Privacy Policy
Effective October 9, 2026
Givn is a gifting app. You create a profile, build wishlists, follow people, and organize gift exchange events. This policy explains what information we collect to make that work, who can see it, and how to get rid of it. Givn is run by Tai Qi Stanley Xu, an individual in Ontario, Canada.
We do not sell your personal information. We do not use advertising networks, and we do not track you across other apps or websites.
Information we collect
Information you give us
- Email address. Used to create and sign in to your account. You can sign in with Apple, with Google, or with your email using a magic link or a password.
- Name from Apple or Google. If you sign in with Apple or Google, we receive the email address and name on that account and use the name to prefill your Givn profile. If you choose to hide your email from Apple, we receive Apple's private relay address instead.
- Profile information. Your display name, and optionally a bio and a profile picture.
- Photos you choose. You can add photos to your profile, to wishlist items, and to notes, either from your photo library or by taking one with your camera. We receive only the photos you pick or take. We never scan or upload your library.
- Content you create. Wishlists and the items in them, wishes, comments on wishlist items, the gifts you mark that you'll give, events you create or join, gift assignments within those events, and private notes you keep about friends.
- Friends who aren't on Givn. You can add a friend who doesn't use Givn by name, so you can keep notes about them. We store the name you give them and your notes. If you send them an invite and they join, their new account takes the place of the name you added.
- Your connections. Who you follow and who follows you, and which events you participate in.
Information collected automatically
Our hosting provider keeps standard server logs — IP address, timestamps, and the requests your app makes — for security, abuse prevention, and debugging. These logs are retained for a limited period and are not used to build a profile of you.
To show you what's new, Givn records when you last viewed each friend's profile (only you can see this) and when each wishlist last changed (visible to the people who can see that wishlist).
When you add a link to a wishlist item, your phone loads that web page directly to fill in its title and image. The website sees that visit the same way it would if you opened the page in your browser, including your IP address. Givn's servers are not involved in that request. If the item keeps the website's image, that image is loaded from the website for everyone who views the item, so the website can see their IP address too.
What we do not collect
Givn has no analytics SDK, no crash-reporting SDK, no advertising identifiers, and no third-party tracking of any kind. We do not collect your location, your contacts, your calendar, audio from your microphone, or any payment information. The camera is used only when you choose to take a photo.
How we use your information
- To create your account and sign you in.
- To display your profile, wishlists, and events to the people you share them with.
- To run gift exchanges, including generating and storing assignments.
- To keep the service secure and to investigate abuse or technical problems, including reviewing content someone has reported. Reported content may be hidden while we review it.
- To respond to you when you contact us.
We do not use your information for advertising, profiling, or automated decisions that have legal or similarly significant effects.
Who can see your information
Most of what you put in Givn is meant to be seen by other people — that is the point of a wishlist. Specifically:
- Your name and profile picture can be seen by anyone signed in to Givn, so people can recognize you when you follow them or appear in their lists.
- Your profile — your bio, wishlists, wishes, and wishlist activity — is visible to the people you share it with: people you follow, people who open your share link or code or accept your invite, and other participants in events you join. Profiles are never visible to people without a Givn account.
- Share links. Anyone who opens your share link and signs in to Givn can see your profile and wishlists from then on. You can reset your link in Settings, so the old link and code stop working for anyone who hasn't opened them yet. People who already opened it keep access until you block them, or email us and we'll remove it.
- Blocking. If you block someone, you and they stop seeing each other on Givn. They aren't told.
- Your wishlists follow your profile's visibility, and you can make a wishlist private to keep it to yourself.
- Wishes are visible to the same people as your profile and disappear after 72 hours.
- Comments. Public comments on a wishlist item are visible to anyone who can see the item. Private comments are visible only to you and the item's owner. The owner can delete comments on their own items.
- Gifts you'll give. When you mark that you'll give an item, people who can see it, including its owner, see that someone is giving it. The app doesn't show who.
- Event details, including the participant list, are visible to other participants of that event.
- Notes you keep about friends are private to you. The person a note is about cannot see it.
- Your email address is never shown to other users.
Gift assignments are deliberately restricted so a Secret Santa-style exchange stays a surprise. Please treat anything you post as visible to the people you have shared it with.
Service providers
We use a small number of providers to operate Givn. They process your data on our instructions and are not permitted to use it for their own purposes. Each is contractually required to provide the same or equal protection of your data as described in this policy.
- Supabase — database, authentication, and image storage. This is where your account and content live.
- Resend — sends sign-in emails (magic links). Resend receives your email address and the content of those emails.
- Apple and Google — if you choose Sign in with Apple or Google, they handle that sign-in. If you signed in with Apple and delete your account, we ask Apple to revoke Givn's access.
- OpenAI — when someone reports a comment, wish, wishlist item or profile, its text and any photo are sent to OpenAI's moderation service to check for harmful content. Nothing else you post is sent.
- Expo (Expo Application Services) — app builds and over-the-air updates. Expo receives basic technical information needed to deliver app updates, not your account content.
- Vercel — hosting for the givn.app website (this page). The website does not have access to your account data.
We may also disclose information if we are legally required to, or where necessary to protect the rights and safety of our users.
Data retention
We keep your account information and content for as long as your account exists. Wishes are deleted automatically 72 hours after you post them. Deleting your account removes your profile, your wishlists, your wishes, your comments, the gifts you marked that you'd give, your notes, the friends you added who aren't on Givn, the photos you uploaded (including every profile picture you have used), and any events you host — including their participant lists, gift assignments, and permissions. If you host an event, deleting your account removes that event for everyone in it, but a wishlist another participant created for it is kept, just no longer linked to that event. Your own participation in other people's events, and your follows and followers, are removed along with your account, as are notes other people kept about you. Backups are purged on a rolling basis, and our providers' logs expire on their own schedules.
Deleting your account
You can delete your account at any time from the app: open the Me tab, tap the ⋯ menu, then Support → Delete account. Before you confirm, we show you exactly what will be affected — for example, how many events you host and how many people are in them, since deleting your account also deletes those events for everyone in them. Deletion is immediate and can't be undone. If you signed in with Apple, deleting your account also revokes Givn's access to your Apple ID.
If you can't access the app, email support@givn.app from the address associated with your account and we will delete it for you within 30 days.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, or receive a copy in a portable format. You can exercise any of these by emailing support@givn.app. We will not discriminate against you for exercising them.
Children
Givn is not directed at children. You must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, contact us and we will delete it.
Security
Data is encrypted in transit. Access to your content is enforced at the database level by row-level security rules, so one account cannot read another account's private data. No system is perfectly secure, but we take reasonable measures to protect your information.
International transfers
Our providers may store and process your information on servers outside your country. Where required, we rely on appropriate safeguards for those transfers.
Changes to this policy
If we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you in the app.
Contact
Questions about this policy or your data: support@givn.app