Privacy Policy

Last Updated: November 9, 2025

At Never Forget Gifts (“we,” “our,” or “us”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application at app.neverforgetgifts.com (the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

• Email address
• Password (encrypted and securely stored)
• Name (if provided via Google Sign-In)

Contact Information:

• Names of your contacts
• Birthday dates (month and day only – we do not collect birth years)
• Gender and age categories for gift recommendations
• Special occasions and their dates
• Interests and gift preferences
• Budget preferences
• Custom reminder settings

Communications:

• Messages you send us through support channels
• Feedback and survey responses

1.2 Information Collected Automatically

Usage Data:

• Pages viewed and features used
• Time and date of your visits
• Browser type and version
• Device information (type, operating system)
• IP address and approximate location (city/state level)
• Referral source

Cookies and Tracking Technologies:

• Session cookies (to keep you logged in)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand how you use the Service)

1.3 Information from Third Parties

Google Sign-In:

• If you use Google Sign-In, we receive your name, email address, and profile picture from Google
• We do not access other Google account data

Amazon Affiliate Program:

• When you click affiliate links, Amazon may track purchases for commission purposes
• We do not receive personally identifiable information about your Amazon purchases

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Delivery

• Create and manage your account
• Send birthday and occasion reminder emails
• Provide personalized gift recommendations
• Process your requests and respond to inquiries
• Display your upcoming occasions dashboard

2.2 Service Improvement

• Analyze usage patterns to improve features
• Conduct research and development
• Monitor and prevent fraud or security issues
• Test new features and functionality

2.3 Communications

• Send reminder emails for occasions you’ve saved
• Send service-related notifications (account security, updates)
• Respond to your support requests
• Send optional promotional emails (you can opt out)

2.4 Legal Compliance

• Comply with legal obligations
• Enforce our Terms and Conditions
• Protect our rights and property
• Prevent misuse of the Service

3. How We Share Your Information

We do NOT sell, rent, or trade your personal information. We share information only in the following limited circumstances:

3.1 Service Providers

We share information with trusted third parties who help us operate the Service:

Firebase (Google):

• Hosts our authentication, database, and cloud functions
• Processes data according to Google’s privacy policies
• Location: United States
• Purpose: Infrastructure and data storage

SendGrid:

• Sends reminder emails on our behalf
• Only receives email addresses and message content
• Purpose: Email delivery service

Amazon Associates:

• When you click product links, Amazon may track the referral
• We do not share your contact data with Amazon
• Purpose: Affiliate commission tracking

3.2 Legal Requirements

We may disclose information if required by law:

• In response to subpoenas, court orders, or legal processes
• To protect our rights, property, or safety
• To prevent fraud or security threats
• In connection with law enforcement requests

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership or use of your information.

3.4 With Your Consent

We may share information with other parties when you explicitly consent or direct us to do so.

4. Data Security

We implement industry-standard security measures to protect your information:

4.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Password Security: Passwords are hashed and encrypted using Firebase Authentication
• Secure Storage: Data is stored on secure Firebase/Google Cloud infrastructure
• Access Controls: Limited employee access on a need-to-know basis

4.2 Physical Safeguards

• Data centers with physical security controls
• Redundant systems and regular backups
• Disaster recovery procedures

4.3 Administrative Safeguards

• Regular security audits and monitoring
• Employee training on data protection
• Incident response procedures

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Privacy Rights

5.1 Access and Correction

• You can access and update your account information at any time through your account settings
• You can add, edit, or delete contact information at any time

5.2 Data Deletion

• You can delete individual contacts from your account
• You can delete your entire account, which removes all your data from our active systems
• Note: Backups may retain data for up to 90 days for disaster recovery purposes

5.3 Email Preferences

• You can customize reminder email frequency in your account settings
• You can unsubscribe from promotional emails by clicking the unsubscribe link
• You cannot opt out of essential service communications (e.g., security alerts)

