Privacy.

What we collect

• Your email, optional phone, username, display name, optional avatar URL.
• The TimeGifts you send and receive: message text, time amount, scheduled date, optional voice memo, optional memory photo + sentence.
• Friendships you create and any blocks or reports you file.
• Push notification subscription tokens, if you turn push on.
• Basic operational logs (errors, request paths) for keeping the app up.

Who can see what

• Gift letters are visible only to you, the recipient, and (for group gifts) the people you invite.
• Memories are visible only to the sender and the recipient.
• Profile visibility is governed by your privacy setting: public, friends-only, or closed.
• Wishlist items marked “visible to friends” are visible only to accepted friends.
• Offers on /browse are visible to any signed-in user.

Third parties we share data with

• Supabase hosts our database, authentication, and storage (EU-West region).
• Fly.io hosts our app servers.
• Resend sends our transactional emails (gift letters, reminders).
• Vonage / WhatsApp deliver SMS / WhatsApp messages when those channels are configured.
• OpenAI / Groq generate AI message drafts and suggestions; only the prompt context is sent.
• Cloudflare Turnstile protects sign-up and public claim flows from bots; no PII shared.

We do not sell your data. We do not run ads inside letters.

Your rights

• Export everything you've put in: email hello@timegift.fly.dev and we'll send you a JSON dump.
• Delete your account: same email, we remove the row and cascade everything associated.
• Object to any specific processing: ask, we will explain or remove.

How long we keep things

Gifts and memories: until you delete them or your account. Notification rows: 12 months. Push subscriptions: until the browser invalidates them. Operational logs: 30 days.

Cookies

We use one essential cookie for your sign-in session. We do not run third-party tracking cookies or analytics that profile you.

Contact

hello@timegift.fly.dev