1. Information We Collect
Depending on the features you use, Giftresv. may process account, authentication, gift-card, community, exchange, gifting, and notification information.
2. Account and Authentication Information
When you sign in using Google Sign-In, authentication is handled through Firebase Authentication. Depending on information made available by the authentication provider, Giftresv. may process your name, email address, profile/account information, and Firebase user ID (UID). The UID is used to associate your account with your Giftresv. data.
Giftresv. does not receive or store your Google account password.
3. Gift Card Information
When you add a gift card, Giftresv. may process its brand, amount/value, code, PIN, expiry date, gift-card identifier, and other information you choose to enter. This information supports wallet management, viewing card details, searching, copying codes or PINs, user-initiated sharing, editing, deletion, supported balance-check functionality, eligible exchange requests, and scheduled gifting.
Gift Card Codes and PINs
Gift-card codes and PINs can provide access to monetary value. The application encrypts these values using AES-256-GCM before storing them as encrypted values in relevant wallet records. Randomly generated initialization vectors are used for encryption operations.
4. How We Use Your Information
We use information processed through Giftresv. to create and maintain accounts, authenticate users, store and display gift cards, provide gift-card management and expiry functionality, process exchange requests, process scheduled Surprises, provide Community features, deliver notifications, maintain security, and comply with applicable legal obligations.
5. Giftresv. Exchange
If you voluntarily use Giftresv. Exchange, we may process your Firebase UID, email address, submitted gift-card brand, amount, identifier, code, PIN, expiry information, requested exchange brand, applicable exchange percentage, calculated exchange amount, request identifier, status, and creation/update timestamps.
Exchange requests may be manually reviewed and verified before an exchange is completed. Exchange statuses may include pending verification, verified, processing, successful, rejected, and cancelled.
6. Community Features
If you use Community features, Giftresv. may process posts, comments, likes/interactions, category information, and associated account information required to operate those features. Community content may be visible to other users. Do not post passwords, gift-card PINs, gift-card codes, financial credentials, government identification numbers, or other sensitive personal information in public content.
7. Giftresv. Surprise / Scheduled Gifting
When you schedule a Surprise, Giftresv. may process the recipient email address, message, selected template, gift-card brand, amount, code, PIN, expiry date, gift-card identifier, scheduled date/time, status, and creation timestamp. The recipient email address is used to deliver the scheduled gift. You are responsible for ensuring that you have the appropriate permission to provide another person's email address.
8. Email Delivery Services
Certain Giftresv. email functionality uses backend infrastructure, including Cloudflare Workers for server-side processing and Resend for email delivery. Information required to send a requested email may be transmitted to the applicable email provider.
9. Push and Local Notifications
Giftresv. uses Firebase Cloud Messaging (FCM) to support push notifications. If enabled, the application may process an FCM device token, notification title/body, notification type, notification-related data, timestamps, and read/unread state for notification history. The FCM token is associated with your Giftresv. account for notification delivery. Giftresv. may maintain notification history in Firestore.
Local notification functionality may display alerts, badges, and sounds according to your device settings.
10. Gift Card Expiry Alerts
Giftresv. may process gift-card expiry information to identify cards approaching expiry and provide expiry-related reminders. Where applicable, transactional expiry reminder emails may be sent through the application's backend email infrastructure.
11. Biometric Authentication
Giftresv. provides an optional biometric application-lock feature. Authentication is performed by your device's operating system.
Giftresv. does not receive, collect, or store your fingerprint or biometric template. The application stores only the local preference indicating whether biometric protection is enabled.
12. Local Device Storage
Giftresv. may use local device storage for application preferences, such as whether biometric lock has been enabled. This preference does not contain your fingerprint or biometric template.
13. Firebase Services
Giftresv. uses Firebase Authentication for Google Sign-In and authentication, Cloud Firestore for user-related information, gift cards, community information, exchange requests, scheduled Surprises, notification history and FCM token information, and Firebase Cloud Messaging for push notification delivery and device-token management.
14. Information Sharing
Giftresv. does not sell your personal information. Information may be transmitted to service providers when reasonably necessary to provide requested functionality, operate infrastructure, maintain security, or comply with law. Depending on the feature used, relevant providers may include Google/Firebase, Cloudflare, Resend, and third-party gift-card services or websites accessed at your request.
15. User-Initiated Sharing and External Websites
Giftresv. may allow you to share gift-card information using your device's available sharing mechanisms. Certain features may open external gift-card balance-check pages, participating brand websites, or other third-party destinations. Once you leave Giftresv., the third party's privacy policy and terms apply.
16. Data Security
Giftresv. uses reasonable measures designed to protect information, including Firebase Authentication, authenticated user-specific database access, Firestore security rules, AES-256-GCM encryption for gift-card codes and PINs, randomly generated encryption IVs, and optional biometric application locking.
No electronic storage or transmission system can be guaranteed to be completely secure.
17. Data Retention
Information may be retained as reasonably necessary to provide Giftresv. functionality, maintain accounts and wallets, complete exchange requests, process scheduled gifting, maintain notification history, resolve support or disputes, maintain security, and comply with applicable legal obligations. When information is no longer required, it may be deleted or removed from active systems subject to legal, security, technical, and operational requirements.
18. Account and Data Deletion
You may request deletion of your Giftresv. account and associated personal information by contacting us. A deletion request may be subject to legal requirements, security requirements, outstanding transactions or exchange requests, fraud-prevention requirements, and information that must be retained for legitimate purposes.
When processed, we will take reasonable steps to delete or de-identify applicable personal information from active systems. Some information may remain temporarily in backups or logs until routinely overwritten or deleted.
19. Children's Privacy
Giftresv. is not intended to knowingly collect personal information from children in violation of applicable law and is not knowingly targeted toward children. If you believe a child has provided personal information without appropriate authorization, contact us.
20. Your Responsibilities
- Provide accurate information when required.
- Keep your account and device secure.
- Avoid sharing gift-card PINs or codes publicly.
- Avoid posting sensitive information in Community.
- Ensure recipient email addresses are provided appropriately.
- Ensure you have the right to use or submit any gift card used with Giftresv.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to Giftresv., our data practices, third-party services, legal requirements, or security improvements. The Effective Date will be updated when material changes are made.
22. Third-Party Privacy Policies
Third-party providers used by Giftresv. maintain their own privacy policies and terms. These may include Google/Firebase, Cloudflare, Resend, and third-party gift-card brands or websites accessed through Giftresv.
23. No Sale of Personal Information
Giftresv. does not sell, rent, or trade users' personal information for monetary consideration.
24. Contact Us
Giftresv. / MahDevLabs
Email: apsonline21112003@gmail.com
Website: mahdevlabs.dev
For questions, privacy requests, complaints, or concerns regarding this policy or the handling of your information, contact us using the email above.
25. Consent
By creating an account or using Giftresv., you acknowledge that you have read and understood this Privacy Policy and agree to the processing of information as described above, subject to applicable law. Where a feature requires a separate permission, such as push notifications or optional biometric authentication, the relevant permission may be requested through the application or your device's operating system.