and notification identifiers are **permanently deleted.** No personal data is retained beyond any legal obligation periods. No personal data, apart from anonymized statistical data, remains in the system after deletion.

5.2. User Rights

You have the following statutory rights regarding your personal data:

To learn whether your personal data is being processed.
To request information if your personal data has been processed.
To learn the purpose of the processing and whether the data is used appropriately for that purpose.
To request the correction of incomplete or inaccurate data and to request notification of these corrections to third parties.
To request the deletion or destruction of your data if the reasons for processing cease to exist, even if processed in accordance with the law (**right to be forgotten**).
To object to the outcome of an analysis carried out exclusively by automatic means if it produces an adverse effect concerning you.

To exercise these rights, you may contact us via email at support@geeft.me. Your requests will be evaluated and concluded free of charge within the statutory period.

6. Security Measures

GeeftMe implements industry-standard security measures to protect data. These measures include encrypted communication channels (SSL/TLS), access control mechanisms, and secure data processing methods. These measures are further supported by the high security standards provided by Google Firebase.

7. Cookies and Tracking Technologies

GeeftMe **does not use cookies or similar tracking technologies** to monitor user behavior, create advertising profiles, or targeting. Only limited and anonymous data essential for the application's functionality is processed.

8. Policy Changes and Contact Information

This Privacy Policy may be updated when necessary. Significant changes will be announced within the application or via email. Users are encouraged to keep track of updates.

Data Controller Identity and Contact:

Data Controller: GeeftMe OÜ
Email: support@geeft.me