This policy explains what information MKG Enterprise (“Giddit”, “we”, “us”) collects when you use giddit.app (the “Service”), how we use it, who we share it with, and the choices you have. It forms part of our Terms of Service. Questions go to support@giddit.app.
1. Information you give us
- Account details. Your email address and password, or, if you sign in with Google, the name, email address and profile photo Google shares with us. Passwords are handled by our sign-in provider (Google Firebase Authentication); we never see them.
- Profile. Display name, photo, bio, interests, and a location if you choose to enter one.
- Your lists and activity. Lists and the items in them — titles, descriptions, prices, links and photos you upload — plus likes, favourites, the people you follow, and items you reserve for others.
- People you invite. When you share a list, or invite people to Secret Santa or another game, you give us their username or email address and the name you enter for them. Please only invite people you know.
- Ad preferences (optional). In Settings you can choose to tell us your country, state or region, city, birth year and gender. They are stored privately — visible only to you, never on your profile — and used only to choose which ads you see. You can change or clear them at any time; if you leave them blank, ads aimed at a particular location, age or gender will not be shown to you.
- Advertisers. Business name, ad images and text, destination links, targeting choices and budgets.
- Payments. Giddit Premium and advertising payments are processed by Stripe. We receive confirmation of the payment and its amount; we do not receive or store your full card number.
2. Information collected automatically
- Abuse protection. We use Google reCAPTCHA Enterprise (through Firebase App Check) to check that requests come from our real app and not from bots. It collects device and browser information and is subject to Google’s Privacy Policy and Terms of Service.
- Approximate country. When ads are chosen or counted, we estimate your country from your IP address, using a database that runs on our own servers (no one else is sent your address). We use it only to choose ads aimed at your country, unless you set a country in your ad preferences, and to count ad views by country for advertisers. We do not store your IP address with this. Country data: IP Geolocation by DB-IP.
- Browser language. Your browser’s language setting is sent when we choose ads, so ads in your language can reach you. It is not stored.
- Ad views. When you see or click an ad, we count it, with your approximate country, in totals for the advertiser. When you are signed in, we also record it against your account so we can limit how often you see the same ad.
- Server logs. Our hosting provider records technical information such as IP address, browser type and the time of each request, to run and secure the Service.
- Your browser’s storage. We save small preferences on your device, such as your theme and which activity you have already seen. We do not use our own advertising or tracking cookies, and we do not use third-party analytics.
3. How we use information
- to provide the Service: your account, lists, sharing, reservations and games;
- to show your profile and public content to other users, as your settings allow;
- to personalise Discover and choose which ads to show you, using the interests on your profile, your ad preferences, your approximate country and your browser language (an ad aimed at a particular group is shown only to people we know are in it);
- to process payments and give advertisers totals of how their ads performed;
- to keep the Service secure, prevent abuse and enforce our Terms;
- to contact you about your account or changes to these policies;
- to comply with the law.
4. Who we share it with
- Other users, as you choose: your public profile and public lists, lists you share, and names and gift matches within a game you join.
- Service providers who run parts of the Service for us: Google (Firebase hosting, database, file storage, sign-in, and reCAPTCHA) and Stripe (payments). They may use the information only to provide their services to us.
- Advertisers receive totals only, such as impressions and clicks by country and by interest — never your identity or your ad preferences.
- Retailers. To show current product prices we look up listings on retailer services such as Etsy by product ID. No information about you is sent. If you follow a link to a retailer, that retailer’s privacy policy applies.
- Legal and safety, when required by law, or to protect the rights, property or safety of our users, the public or us.
- A successor, if Giddit is sold or merged, in which case this policy continues to apply to your information.
We do not sell your personal information.
5. How long we keep it
We keep your information while your account is open. When you delete your account in Settings, we delete your profile, lists, uploads, likes, follows and other personal information straight away; if you ask us by email instead, we do so within 30 days. We keep payment records (Premium purchases and advertising billing) for legal, tax and fraud-prevention reasons. What you shared with others stays visible to them without your name: a gift you reserved on a friend’s list stays reserved, and you appear as “Former member” in games other people host. Games you host are cancelled and ads you run are stopped.
6. Your choices and rights
- You can view and edit your profile, lists and settings in the app at any time.
- You can make lists private, or remove items and lists.
- You can change or clear your ad preferences in Settings at any time.
- You can delete your account yourself in Settings. To get a copy of your information, correct it, or have us delete your account, email support@giddit.app from the address on your account. We will respond within 30 days.
Depending on where you live, you may have further rights under local law, such as to object to certain processing. Contact us to use them; we will not treat you differently for doing so.
7. Children
Giddit is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us information, contact us and we will delete it.
8. Security
We use measures such as encrypted connections and access rules on our database to protect your information. No system is perfectly secure, so we cannot guarantee absolute security.
9. Where information is processed
Giddit is operated from the United States. Your information is processed and stored in the United States and in other countries where our service providers operate.
10. Changes to this policy
We may update this policy. If a change is material, we will tell you in the Service or by email before it takes effect.
11. Contact
MKG Enterprise — support@giddit.app