Last updated: August 27, 2026
GiftJar ("we", "us") is a mobile app for managing personal wish lists and coordinating gifting among friends and family. This policy explains what personal data we collect, why, and what rights you have over it.
GiftJar is operated by Vladislav Gorceac, acting as the data controller for the purposes of GDPR. You can reach us at the email address at the bottom of this page for any privacy question or request.
| Data | Why |
|---|---|
| Name, email address | Account creation and login |
| Password (email/password sign-up only) | Authentication — stored hashed by our identity provider, never in plain text |
| Birth date | Birthday reminders and age-related badges shown to friends |
| Profile photo, short bio | Optional — shown on your profile to friends |
| Wish list items (title, photo, price, description, link) | The core feature — items you want, shown to the friends you choose |
| Friend connections and group labels | Controls who can see what, and organizes your contacts |
| Reservations / group contributions (who reserved what, contributed amounts) | Lets friends coordinate gifts without duplicating them |
We never process real payments. Amounts shown for a group contribution are only a record of what people intend to chip in — GiftJar does not move money, store payment card details, or act as an escrow or payment service in any way. Arranging the actual payment is entirely between you and your friends, outside the app.
Directly from you: when you register (by email/password or by signing in with Google), fill in your profile, add wish items, or connect with friends. If you sign in with Google, we receive your name, email address, and profile photo from Google — we never see your Google password.
We use a small number of infrastructure providers to run GiftJar ("sub-processors"). None of them are permitted to use your data for their own purposes.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, file storage, authentication, transactional email | Frankfurt, Germany (EU) |
| Google (Sign-In) | Optional sign-in method, only if you choose it | Global |
Beyond these providers, the only people who see your data are the friends you've explicitly connected with, and only the parts of your profile/wish list you've chosen to make visible to them. We do not sell your data, and we do not share it with advertisers.
We keep your data for as long as your account is active. If you delete your account, your profile, wish list, and personal data are removed. One exception: if you were a contributor to an active group gift with other people, your contribution amount stays part of that group's total (so the gift's total stays accurate for the others), but your name and photo are no longer shown — you appear only as "a former participant."
Under GDPR and similar laws, you have the right to:
To exercise any of these, use the in-app option where available, or contact us at the email below — we'll respond within 30 days.
GiftJar is not directed at children under 16. If you believe a child under 16 has provided us with personal data without appropriate consent, contact us and we'll remove it.
Data in transit is encrypted (TLS/HTTPS). Passwords are never stored by us directly — authentication is handled by our identity provider, which stores only a salted hash. Access to backend infrastructure is restricted and audited.
If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.