5.4 Cookie Management

• You can control cookies through your browser settings
• Note: Disabling cookies may affect Service functionality

5.5 Data Portability

• You can export your contact data at any time (contact us for assistance)
• Data will be provided in a machine-readable format (JSON or CSV)

6. Special Privacy Rights by Region

6.1 California Residents (CCPA)

If you are a California resident, you have additional rights:

Right to Know:

• Categories of personal information collected
• Sources of personal information
• Business purposes for collecting information
• Categories of third parties with whom we share information

Right to Delete:

• Request deletion of your personal information
• Subject to certain exceptions for legal compliance

Right to Opt-Out:

• We do not sell personal information
• If we did, you would have the right to opt out

Non-Discrimination:

• We will not discriminate against you for exercising your privacy rights

To exercise your rights, contact us at: privacy@neverforgetgifts.com

6.2 European Union Residents (GDPR)

If you are located in the EU/EEA, you have additional rights:

Legal Basis for Processing:

• Consent: You provide consent when creating an account
• Contract Performance: Processing necessary to provide the Service
• Legitimate Interests: Service improvement and security

Your Rights:

• Right to access your personal data
• Right to rectification (correction)
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Data Transfers:

• Your data may be transferred to the United States
• We use standard contractual clauses approved by the EU Commission

Data Protection Officer:

• For GDPR inquiries: privacy@neverforgetgifts.com

Supervisory Authority:

• You have the right to lodge a complaint with your local data protection authority

6.3 Other Jurisdictions

If you are located in other jurisdictions with privacy laws, you may have additional rights. Contact us for information specific to your region.

7. Children’s Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect information from children under 18.

If we discover that a child under 18 has provided personal information, we will delete it immediately. If you believe a child has provided information to us, please contact us at: privacy@neverforgetgifts.com

8. Third-Party Links and Services

8.1 Third-Party Websites

Our Service contains links to third-party websites (e.g., Amazon product pages). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

8.2 Google Sign-In

If you use Google Sign-In, your use is governed by Google’s Privacy Policy: https://policies.google.com/privacy

8.3 Amazon Affiliate Links

When you click on product links, Amazon’s privacy policy applies: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496

9. Data Retention

9.1 Active Accounts

We retain your information for as long as your account is active or as needed to provide the Service.

9.2 Deleted Accounts

• When you delete your account, we delete your data from active systems within 30 days
• Backup copies may be retained for up to 90 days for disaster recovery
• We may retain certain information to comply with legal obligations or resolve disputes

9.3 Aggregated Data

We may retain aggregated, anonymized data indefinitely for analytics and research purposes.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.

We take steps to ensure your data receives adequate protection, including:

• Standard contractual clauses
• Compliance with applicable data protection laws
• Security measures consistent with international standards

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

Material Changes:

• We will notify you via email or prominent notice on the Service
• Continued use after changes constitutes acceptance

Your Responsibility:

• Review this Privacy Policy periodically
• Ensure you understand how we collect and use your information

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@neverforgetgifts.com
Website: https://neverforgetgifts.com
Mail: Never Forget Gifts, [Your Address]

Response Time: We aim to respond to all privacy inquiries within 30 days.

13. Specific Data Collection Summary

For transparency, here’s what we collect and why:

14. Your Choices Summary

You control your data:

• ✅ Access and update information anytime
• ✅ Delete contacts or entire account
• ✅ Customize reminder frequency
• ✅ Opt out of promotional emails
• ✅ Request data export
• ✅ Manage cookie preferences

We commit to:

• ✅ Never sell your data
• ✅ Encrypt data in transit and at rest
• ✅ Minimize data collection (e.g., no birth years)
• ✅ Respond to privacy requests promptly
• ✅ Transparent data practices

By using Never Forget Gifts, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

Last Updated: November 9, 2025

Never Forget Gifts
Never BELATEd Again