Privacy Policy
Last update: 2025
Your privacy is important to us. This policy explains how we collect, use and protect your personal information when you use the Secret Santa app.
1. Data We Collect
Account Information
- •Email (for authentication)
- •Name (for group identification)
- •Profile photo (optional)
Usage Data
- •Groups you participate in
- •Draw results (private)
- •Anonymous chat messages
- •Wishlist
2. How We Use Your Data
- Authentication: Allow secure access to your account
- Features: Run draws, send messages, manage groups
- Communication: Send notifications about activities in your groups
- Support: Answer your questions and requests
3. Data Security
- Encryption: All data is transmitted via HTTPS
- Passwords: Stored with bcrypt hash
- Tokens: JWT authentication with expiration
- Draws: Results visible only to the participant
4. Your Rights
- Access: Request a copy of your data
- Correction: Update incorrect information
- Deletion: Request removal of your account and data
- Portability: Export your data
5. Data Sharing
We don't sell your data. We share information only with other group participants (name and messages), with essential service providers (hosting, email), and when required by law.
6. Cookies and Tracking
The mobile app doesn't use cookies. We only use secure local storage to keep your session active. We don't track your location or collect data from other apps.
7. Data Retention
We keep your data while your account is active. Groups inactive for more than 12 months may be automatically removed. After account deletion, your data is removed within 30 days.
8. Minors
The app is intended for users 13 and older. We don't intentionally collect data from children under 13. If you're responsible for a minor and believe they provided personal data, please contact us.
9. Changes to This Policy
We may update this policy periodically. We'll notify you of significant changes through the app or email. We recommend reviewing this page regularly.