Privacy policy

Last updated 29 September 2026

This policy explains what personal data Giftero collects, why, and what you can do about it. It covers the Giftero app, the website giftero.ee and gift cards delivered to Giftero by partner shops.

Who we are

Giftero is operated by Compy Solutions OÜ (registry code 17039207), Estonia. We are the controller of your personal data. Contact: info@giftero.ee.

What we collect in the app

Account: your email address and, if you sign in with Apple or Google, the name they share with us. Used to create your account and keep your cards in sync across devices.

Your gift cards: the details you save (store, balance, code, expiry date) and photos of your cards. Card text is read on your device; photos are stored so you can see them on your other devices.

Notifications: a device token, so we can send you expiry reminders and updates. Expiry reminders are scheduled on your device.

Gift cards from partner shops: when you buy a gift card from a Giftero partner shop, the shop sends us the card details and the email you used at checkout. If you are signed in to Giftero with the same verified email, the card appears in your wallet.

Sending a card to a friend: the card details you send are stored until your friend claims the card or you cancel.

The app has no ads and no third-party tracking, and we do not sell your data.

What we collect on the website

Demo requests: the name, business, email, gift card volume and language you enter in the form, used to reply to you.

Google Analytics: only if you accept cookies, we use Google Analytics to count visits and see which pages are useful. Without your consent no analytics cookies are set. You can change your choice under "Cookie settings" at the bottom of the site.

Why we may use it (legal basis)

To provide the service you asked for (performance of a contract): your account, wallet, reminders, sending cards and delivering cards from partner shops.

With your consent: website analytics and push notifications. You can withdraw consent at any time.

Our legitimate interest: keeping the service secure and answering demo requests.

Who processes it for us

Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging and Google Analytics). Google may process data outside the EU under the EU–US Data Privacy Framework and standard contractual clauses.

Zone Media OÜ, Estonia: hosting of our servers and the website.

Apple: Sign in with Apple and push notification delivery on iPhone.

Partner shops receive nothing from the app about you. They only know what you gave them when you bought the card.

How long we keep it

Account and wallet data (cards and photos): until you delete them or your account.

Records of gift cards issued by partner shops: as long as the shop needs them for its accounting of gift card balances, then deleted.

Demo requests: up to 2 years. Google Analytics data: 14 months.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Write to info@giftero.ee.

Delete your account in the app: wallet, account menu, Delete account. This deletes your account, your cards and their photos.

If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Children

Giftero is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date above and, for important changes, tell you in the app.