Privacy Policy
Last updated: October 2026
1. Data collected
Sipriz only collects the data needed for the app to work:
- Account: email address or phone number, or Apple, Google or Facebook ID, depending on how you sign in.
- Profile: display name, @username and, if you wish, a profile picture.
- Content: your lists and wishes (titles, links, prices, photos, notes, dates), your people and circles, reservations, thank-yous, comments, likes, givers' chat messages, private messages (texts, photos and shared gifts), group gift contributions, Moments (photos and videos), Secret Santa and Karma points.
- Preferences: language, appearance and notification settings.
- Notifications: your phone's technical identifier, used to send you the notifications you've chosen.
2. How data is used
Your data is used only to make Sipriz work: showing your lists to the people you've chosen, keeping the surprise on reserved gifts, notifying you of what's new and syncing your account across your devices. We never sell your data to third parties and don't use it for targeted advertising.
3. Who sees what
- A list is only visible to the people you've accepted and sorted into the circles chosen for that list. There is no public profile.
- The person being celebrated never sees who reserved a gift: they only find out when someone marks it as given to them.
- Givers' chats and group gifts are never visible to the person being celebrated.
- In Secret Santa, nobody, not even the organizer, sees the results of other people's draws.
- Moments are visible to your people for 7 days, then deleted automatically.
4. Phone contacts
If you agree, Sipriz looks up which of your contacts already use the app. Numbers are turned into encrypted fingerprints on your phone before being compared, and are not kept. Your address book is never sent in plain text. You can withdraw this permission at any time in your phone's settings.
5. Storage and security
Data is stored on Firebase (Google Cloud), mainly in the European Union, with encrypted transfers. Security rules ensure that each piece of content can only be read by authorized people.
6. Your rights (GDPR)
You can access, edit, export or delete your data, as well as your account, at any time. Account deletion is done directly in the app (My space, then My account) and erases all your data: see Delete my account. For any other request, write to us. You can also file a complaint with the CNIL (cnil.fr).
7. Third-party services
- Firebase Authentication, Firestore, Storage, Cloud Functions and Cloud Messaging (Google): accounts, data, photos and notifications.
- Sign in with Apple, Google or Facebook, only if you choose that sign-in method.
8. Cookies and tracking
The sipriz.com website sets no cookies and uses no audience measurement tools. Illustration photos are loaded from Unsplash. The app contains no advertising tracking tools. It only counts certain actions (app opens, gifts added, shares…) as global, anonymous totals, with no identifier of any person or device, so we can follow how Sipriz is used.
9. Payments
Sipriz is free and collects no payment data. Group gifts are only used to keep track of who's chipping in and how much: no money goes through Sipriz.
10. Minimum age
Sipriz is intended for people aged 15 and over, or younger people with a parent's consent.
11. Contact
For any question about your data: contact@sipriz.com.