Privacy policy

Last updated 22 September 2026

got you is a private notebook for gift giving. What you put in it is yours. We keep it so that you can get it back — on this phone or the next one — and for nothing else: no advertising, no analytics, no tracking, and nothing is sold or shared for marketing.

What we keep

• What you add: the people you give to (the name you call them, relationship, birthday, and a photo if you add one), what you remember about them (facts, wishlist, notes), occasions — and what you mean to spend on one, if you set a budget —, and gifts: names, notes, prices, links, photos and their status.
• If you create an account: your first name, your email address and your password (stored only as an argon2 hash, which we cannot read). If you sign in with Google or Apple: the identifier and the email address they give us — never your password with them.
• Your settings: currency, country, appearance, reminder times, whether budget tracking is on. The country is the region your phone is set to, or the one you pick in Settings — it decides which occasions got you suggests (Mother's Day is not the same day everywhere).
• Sessions: a hashed token per signed-in phone, so you stay signed in.

You can use got you without an account. It then holds no email and no name of yours: just what you add, tied to your phone.

What stays on your phone

• Your contacts. "Import birthdays" reads them on the phone; only the people you tick are added to got you, as a name and a birthday.
• Your photo library and camera. Only a photo you attach to a gift or to a person is uploaded.
• Reminders. They are planned and shown by your phone; we send no push notifications.
• Your location. got you never asks for it and never reads it.

Links you save

When you add a link, our server opens that page to read its title, picture and price, and keeps a copy of the picture. The shop sees a request from our server, not from you or your phone.

Gift suggestions

Nothing here happens until you ask for suggestions and say yes to this. You can take that back in Settings at any time.

When you ask got you to help you find a gift, our server sends what you saved about that person — their relationship to you, roughly how old they are, what they like and dislike, their sizes, their wishlist, the names of gifts you gave or are considering — with the occasion, the budget you typed for that search and your country, to an AI service, which answers with ideas.

Names are taken out first: theirs, yours, and those of the other people you saved. Your email, your account and your phone are never part of it.

The request goes through OpenRouter, a gateway to AI models, set to use only providers that do not keep what they are sent and do not train on it. We keep neither the question nor the answer — only that a request was made, to keep costs in check.

"Search the web" on a suggestion opens your browser on a Google search for that kind of gift — a few words about the gift, nothing about you or them. What happens from there is between you and the search engine.

Where it is kept, and who else is involved

• Your data is in a database on a server we run. Traffic between the app and the server is encrypted (HTTPS).
• Pictures — of gifts, and of people if you add them — are stored with Cloudflare (R2 object storage). A picture can be opened by anyone who has its address, which is long and random and is only ever given to your app.
• Emails (password resets, and the codes that confirm it is you before your account is deleted or a password is added) are sent through an email delivery provider, which sees your address and the message.
• Google or Apple, if you choose to sign in with them, learn that you use got you.

Our server logs keep the time, the route and the result of each request — never what you wrote, and not your email. Your network address is used briefly, in memory, to stop abuse.

This website is the same server: it sets no cookies, runs no scripts and no analytics, and asks you for nothing. A visit is logged like any request, as above.

How long

• Until you delete it. Deleting a person, an occasion or an item removes it from the app at once.
• Deleting your account (Settings › Delete account) erases everything we hold about you, pictures included, immediately. Database backups are kept for 14 days, after which nothing is left there either.
• A guest account that holds nothing and has not been opened for twelve months is removed.

Your choices

• See and correct: everything we hold is what you see in the app.
• Take it with you: Settings › Export my data gives you all of it as a file.
• Erase it: Settings › your account › Delete account — or see how to delete your account without the app.

If you are in the European Union or the United Kingdom, these are your rights under the GDPR, and you may also complain to your data protection authority. We keep your data because you asked us to (to provide the app to you).

Children

got you is not meant for children under 13, and we do not knowingly keep their data.

Changes and contact

If this policy changes, this page changes, with a new date at the top. Questions: [email protected].